Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: 8WBJp7aZv53L5xukQqkbG5Gs94SS5SQO0/EK2vcstPU=
Subject key identifier: AC:E2:54:F9:2A:33:9A:9B:C0:24:EF:46:AB:82:70:6E:D5:90:E8:86
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019A503E09340082BE6A1A96282C810768F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0DF6
Signing time: Tue 04 Nov 2025 19:00:34 +0000
Manifest this update: Tue 04 Nov 2025 19:00:34 +0000
Manifest next update: Wed 05 Nov 2025 19:00:34 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: TpZ1mZk3x1R6ULJ/7UgH9iNY/8klLfa5OA9OFD5w41c=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:09:34:00:82:be:6a:1a:96:28:2c:81:07:68:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Nov 4 19:00:34 2025 GMT
Not After : Nov 5 19:00:34 2025 GMT
Subject: CN=ace254f92a339a9bc024ef46ab82706ed590e886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:f5:ae:bd:47:e9:df:ec:00:e9:92:ea:c7:
d3:e8:72:62:44:b7:20:f1:95:c7:80:6e:3a:d4:57:
b3:2e:c9:6d:ca:5d:d0:db:ec:db:00:9a:a0:3d:03:
ef:4c:f8:26:9b:ea:0f:f9:df:83:38:49:cf:24:83:
e3:3a:49:6c:5b:bd:87:ea:23:e1:e7:e4:eb:39:a5:
f6:a6:88:c8:38:c2:b4:1a:40:fe:54:1c:c1:92:69:
2b:44:15:29:bf:aa:b9:23:f5:cb:68:64:39:4e:cc:
96:07:2b:87:d3:80:1f:ac:47:37:84:84:ad:b9:ec:
c5:4c:9c:05:0f:20:9e:55:82:40:83:c3:8b:7b:3a:
11:63:14:2b:92:ec:a3:87:a8:4c:ce:ae:38:ed:85:
3f:a6:ac:d9:17:3d:ac:2b:13:ac:01:fc:3b:7a:66:
f8:3b:bc:fa:b4:62:6b:b4:c7:f4:2c:4a:5b:bf:38:
81:2e:e3:44:e3:7e:70:37:da:80:02:67:01:51:2d:
c6:32:ec:d0:57:3d:4c:b0:8f:a1:98:6a:4e:cb:75:
12:7e:46:ea:66:f8:ff:ce:3b:58:ab:95:ef:11:3f:
a6:d3:ca:68:37:77:3c:70:6f:4e:ae:8a:18:cd:28:
2e:77:e9:b2:61:c5:ba:bc:1b:b0:41:f4:8b:55:54:
01:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:E2:54:F9:2A:33:9A:9B:C0:24:EF:46:AB:82:70:6E:D5:90:E8:86
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:8f:03:1f:c3:23:ea:20:05:20:a8:82:dc:5e:ed:e2:80:61:
a9:7a:be:86:77:40:eb:6f:ad:14:03:da:66:05:ae:14:7e:f9:
f1:85:36:8c:1a:37:3b:bb:3f:3c:19:8f:1b:fc:5b:72:b4:db:
59:5e:4b:3c:06:c3:9c:63:51:ba:98:bb:03:c2:b9:e9:5d:9d:
2a:1a:23:ab:a6:59:20:53:67:41:09:13:6c:39:9f:2b:1e:6b:
e8:60:1f:87:71:9a:49:2b:57:a4:72:02:b4:f1:cf:b9:8b:24:
01:a2:32:41:53:24:ba:6e:c0:5b:ae:43:4d:6c:54:70:98:4d:
d0:e9:aa:7d:5f:f5:dc:79:ba:bb:c8:31:49:7e:d6:ea:ed:f5:
6b:a0:09:e2:ac:d9:21:7a:cf:1d:99:f6:3b:ae:aa:38:59:bd:
5e:81:39:cd:a0:5a:58:3e:df:d2:58:07:a1:1d:00:14:f1:37:
f3:96:dd:a1:57:4c:35:32:2e:a2:9c:ec:46:c5:7d:50:e8:4b:
3e:d3:49:5c:c5:10:9d:db:21:95:bf:49:5b:f7:a2:0e:18:96:
4f:1e:ed:a6:a2:98:b3:a9:f0:91:7a:3c:65:b8:94:08:29:14:
eb:5c:83:25:c2:8d:96:b9:e1:1f:9c:a0:b2:4a:92:ab:bd:c8:
21:3b:c2:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:25 2025 by rpki-client