Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: znbD2tRn9BAK5sPyjb1gJhnqVlVYplMRsWR87V9CQg0=
Subject key identifier: E2:11:01:6F:BA:CC:81:96:BE:16:EA:F4:72:C2:B8:BB:8E:CF:68:2A
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 019A71135541DAB6E217118D9EDFFAD6080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0E07
Signing time: Tue 11 Nov 2025 04:01:23 +0000
Manifest this update: Tue 11 Nov 2025 04:01:23 +0000
Manifest next update: Wed 12 Nov 2025 04:01:23 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: goOAWTwVPPaYmlhlwJoMzlNuBD7XFf28ofS/WnsZKxw=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:55:41:da:b6:e2:17:11:8d:9e:df:fa:d6:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Nov 11 04:01:23 2025 GMT
Not After : Nov 12 04:01:23 2025 GMT
Subject: CN=e211016fbacc8196be16eaf472c2b8bb8ecf682a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:32:81:69:3d:43:73:55:df:31:4e:6d:4e:49:
1f:29:38:d5:f0:ec:83:59:a1:d0:1f:41:d3:25:e5:
18:4d:ce:1c:ae:fb:5f:a4:22:e4:a9:6e:5c:ea:83:
48:da:c8:5e:70:44:b6:f2:08:ca:5b:e0:9e:98:be:
52:07:95:b7:31:da:63:25:e5:5b:a9:cd:62:5d:e3:
7e:99:95:8a:b8:99:5e:3f:3e:5c:0d:e3:d7:4c:7d:
46:1f:97:06:91:68:9f:4f:fa:a3:4d:ca:18:e6:2b:
55:d0:54:5a:05:89:4a:b4:e5:03:44:c9:d6:c2:fc:
b1:0f:a2:5b:ea:87:46:88:8b:5f:41:16:bc:94:3b:
18:62:34:b4:2c:dd:45:09:e1:72:a8:61:58:65:be:
af:ef:b1:48:11:ed:27:f1:88:a8:4c:d2:8e:a7:c5:
51:11:18:22:e6:e0:fa:ff:f3:b1:f9:e9:9b:5b:06:
57:1c:ba:cf:2c:da:dd:72:15:41:fe:34:7e:30:e2:
98:ce:3e:c9:ac:79:29:d1:71:06:8f:73:85:66:2d:
f4:65:ca:b7:c4:c5:c1:a7:91:3a:a4:68:bb:d8:39:
9d:27:ba:81:53:c6:2c:39:4e:4f:e9:11:7c:7c:29:
a7:0e:fa:4d:5b:d8:63:bd:2b:8a:9c:3a:74:29:9f:
db:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:11:01:6F:BA:CC:81:96:BE:16:EA:F4:72:C2:B8:BB:8E:CF:68:2A
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e7:6c:ca:66:21:ac:5d:58:90:36:c3:0b:2d:c3:c1:92:9d:
be:a0:0c:76:3a:c6:f7:b8:90:d7:c7:57:52:3e:02:08:59:87:
4d:91:d2:b8:69:f3:f5:d2:2a:75:7c:aa:24:b3:ee:46:eb:25:
a1:37:c5:4a:fe:dc:17:ac:3b:35:6a:67:4c:c5:b6:ec:aa:48:
ef:fa:4c:73:94:53:46:3f:1b:e0:e4:f2:0b:93:dc:ac:23:aa:
95:f9:b4:f2:9f:b2:db:ae:80:86:d7:c0:08:83:ed:0b:18:7f:
a1:07:51:15:7c:c9:be:69:ba:4a:1f:31:04:f6:0f:90:05:92:
5f:7d:15:ad:03:f2:60:d8:9b:9c:85:04:6f:a1:89:87:70:20:
a5:fe:e6:53:ee:c5:ce:da:06:c6:de:ab:bd:5a:3d:a2:1c:f0:
16:32:7e:6c:97:ea:7c:5e:76:c1:1f:5d:c7:7a:57:6a:6d:81:
06:24:66:7d:88:74:2e:a2:43:bd:eb:29:b4:84:99:cf:1b:c2:
8d:41:ee:66:3f:1c:e5:bb:4a:08:6b:27:16:f3:ce:28:1c:11:
5f:28:c7:6f:81:2f:94:18:16:06:d9:e4:0a:df:d0:46:ee:5c:
55:68:7d:af:92:e0:d7:5a:0e:45:a2:f2:fc:93:da:7d:5c:3a:
05:73:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:36 2025 by rpki-client