Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: HTv2E/ex5cTf+ouMV6IAjcjTXxJ80jOJPdUcU8AeL18=
Subject key identifier: 80:37:C3:15:62:EC:D2:C1:45:5B:F1:29:2F:C9:9A:13:F7:72:AE:70
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 01991F548D00886DB122AF2CB658A674EE9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0C8D
Signing time: Sat 06 Sep 2025 14:00:58 +0000
Manifest this update: Sat 06 Sep 2025 14:00:58 +0000
Manifest next update: Sun 07 Sep 2025 14:00:58 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: ztJWlB9vN2qdKAS9Zb0VOWfxac/s0XPnlTG7bTiqNf0=)
2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:54:8d:00:88:6d:b1:22:af:2c:b6:58:a6:74:ee:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Sep 6 14:00:58 2025 GMT
Not After : Sep 7 14:00:58 2025 GMT
Subject: CN=8037c31562ecd2c1455bf1292fc99a13f772ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d3:87:a2:32:ea:2e:d6:2e:1b:d5:d3:66:3a:
d2:a8:51:26:17:4b:b1:89:2a:7c:a9:5e:20:b9:e2:
83:41:b0:e1:37:5f:39:42:97:69:b9:0f:5a:09:c3:
79:39:76:e3:f6:e8:2e:f0:d6:5e:3b:c6:e3:f2:bf:
d3:7b:81:25:cf:08:da:92:2c:21:1b:11:e0:41:fa:
19:ed:65:14:67:b1:cb:64:24:1f:60:f7:34:fe:4d:
ee:6a:31:7a:24:f6:78:e9:a2:50:78:ec:6b:8d:e8:
aa:29:3d:ae:24:bb:b8:96:e7:15:11:0b:92:21:d4:
1a:ca:a9:39:4b:d6:4a:17:42:f4:a4:f6:07:07:95:
9d:be:91:ac:87:3f:47:d9:1c:9a:b2:aa:62:10:76:
a7:60:c2:2c:9c:7f:1f:94:d7:c8:d8:5a:b0:cd:14:
30:df:22:24:56:36:0d:8b:bf:49:e2:d5:89:99:cb:
72:de:ff:1a:2e:aa:67:01:97:a7:33:1c:36:59:30:
04:96:85:e7:db:9c:bc:2b:8b:f6:e1:47:04:cb:2e:
b2:27:f7:39:04:79:c6:87:0a:fe:fb:50:2c:ab:0c:
d9:26:eb:56:60:85:5c:86:ab:06:36:53:0a:d7:03:
f2:0b:68:67:71:56:82:4d:02:30:86:01:e5:69:6f:
01:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:37:C3:15:62:EC:D2:C1:45:5B:F1:29:2F:C9:9A:13:F7:72:AE:70
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a7:19:74:44:18:49:3f:2e:c6:32:a5:2d:ed:d6:9c:d5:a2:
9d:8e:32:e1:d0:3b:26:5e:94:5b:41:87:d8:7d:c9:59:f4:a7:
d0:fc:56:12:e5:64:cb:dc:9f:b2:17:f8:e1:7d:d9:c6:b9:57:
0b:ef:f8:6e:6a:5a:53:ae:3a:f8:39:bc:a8:7a:d0:d5:ca:fb:
f4:9e:8e:29:3f:10:2f:34:a8:5c:66:94:d9:d7:31:bc:55:da:
ca:9d:fa:19:83:e8:39:e2:2e:db:d1:1b:2b:c9:a1:86:b8:7c:
44:16:90:dc:ac:8f:8f:f1:20:b4:16:77:38:23:9e:57:18:d1:
52:4b:97:b4:2b:f4:b6:29:28:c5:fb:c5:d7:e2:80:2f:a9:53:
6f:e6:87:cc:3d:af:df:9e:71:87:c1:af:f9:af:71:68:1f:44:
f9:db:c6:43:2d:95:ea:f5:5b:35:9f:ed:b3:fb:83:d3:2b:3e:
a3:ad:23:b9:79:6a:57:cd:89:86:01:21:aa:20:8e:8c:23:40:
b3:7a:e4:40:ac:36:ee:6e:c5:0f:00:b1:b0:98:3d:26:a5:4c:
2b:31:9c:8d:3a:55:d7:1f:91:fd:f8:cc:0d:f0:cb:8e:32:bf:
27:a6:0c:00:06:1b:26:98:dc:a2:c6:57:3e:b7:bd:22:a5:dc:
77:e9:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 16:11:21 2025 by rpki-client