Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: xEMEU9TRCvPtzD51oXsXQsYkmOHo6NTaRDTLjaYcsKc=
Subject key identifier: DC:CD:9D:4F:10:6D:80:17:3D:E2:0B:E8:4D:AC:27:BD:9F:A0:59:42
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 019A7225D2A1FAD5D18D3C9B5147810C6BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 10B2
Signing time: Tue 11 Nov 2025 09:01:12 +0000
Manifest this update: Tue 11 Nov 2025 09:01:12 +0000
Manifest next update: Wed 12 Nov 2025 09:01:12 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: 7oVt4gX3K1S9IU8FEfypGr3CbM06YwhBvKTm8kX8N7c=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d2:a1:fa:d5:d1:8d:3c:9b:51:47:81:0c:6b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Nov 11 09:01:12 2025 GMT
Not After : Nov 12 09:01:12 2025 GMT
Subject: CN=dccd9d4f106d80173de20be84dac27bd9fa05942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:ac:7c:ea:e1:31:57:bb:af:cb:98:87:c5:
11:1f:71:34:e6:3b:25:91:a6:86:47:57:9c:65:0c:
e2:7c:72:8b:6f:ab:d0:bb:ed:e9:05:e6:aa:a2:2d:
09:b5:8d:21:8a:8d:a2:ff:43:55:39:74:66:5e:02:
8b:1b:1d:9c:42:6f:ba:b1:db:ce:4e:63:12:ba:ec:
db:4f:6f:bf:2b:e2:f5:33:18:e8:61:26:30:74:dd:
58:01:ec:f6:23:7b:ff:9c:75:c7:ba:e2:4b:7a:21:
88:14:0f:ee:d3:7b:a0:08:9f:fd:7f:15:44:fd:c8:
75:a9:fb:86:b6:a3:1c:15:28:b3:d6:82:e6:97:81:
b8:ac:6d:27:97:bc:b3:07:e4:92:4f:01:f4:2b:58:
0a:37:76:68:da:fa:ff:ee:69:db:e1:cc:28:39:15:
4c:64:3a:79:dc:84:92:30:3a:4f:5f:2c:0e:29:5a:
4e:11:f5:10:80:2b:0a:63:3d:20:07:43:79:2d:d2:
06:8d:c8:b6:04:3f:6b:bf:8c:23:c8:fb:cb:bf:82:
f7:8f:2e:33:b1:31:fd:70:da:07:79:60:ee:b8:72:
d5:74:1f:26:f0:fd:b6:f8:f9:51:2c:bc:51:b8:95:
aa:d2:9a:5c:67:b3:0e:5e:96:5c:97:71:f0:84:30:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CD:9D:4F:10:6D:80:17:3D:E2:0B:E8:4D:AC:27:BD:9F:A0:59:42
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:3a:ab:a4:f5:1d:77:69:6e:5c:b5:a5:3f:75:d0:47:16:
5a:07:34:e5:45:4d:4d:f4:c3:df:17:d1:a2:13:46:e2:80:60:
ef:3c:6b:b5:c4:49:26:d0:83:77:aa:c6:07:2e:9f:56:a1:1d:
41:ec:c0:82:f6:a4:bc:79:12:55:37:e5:96:b9:e0:ba:1d:df:
b7:a1:08:cc:e0:d5:e7:1c:7a:43:01:3c:29:86:5b:bd:48:cb:
ea:bb:a7:31:5d:2a:f1:8e:cb:1e:69:84:b0:e0:ab:d8:8d:4f:
9e:3d:5b:4c:1e:a9:81:55:1a:57:90:8b:a9:5b:8d:d0:63:d5:
4c:96:5e:15:74:86:78:9d:b2:5d:c8:70:39:51:42:ac:6f:05:
a9:df:bc:10:bb:37:61:88:18:52:27:42:78:32:07:19:1b:32:
dd:15:3f:e5:a1:ca:a9:09:b7:fc:02:c2:90:c7:3f:ad:4f:2e:
a2:90:c7:be:16:86:e1:16:a4:f1:49:ac:8f:5f:6b:00:bb:e5:
8f:80:21:f2:3b:e2:3e:0c:72:9b:6d:64:35:c4:0e:aa:f5:46:
5d:50:a1:2e:ed:9c:81:42:bb:33:4c:7f:ae:6b:b7:e5:e8:07:
cd:71:07:99:0d:bb:e1:4d:a8:b1:c9:9a:84:2c:eb:89:87:c4:
82:e4:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:36 2025 by rpki-client