Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
File: QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft (raw, json)
Hash identifier: dDQp7Xxqr74W9NY7Vy2bn95ZP5t7JqjvVE5MCuO1SPE=
Subject key identifier: 9F:80:88:19:B6:10:A1:45:7D:9B:12:81:B9:A8:43:21:FC:C1:31:EA
Authority key identifier: 41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
Certificate issuer: /CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Certificate serial: 019A71B77709102B1F2F31400C0D6CE2DD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
Manifest number: 060A
Signing time: Tue 11 Nov 2025 07:00:40 +0000
Manifest this update: Tue 11 Nov 2025 07:00:40 +0000
Manifest next update: Wed 12 Nov 2025 07:00:40 +0000
Files and hashes: 1: QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl (hash: WI19P8wQPbX1YkRQbQXiDY6AozBrn0GMMkvRYgC/e8c=)
2: Z6Wkv7AZrSmiWgbMuz5hZVggR7E.roa (hash: MRaF6vDhyEMplwKKtwCPw92vpK44c5JniyQIX+roRzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:77:09:10:2b:1f:2f:31:40:0c:0d:6c:e2:dd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166fc54e2d241f441ad03cc18e331bfe34a57ef
Validity
Not Before: Nov 11 07:00:40 2025 GMT
Not After : Nov 12 07:00:40 2025 GMT
Subject: CN=9f808819b610a1457d9b1281b9a84321fcc131ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:67:c9:d5:3a:d5:0a:15:ef:81:e6:0f:a9:e8:
9e:be:ce:45:fb:29:47:7c:c5:7d:0c:f8:0b:12:bd:
55:fd:35:6b:8f:2b:ba:2b:c0:6b:41:b0:6e:f8:53:
f1:9f:cf:8e:2c:c2:e2:fa:e3:1d:68:12:53:cc:44:
6b:d4:1e:9e:b2:82:48:90:14:57:42:6f:56:1a:c4:
eb:88:41:9b:60:a0:65:b9:6f:cb:83:f1:3a:ac:41:
95:a7:25:a2:55:8e:23:f9:c0:52:34:f1:50:12:45:
38:e6:24:6d:f4:6e:ff:62:ab:9f:47:1b:13:be:de:
e2:15:e6:f4:e3:b3:d9:66:43:5e:bf:ef:ca:65:47:
0e:80:5e:4c:c9:0b:dd:86:6b:75:6d:d1:ce:c0:8b:
3f:72:9e:67:20:59:3f:e9:bf:a3:83:bc:e2:18:b1:
b7:51:4f:8d:23:b8:f3:a1:8c:2c:7e:80:64:9e:47:
d7:5a:ba:fd:e2:fa:fd:28:43:47:67:65:cd:96:87:
38:fa:59:3a:33:94:e2:33:e3:0b:67:01:c6:6b:25:
22:3d:ad:47:21:87:79:41:cf:67:39:be:4d:9c:8a:
94:33:87:f7:20:9d:de:17:be:b0:04:39:0a:e5:08:
83:ff:af:1c:14:97:38:6d:ef:33:18:12:4e:5d:34:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:88:19:B6:10:A1:45:7D:9B:12:81:B9:A8:43:21:FC:C1:31:EA
X509v3 Authority Key Identifier:
keyid:41:66:FC:54:E2:D2:41:F4:41:AD:03:CC:18:E3:31:BF:E3:4A:57:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWb8VOLSQfRBrQPMGOMxv-NKV-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/9d7886-34dc-4998-9717-f11c6e06488f/1/QWb8VOLSQfRBrQPMGOMxv-NKV-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:78:f2:85:cd:0a:9e:58:f4:65:52:c3:3e:f0:56:27:9b:50:
75:97:d9:0f:9c:c1:6e:69:38:aa:36:11:dd:93:73:e9:2c:07:
df:1a:bc:36:2b:63:50:71:2a:ac:32:a4:d4:7f:7e:2e:b1:ac:
da:17:f0:47:14:27:4c:ef:3a:f2:02:25:18:5c:b0:93:06:b2:
96:f1:3f:ab:94:cb:07:bd:11:1d:d9:43:18:ca:73:cd:8a:52:
05:eb:b2:5f:41:1f:42:50:21:f0:2f:d0:54:c2:12:58:8b:39:
99:ff:0e:00:cd:a7:8d:89:b3:15:03:73:b9:cc:af:fc:f5:aa:
a6:04:2d:0b:c3:bb:7b:5e:6d:d0:53:12:11:c5:d0:f4:00:bb:
7d:37:a0:5c:ea:10:66:70:d8:a8:80:38:8b:b1:ff:7d:ca:ec:
eb:20:c4:a9:dc:8f:99:28:aa:9a:c0:84:cf:2d:04:81:f9:cb:
d3:4f:f0:3a:83:95:f7:bd:e5:c1:d6:4d:18:f6:cf:b0:23:69:
ec:93:dc:e5:62:22:c7:f4:56:82:4e:a4:c9:c1:fb:5e:17:74:
e0:99:c7:5f:45:37:06:3d:64:13:1f:8a:cc:07:f9:e9:75:ee:
b9:52:6a:d3:af:a4:3e:62:b5:c7:92:a7:14:d9:0f:85:59:f3:
24:0f:65:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:53 2025 by rpki-client