Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: DBGJV2Fla6JQmWIHPLVH5I8Z3ICzxuh7wm/sagHG58Q=
Subject key identifier: F1:39:94:35:B9:56:50:39:C5:12:A4:C2:8A:9E:F3:8A:20:75:3D:03
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 019A2A42BD0DA0D72799485C3B1C1C9911C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 019A
Signing time: Tue 28 Oct 2025 10:00:08 +0000
Manifest this update: Tue 28 Oct 2025 10:00:08 +0000
Manifest next update: Wed 29 Oct 2025 10:00:08 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: znKJhVxBnIgU0peLh3z4vKwdXTDIDSsKhFvq3KivT2Q=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:42:bd:0d:a0:d7:27:99:48:5c:3b:1c:1c:99:11:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Oct 28 10:00:08 2025 GMT
Not After : Oct 29 10:00:08 2025 GMT
Subject: CN=f1399435b9565039c512a4c28a9ef38a20753d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:88:cb:9c:9c:2b:b1:58:ca:2f:35:e1:ab:ac:
7c:bd:47:51:70:bb:4f:50:11:06:8c:7e:d2:5f:cc:
ec:ab:8b:a3:42:92:ab:c8:17:fb:f2:1f:a3:18:b9:
da:d5:3f:a9:7a:a9:ca:ec:e8:1f:bd:2f:35:d1:1a:
9e:f7:01:e0:4e:09:00:3d:56:9a:e7:dd:64:36:86:
6c:c5:d5:46:f6:4f:12:b7:70:08:b6:1e:73:c6:06:
1b:89:2f:ba:ba:a5:03:03:81:df:5e:d0:9f:19:3d:
c5:8b:03:04:f6:ce:6f:90:73:e7:3d:ea:44:b7:39:
95:cc:3f:06:e0:18:d5:c2:ab:9b:d9:01:c9:d2:45:
fb:35:a3:f1:58:45:11:ae:24:f7:8a:c9:e1:c8:4c:
5f:1f:4a:9b:4d:31:62:fd:6a:f4:69:2b:94:fe:f2:
f5:b2:5e:c1:df:fa:f4:07:b2:2e:af:b3:0b:c9:40:
56:38:fd:c0:97:ba:b3:bf:64:9a:8e:1f:8e:be:63:
46:54:5a:d9:ed:36:6e:e6:c5:7f:5d:75:77:96:99:
b0:6f:b1:36:ee:c6:7e:95:2a:f5:f4:80:fc:af:d9:
5d:47:c0:1c:c1:d0:c5:f6:a6:47:e0:d9:db:15:44:
75:d0:fe:d1:ff:de:67:9d:08:66:e8:5d:9d:0a:a2:
31:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:39:94:35:B9:56:50:39:C5:12:A4:C2:8A:9E:F3:8A:20:75:3D:03
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fe:63:55:fc:0e:a1:49:62:c6:7f:9f:bf:9d:29:47:4f:32:
ec:d8:6e:1c:d2:70:c4:89:ad:ed:45:b8:c2:23:20:d5:2e:b3:
eb:2c:e2:ea:f2:e2:5b:ce:81:ba:59:3e:d5:f9:de:63:23:09:
51:51:0a:01:92:53:3e:30:84:a8:39:2f:c1:dd:79:22:bd:d7:
c2:8c:92:ea:75:6b:25:55:80:9d:69:3d:5e:01:61:2a:05:49:
e0:24:62:f5:de:39:ac:7e:3f:ab:6d:d3:37:d6:68:53:17:cd:
28:b6:ac:6b:44:78:58:84:53:18:c8:55:ce:7c:1d:38:55:cd:
ae:a3:0a:36:a9:94:13:72:bd:e8:7b:f0:5b:d8:db:ef:ea:69:
27:38:62:cb:57:ac:4f:91:1d:20:3b:dd:d6:1c:8d:ea:c4:7d:
05:31:d0:c0:5e:a0:ff:77:80:51:7b:d6:05:29:b5:56:98:4d:
41:3d:b4:41:de:64:c1:a8:d6:f0:a1:32:1e:c8:cb:70:e5:23:
74:7d:9c:e7:fb:4b:79:6f:a8:75:79:8e:51:85:d4:a3:4c:f0:
1b:c5:43:d0:61:40:3b:4b:dd:b2:3a:89:70:8d:7d:71:cd:2f:
f2:63:bb:4c:b3:80:77:fa:27:b4:db:0f:6a:65:e5:da:99:1f:
86:6e:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:55:38 2025 by rpki-client