Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
File: QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft (raw, json)
Hash identifier: jkknq1VAM8pS9IpdMaUe8QtTHQMOonsQGEXwWLEClas=
Subject key identifier: 8D:8B:BA:EE:93:19:6C:3A:0C:AB:D1:9D:22:F0:97:21:00:27:C4:DC
Authority key identifier: 40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
Certificate issuer: /CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Certificate serial: 019A146082F9197900947A5AAB7503D27846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
Manifest number: 0D0C
Signing time: Fri 24 Oct 2025 04:01:00 +0000
Manifest this update: Fri 24 Oct 2025 04:01:00 +0000
Manifest next update: Sat 25 Oct 2025 04:01:00 +0000
Files and hashes: 1: QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl (hash: J/R/1sIVcD7z1O7KiDEC0vgT6Kp3lb3RDnDMbwDfaJA=)
2: vfjUIsx7CDVuZMrXZKkgTFoznUI.roa (hash: kc2fyWr6FJL7rTi0mPaMQj4eZbP6Y0dyJoouX+alOvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Oct 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:14:60:82:f9:19:79:00:94:7a:5a:ab:75:03:d2:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cf69cca2c86e194754788edcd88e352ed4e11c
Validity
Not Before: Oct 24 04:01:00 2025 GMT
Not After : Oct 25 04:01:00 2025 GMT
Subject: CN=8d8bbaee93196c3a0cabd19d22f097210027c4dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:b3:9e:9e:fb:57:77:ff:50:fa:10:cf:79:
f3:d3:86:ba:43:05:f2:96:1c:7f:07:71:06:08:d6:
7e:c8:e4:73:0b:45:4f:f1:01:39:b5:6f:63:8f:21:
07:eb:ad:5b:8c:80:ef:a4:a6:9c:87:1b:4d:80:1f:
10:6d:21:f5:d1:5e:0f:6c:1a:b6:a3:32:9a:a5:79:
6c:b8:14:0c:7b:71:c4:dd:51:0e:52:e4:2b:3e:2b:
d3:a0:a8:3f:96:e7:88:98:b6:81:51:7c:9d:75:5c:
da:ad:6c:fb:c4:16:ab:81:c9:ef:90:81:d8:73:4d:
02:1d:d0:ce:5d:4c:26:9b:b5:df:82:aa:2d:9f:89:
6e:1a:e3:de:02:d0:8b:29:ba:13:d4:2a:80:5f:6b:
0a:16:19:52:41:69:41:9c:69:d3:2e:f7:28:89:5e:
74:89:6b:b8:8c:cc:4c:ff:0e:4e:f1:5b:e8:6f:78:
b8:34:1d:7f:bd:03:09:04:d7:b4:1d:45:7b:bd:7e:
bf:e4:2e:9f:f9:cd:8f:df:6f:9c:6e:e6:87:6a:a2:
2a:e5:19:b7:d9:15:0c:fc:d1:66:40:67:8b:e1:f9:
39:4d:9a:6c:61:ac:dc:86:5e:44:99:30:b2:29:f3:
db:d3:61:87:11:2b:f5:4b:4e:3a:36:53:cb:31:47:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8B:BA:EE:93:19:6C:3A:0C:AB:D1:9D:22:F0:97:21:00:27:C4:DC
X509v3 Authority Key Identifier:
keyid:40:CF:69:CC:A2:C8:6E:19:47:54:78:8E:DC:D8:8E:35:2E:D4:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM9pzKLIbhlHVHiO3NiONS7U4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b8b606-c65a-409a-ba8d-cf1a5d8e5f6d/1/QM9pzKLIbhlHVHiO3NiONS7U4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:a3:2f:a8:fb:93:d4:f4:55:9b:a9:6f:3e:f0:91:94:36:c3:
cc:0c:ff:ba:9c:e1:7d:c1:f9:6c:79:62:a8:c2:fa:a4:35:3e:
6a:94:9c:f3:5b:2e:21:11:5b:2a:3f:cd:dd:52:2a:37:b3:54:
50:ed:7e:22:8d:74:a4:10:41:b5:8f:10:f6:f0:d7:42:7b:c5:
e7:43:9f:67:09:1b:96:b1:da:71:16:18:a6:06:e1:a5:7c:2b:
91:ae:20:84:16:7b:64:d4:6d:35:2a:1b:a6:7e:f7:56:ea:a8:
ee:d2:64:84:40:ae:15:44:49:72:cc:10:23:54:ec:1c:14:fa:
62:c6:95:2a:3a:3d:0e:db:c3:6c:2d:4a:1f:ac:cc:f7:d7:18:
74:66:53:45:84:4e:7c:d6:8b:74:88:08:8b:07:13:40:91:12:
5d:1f:95:3f:37:f3:03:62:c4:d2:3b:8c:cc:92:6d:9c:f4:21:
fe:34:e9:27:4f:e0:9a:7e:85:c0:0d:91:88:15:30:f6:28:c3:
bf:56:33:c6:1a:c7:8a:ed:c7:e5:67:a0:a4:d4:e7:b7:0b:36:
3e:cc:7f:d6:cb:7c:2b:93:65:5f:99:73:73:7e:08:5a:ff:89:
4c:c7:d7:88:41:d5:15:c9:da:28:63:5d:48:aa:10:62:5d:7c:
53:aa:ed:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 11:35:48 2025 by rpki-client