Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
File: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft (raw, json)
Hash identifier: JxDdrIyPeZHv8fdfv/8TribKqdkB8RkkoZaxetIFjBU=
Subject key identifier: DB:0F:E8:6A:2B:A2:AD:AF:A6:E1:9A:CF:B6:9F:29:FF:8E:FF:C0:44
Authority key identifier: 43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
Certificate issuer: /CN=43cf416193a1c2ed3056b647e5a46503148e3824
Certificate serial: 019A66C6126BB0DDFEECB17BB3C99BE5FFDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
Manifest number: 07D9
Signing time: Sun 09 Nov 2025 04:00:48 +0000
Manifest this update: Sun 09 Nov 2025 04:00:48 +0000
Manifest next update: Mon 10 Nov 2025 04:00:48 +0000
Files and hashes: 1: EVfs3Ty5us2kONM9lNbKxeOpQy4.roa (hash: XNAy20rJW1bN/SCZtyAydEWkC3qMnBorsPnV2qCqZ6A=)
2: Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl (hash: 1D7QTe3/r0xmc13RxKa211Rwjbr1U03jhXleOdlEp1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Nov 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:66:c6:12:6b:b0:dd:fe:ec:b1:7b:b3:c9:9b:e5:ff:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43cf416193a1c2ed3056b647e5a46503148e3824
Validity
Not Before: Nov 9 04:00:48 2025 GMT
Not After : Nov 10 04:00:48 2025 GMT
Subject: CN=db0fe86a2ba2adafa6e19acfb69f29ff8effc044
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:93:7a:f5:c4:48:56:7d:f0:c5:3b:9f:77:47:
0e:80:0a:59:f9:82:e6:10:f2:4d:f7:cf:2c:87:73:
d3:9f:0d:a9:2d:48:84:29:b1:87:0b:2b:61:79:7d:
c3:c6:b6:26:a7:c3:06:5a:d1:8d:9d:ed:2f:80:bd:
6b:cd:25:bd:b4:e3:d1:17:64:88:97:95:65:57:9d:
94:15:93:4b:1a:c9:25:bc:ad:63:35:8f:08:3d:27:
fb:48:23:a5:17:b5:d9:0e:43:f0:7b:5f:3c:d8:e9:
8e:ce:51:31:0e:9e:5f:57:c3:8d:9a:e3:03:ab:c3:
17:ef:13:0f:4a:58:c2:2e:e6:87:91:59:ca:7c:b5:
0d:01:d3:47:a7:80:0f:05:95:1f:30:29:a9:59:b6:
72:20:c9:af:6e:9b:35:86:01:39:19:65:d7:be:d7:
09:ce:37:42:23:34:e1:2d:3e:0e:54:b9:f1:39:91:
0c:92:76:cd:f0:3b:93:c7:e4:3b:3a:2e:ed:21:fb:
17:3a:7c:0d:f1:91:09:69:84:04:0b:65:89:86:54:
8c:83:78:57:a1:98:20:8c:32:62:f3:ee:a6:c5:6e:
ce:e2:0a:0e:19:85:a3:15:04:4e:05:e1:c1:04:e4:
f0:14:14:85:9f:05:f0:d7:dc:09:62:2d:bd:33:4c:
01:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:0F:E8:6A:2B:A2:AD:AF:A6:E1:9A:CF:B6:9F:29:FF:8E:FF:C0:44
X509v3 Authority Key Identifier:
keyid:43:CF:41:61:93:A1:C2:ED:30:56:B6:47:E5:A4:65:03:14:8E:38:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/aa31cf-bb31-497c-a577-09b969d160fe/1/Q89BYZOhwu0wVrZH5aRlAxSOOCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e9:6a:68:f3:00:a1:58:92:9a:ce:f9:cc:9a:51:81:22:1b:
85:35:ee:5d:a5:38:ad:1d:a8:c3:e4:63:b5:42:af:21:c9:be:
3b:3a:c1:33:5a:58:82:2f:4b:42:98:55:1c:70:92:10:76:80:
ab:42:31:56:f5:d3:6d:4b:20:b4:b2:92:6b:a5:3a:9e:bf:8e:
15:0b:81:fa:93:ec:87:d3:df:f7:ee:e9:9f:11:26:9b:38:bb:
64:c6:95:ba:3b:12:b3:a9:a3:3f:33:d9:c5:10:7e:1d:6f:15:
1c:48:0d:26:73:49:72:44:2b:13:70:e5:73:4a:7a:8e:f3:19:
7c:bd:e8:bd:32:9f:9d:34:8f:eb:41:e7:03:59:dd:fe:4e:cb:
bc:09:ed:4d:7d:4e:f4:4c:f4:51:8e:4d:3e:e6:f8:e5:07:d1:
e3:f4:9f:8c:d4:44:10:d8:68:d5:85:13:86:5e:f9:32:72:54:
88:a7:0d:51:4c:92:61:21:c1:71:e3:f3:cf:9f:e6:97:e4:a2:
2a:b7:ce:02:87:61:b6:60:7c:09:ff:e0:8b:c4:ea:58:34:f9:
63:2b:a1:7b:15:8a:d2:3d:d2:83:4d:f8:fc:59:94:92:81:1f:
a8:cd:7d:a0:18:d7:91:4f:65:dd:3c:c9:ab:a8:c1:68:af:c5:
d3:a9:82:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 9 13:58:03 2025 by rpki-client