Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
File: Qs9KEo0J38S4sDWhLNgx-fewFGk.mft (raw, json)
Hash identifier: Pc9rCdctMjJxgmQVNa2Yl1qknREinhSn7lsrThwX2x4=
Subject key identifier: F0:EB:AE:3F:CD:77:5A:6F:94:AA:67:43:00:B2:F9:F2:94:68:47:F6
Authority key identifier: 42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
Certificate issuer: /CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Certificate serial: 019A7225C83FA9598272F91EAFD76410FBC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
Manifest number: 1036
Signing time: Tue 11 Nov 2025 09:01:09 +0000
Manifest this update: Tue 11 Nov 2025 09:01:09 +0000
Manifest next update: Wed 12 Nov 2025 09:01:09 +0000
Files and hashes: 1: 2rG3zP2nsK1WFDdtam1fkefUVec.roa (hash: FYwcLySS6BHsPeqa2YZMNFpU87urYtsqq/j3a/UUmqo=)
2: G4MlXm_89uj6pHE4Hj0jm0JnAPs.roa (hash: IvJvABmtoL2D5H2lLbc36SYTprrxJ3+le+YIp65E/hA=)
3: Qs9KEo0J38S4sDWhLNgx-fewFGk.crl (hash: AMWJfeY2eNBjwi4UkQAvXZ6yKBa43GhZ8/kILQnFLZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:c8:3f:a9:59:82:72:f9:1e:af:d7:64:10:fb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42cf4a128d09dfc4b8b035a12cd831f9f7b01469
Validity
Not Before: Nov 11 09:01:09 2025 GMT
Not After : Nov 12 09:01:09 2025 GMT
Subject: CN=f0ebae3fcd775a6f94aa674300b2f9f2946847f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:d6:13:84:d4:2a:9a:a6:bb:fd:cf:01:52:
44:c6:3e:6a:62:d1:ca:8a:d9:08:46:af:5d:0c:92:
7d:2b:a1:85:bd:ee:9d:20:9a:03:e5:b1:1e:67:84:
fe:2b:ea:ae:d0:6a:8b:65:4d:3b:90:e3:32:2c:a6:
9a:d2:3e:28:4d:f7:5a:88:1c:5f:88:6d:3a:8f:f2:
18:ae:0d:1c:a1:15:30:12:b4:a5:9d:1a:3e:29:e9:
bf:8d:34:d9:07:d7:99:ea:f9:b3:b5:e7:70:7c:80:
ec:6f:66:01:21:10:2d:c0:71:a7:dc:34:b1:2c:a9:
7e:52:a0:0b:c8:d2:ef:ed:a7:04:9c:63:90:31:88:
c5:cf:11:ea:11:c4:14:58:71:12:b5:17:b6:f7:be:
68:e1:53:80:8c:f9:24:8d:8f:6e:07:1a:ac:01:d0:
2d:5c:60:67:a0:61:75:80:8d:18:bb:91:2a:28:f6:
02:99:b5:ca:02:ce:1b:40:6f:ae:b3:38:16:8d:2f:
ee:59:06:4d:2c:3f:3a:60:ca:58:4a:36:87:44:46:
be:54:79:e2:ca:69:b3:78:53:8b:3f:63:b0:8e:18:
92:d6:26:7d:91:8d:db:46:1d:da:25:72:52:16:ad:
3d:bd:71:fa:42:b8:0c:f8:ba:83:b8:58:3d:82:9f:
f5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:EB:AE:3F:CD:77:5A:6F:94:AA:67:43:00:B2:F9:F2:94:68:47:F6
X509v3 Authority Key Identifier:
keyid:42:CF:4A:12:8D:09:DF:C4:B8:B0:35:A1:2C:D8:31:F9:F7:B0:14:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs9KEo0J38S4sDWhLNgx-fewFGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/5da729-ba26-4fda-9011-0b04375f9b36/1/Qs9KEo0J38S4sDWhLNgx-fewFGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:31:a9:03:31:00:a1:98:6d:04:90:0e:9a:35:bf:46:25:0a:
6a:05:e4:3c:51:6a:a7:05:e4:0b:4b:11:7c:2e:56:69:99:be:
59:7d:d8:4c:44:3c:ea:c9:03:13:cc:5f:71:d4:69:72:f6:57:
a7:70:18:12:40:dc:66:10:7b:5a:e8:13:b7:27:e6:89:8f:b8:
52:26:8b:3c:2f:8e:c6:78:68:28:c8:c8:cd:bf:1f:e2:74:50:
6f:b3:b5:f5:72:2c:5c:b9:a5:39:45:a5:b5:2f:5d:a9:9a:17:
55:d9:df:b7:5b:97:40:a1:df:03:62:bf:09:fa:52:9f:a8:cd:
bd:70:b7:02:61:32:a3:4f:ee:93:81:bd:d0:8e:9a:d6:17:d0:
a4:75:96:14:14:47:f4:fa:7c:b2:36:78:f0:6a:72:30:fb:d4:
bb:24:ac:84:e3:19:4b:0c:2f:fa:5c:97:03:5c:63:53:a0:21:
76:6e:e2:c3:83:43:65:6f:d2:6e:72:f8:0b:24:92:36:a3:3b:
5e:61:c2:01:aa:8a:d1:4f:c2:99:84:cc:72:fe:d5:b4:3d:fc:
c9:9e:15:b0:ca:d0:24:63:19:18:d5:58:cb:b0:2e:82:22:79:
87:6e:96:a8:c4:ec:f5:36:7b:13:b3:a3:c6:cd:e1:8c:ff:f4:
7e:bc:df:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:42 2025 by rpki-client