Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: 5KAlt3eo5Y0pyH/LFXSy3M6vP9LGnf2SWhPGi9Jzrhk=
Subject key identifier: 5C:1A:FC:A3:F8:B6:2D:90:24:F0:2F:4C:A2:57:07:23:54:4E:B4:55
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019922FA3C32EC55BC33450C44D1C349E3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0D5A
Signing time: Sun 07 Sep 2025 07:00:48 +0000
Manifest this update: Sun 07 Sep 2025 07:00:48 +0000
Manifest next update: Mon 08 Sep 2025 07:00:48 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: UWZSuIKnfqyAW+P1UjmSgcJ90aWF7nkutliNWO6Arkg=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3c:32:ec:55:bc:33:45:0c:44:d1:c3:49:e3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Sep 7 07:00:48 2025 GMT
Not After : Sep 8 07:00:48 2025 GMT
Subject: CN=5c1afca3f8b62d9024f02f4ca2570723544eb455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b0:a3:f0:84:bd:9c:1d:54:7a:6d:cb:81:ef:
fc:ea:a7:01:ef:9a:db:37:0f:32:db:af:65:5b:82:
59:bf:a8:10:bd:66:af:1e:63:36:1d:fd:ee:86:62:
ed:00:67:36:2c:ec:16:db:53:14:10:32:3e:a7:c8:
07:52:72:55:c5:18:37:b1:e4:9c:9b:3a:b6:a8:47:
9b:8f:ff:cc:d2:d6:fd:61:43:61:d0:8f:0f:7d:19:
7f:7a:3d:a0:26:ab:cf:68:05:89:12:06:0f:47:46:
5a:f0:16:d0:46:41:af:d9:b1:1e:d9:6c:cc:c6:a1:
b5:6b:01:eb:5f:64:a4:82:1b:f9:b5:ea:bd:63:22:
9f:e6:15:0a:01:65:52:3f:15:e1:fe:4a:1d:d2:ee:
0d:5d:ea:85:64:5a:87:0c:76:5d:be:92:c8:d4:68:
bd:e0:5f:3e:27:c6:63:d6:80:16:1f:bd:06:eb:ef:
9f:4a:f5:60:d3:a0:e2:19:c8:64:ca:86:08:a2:fb:
79:ba:80:69:70:17:0f:45:65:2c:9f:c0:8d:ba:2e:
ab:72:9b:77:9f:00:bd:3c:d2:63:8f:54:e5:52:7b:
3d:8c:66:8d:36:0a:67:11:60:eb:d6:e5:4f:ce:70:
4c:4b:59:73:8a:76:33:57:5b:1f:6b:f9:22:06:ef:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:FC:A3:F8:B6:2D:90:24:F0:2F:4C:A2:57:07:23:54:4E:B4:55
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:00:7d:d7:3f:b2:62:59:01:0e:7e:e5:11:05:a8:3e:d4:ad:
27:f1:5d:be:d4:53:9e:e0:40:f9:05:e1:7d:45:8c:15:19:4a:
ed:02:e7:5a:54:53:fd:8a:43:de:eb:85:e2:14:c0:de:e8:1f:
d5:3f:2e:e1:da:62:17:26:6f:19:73:da:9d:a7:06:9f:0d:5b:
92:99:4c:23:dc:d2:73:67:df:e3:88:14:55:5a:2c:82:5d:27:
3a:ac:df:c4:e6:a9:4f:a0:26:d4:9e:84:de:f1:ff:88:36:3b:
32:1f:e2:93:af:ce:66:3c:1a:fb:49:4d:ba:dd:86:a5:e4:69:
93:4d:b7:2a:ce:21:94:53:ce:ac:17:03:af:ff:3d:5f:b5:92:
21:bf:de:a0:77:3a:b8:69:05:be:d4:fc:18:c4:8d:d4:14:b0:
61:73:d4:5b:10:b3:3c:d5:92:01:53:ac:ce:f9:e7:04:d2:4a:
34:1f:94:1c:2a:ce:be:e9:0a:0d:58:64:e4:fe:8c:94:7b:fd:
3a:86:bf:07:2e:77:5b:3a:52:56:66:77:4a:ed:15:e5:dd:44:
bc:7a:36:16:1c:9e:68:e8:ea:5c:ee:8e:27:94:e4:4a:8c:4a:
9f:96:ac:30:bc:cc:1b:8d:59:36:86:a5:8b:95:f1:f4:6b:fb:
fd:a3:ee:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:05:49 2025 by rpki-client