Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: A51J8iO5y4Lm2crGqL0/ehKyK4FfrNx0FuFUyeaC7Y4=
Subject key identifier: EF:48:AA:99:2D:E3:D8:E6:0B:5C:93:72:31:86:6E:27:15:E5:AA:C3
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 019A01EC1390300BE1134B6F1582A60CCB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 08D2
Signing time: Mon 20 Oct 2025 14:00:39 +0000
Manifest this update: Mon 20 Oct 2025 14:00:39 +0000
Manifest next update: Tue 21 Oct 2025 14:00:39 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: RNSqbmmNyozO1cJYsV0UcdifIvxxmhMAN65kudbejSk=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:13:90:30:0b:e1:13:4b:6f:15:82:a6:0c:cb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Oct 20 14:00:39 2025 GMT
Not After : Oct 21 14:00:39 2025 GMT
Subject: CN=ef48aa992de3d8e60b5c937231866e2715e5aac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:27:b0:f3:6b:9b:a8:83:4b:71:7e:30:78:
11:f6:53:be:de:d8:8f:6e:bd:76:6b:7a:0e:46:62:
c9:74:1a:74:34:64:c5:48:2e:c7:0c:b1:f4:ef:69:
85:d8:97:0d:8c:cf:b7:68:3d:0a:84:e2:bb:8f:62:
87:4c:d8:68:71:11:6b:ed:fe:d1:96:00:60:15:bd:
f4:76:3e:66:2b:50:f3:b2:8e:dc:5e:92:d4:34:bd:
31:2e:51:35:c3:e2:6c:a1:2a:59:0d:65:53:af:f5:
12:c4:e7:18:56:af:6f:22:f5:e8:e6:82:85:f7:66:
11:98:e0:95:65:76:68:b2:44:eb:9e:ab:a3:40:cc:
46:0d:3d:e3:15:92:a2:4d:97:ee:9f:e7:0e:b7:ff:
e7:a0:d2:a9:50:dc:96:f9:41:2f:72:af:51:b9:b3:
e7:08:16:73:61:89:82:5e:e0:33:7c:ce:c1:0e:ba:
02:ee:82:84:70:02:ae:0d:02:76:8b:ba:04:08:de:
8e:f7:ce:a3:3a:a3:de:28:77:ba:e0:43:6f:d1:9a:
f4:d4:e2:71:7c:af:29:71:6d:73:81:67:9f:2f:ce:
f9:f2:61:f4:c2:e0:30:fe:63:fb:ae:cc:8f:56:34:
53:44:c7:4c:2e:89:13:88:d2:29:f6:19:20:80:87:
b9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:48:AA:99:2D:E3:D8:E6:0B:5C:93:72:31:86:6E:27:15:E5:AA:C3
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:84:e1:f2:08:3e:8a:97:5f:33:ea:9c:fc:94:15:31:0f:17:
57:ba:68:2e:7a:80:ed:84:bb:c6:ef:b3:ed:cc:9e:f1:75:bd:
43:f9:54:96:d2:2a:57:fb:8e:53:3b:83:6d:72:31:36:d3:8b:
43:cc:9f:f3:a9:ec:79:1a:6b:6f:0b:d8:fc:5c:a8:7f:2e:c5:
47:94:cd:bb:1a:18:f4:8e:65:aa:6a:1f:85:f6:66:d8:7e:dd:
64:00:8b:33:84:66:28:93:e4:2e:59:02:ed:2e:5f:99:c9:5b:
1d:d2:78:6c:b8:dd:06:df:23:ad:a6:6f:2d:70:d5:ef:03:07:
86:a3:8e:5d:ad:c3:e6:1b:3c:88:b3:11:35:f7:5f:54:d6:aa:
eb:c4:65:b8:66:21:ba:e7:21:e2:22:fd:13:d2:ad:a5:7d:f1:
35:bd:0c:f2:b8:b9:e5:50:e8:c5:f1:f0:78:46:c7:f7:29:a9:
07:c6:25:20:37:ab:90:b5:c6:b6:6d:c2:ec:02:00:9d:fe:5c:
04:7d:78:d1:3e:ad:c3:30:5e:f6:bb:6f:d8:2f:7d:11:ff:3d:
78:29:e3:a4:63:e2:5f:b4:97:e6:9d:d9:e6:1f:6c:50:d5:98:
b2:2f:2a:74:d5:43:81:15:87:40:16:c3:2e:db:0d:38:92:bc:
d0:9b:db:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:49 2025 by rpki-client