Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: SKLCZq/LY8AZ2nkioCxgharvQBca9ueb4M/70irp+Hs=
Subject key identifier: 9A:06:F4:6D:45:DB:7B:75:C4:4C:B9:98:B3:14:14:88:EE:DA:08:1E
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 019A72266EEAEFD1803C8BFF424983CBD589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 0808
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: /siYKmqxttAH8W9u1MXgHz9+2EgzRGf4Z10sIKGxIII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:6e:ea:ef:d1:80:3c:8b:ff:42:49:83:cb:d5:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=9a06f46d45db7b75c44cb998b3141488eeda081e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3d:9a:2b:6f:ea:65:1b:c6:99:3e:0e:4a:f2:
ef:1b:2b:e2:45:2e:41:d0:f4:08:a2:b5:5f:62:e5:
4c:4c:3e:fe:48:c0:28:0c:f9:05:d3:80:03:5a:3c:
75:13:e1:5d:bb:55:da:bd:7b:15:9a:c7:a7:d5:5c:
17:a4:e0:7d:96:84:84:99:e1:8a:70:36:1d:8c:0f:
3c:fb:7d:53:2a:ce:a7:3d:c0:b3:25:84:a4:eb:4f:
49:de:83:85:ea:88:87:1f:18:5a:fe:96:96:13:96:
ee:3c:5f:07:ae:29:d4:be:91:79:fb:78:1b:11:69:
8f:25:b5:41:5e:2d:4b:60:67:27:82:28:61:77:d9:
1a:02:61:10:5f:ee:d8:30:27:c1:6e:05:31:2d:ab:
bd:be:e0:50:a8:f2:9e:0a:de:1c:1e:cb:1d:9c:bd:
47:42:ea:88:26:6c:d1:f2:ff:25:89:f3:9d:17:70:
98:a8:ea:93:d2:6d:2a:f9:6f:3a:4b:d2:f5:6b:2e:
a8:fc:af:95:b7:9b:a1:b5:d3:e6:90:6d:60:e2:2c:
a9:64:1f:47:87:e2:2b:6a:a1:e9:39:9a:c9:fc:7c:
6c:00:84:c4:94:8d:24:7e:a6:f2:c1:af:2e:4d:64:
57:94:aa:91:24:db:74:4d:06:36:e5:a3:62:67:70:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:06:F4:6D:45:DB:7B:75:C4:4C:B9:98:B3:14:14:88:EE:DA:08:1E
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ef:71:df:0d:4a:09:6d:9b:40:e6:4a:e6:d9:be:5c:13:b4:
c7:31:ab:80:49:0b:cb:94:d7:93:02:48:a8:8f:c7:db:6f:37:
67:01:e4:37:97:20:74:ab:10:72:f7:2a:a8:a0:50:d7:06:10:
27:fc:26:9a:39:2c:9d:da:ff:3a:9d:61:4d:4c:6f:e6:2c:74:
5d:3f:b7:64:f9:77:54:9e:91:d3:a7:c9:df:f7:90:be:90:a1:
a1:b0:16:66:9f:f9:ba:d5:38:af:fe:a2:79:05:a1:73:14:ad:
7e:39:a1:79:28:55:d5:a1:3f:1e:d5:4a:ff:04:d6:f8:04:0a:
77:b1:72:0f:ba:92:a0:69:3a:3c:89:70:9f:1a:7f:39:55:68:
88:fe:b2:16:5f:d8:0a:5e:56:f4:3e:85:b4:3f:18:da:29:23:
c2:64:8c:b5:90:39:e3:89:11:89:81:de:24:2b:26:9d:76:24:
13:f8:d6:8b:e8:5c:4d:8a:3c:33:18:b2:47:5e:bd:5b:21:31:
95:2d:3c:72:6f:ae:ee:69:c0:f6:24:20:6e:1d:b3:8d:8e:ee:
f1:0e:49:df:30:4d:a7:e8:d2:eb:4b:7f:22:8c:4c:f7:83:c2:
5e:92:3e:b9:9d:b0:80:b9:d5:56:ab:36:54:88:50:04:83:4d:
2a:bf:ec:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:07 2025 by rpki-client