Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
File: Q9CWU4TcREh6gxcabV0FqUpq1nw.mft (raw, json)
Hash identifier: vY4mnhZxBT7xljgonJ0qeMIOZ6ODQdfpc5s1+RGep2A=
Subject key identifier: 79:83:11:5F:CB:22:1A:B4:2E:40:75:C5:C5:3E:3D:A9:9D:7B:36:D8
Authority key identifier: 43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
Certificate issuer: /CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Certificate serial: 01993123660BB20F4AC4297AB12AD7D9A6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
Manifest number: 0119
Signing time: Wed 10 Sep 2025 01:00:27 +0000
Manifest this update: Wed 10 Sep 2025 01:00:27 +0000
Manifest next update: Thu 11 Sep 2025 01:00:27 +0000
Files and hashes: 1: Q9CWU4TcREh6gxcabV0FqUpq1nw.crl (hash: T1W/YAIidV665S2sJsnwuVkzT5YBdq4BWveSvjhiPuQ=)
2: is8rJFkIshJvtMPQsNBVoFxTKBY.roa (hash: eXPJhyZn1FuLC+ECVYIsChabU+UtFgCuyBkgvqoFbIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:23:66:0b:b2:0f:4a:c4:29:7a:b1:2a:d7:d9:a6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d0965384dc44487a83171a6d5d05a94a6ad67c
Validity
Not Before: Sep 10 01:00:27 2025 GMT
Not After : Sep 11 01:00:27 2025 GMT
Subject: CN=7983115fcb221ab42e4075c5c53e3da99d7b36d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:fa:ab:4c:24:9b:97:97:ee:af:89:5e:c7:
9e:fb:61:61:18:7a:ed:df:db:8e:cc:bd:05:db:b6:
73:f8:df:a4:a8:6f:e2:6d:15:88:0c:8e:07:56:4b:
46:88:96:72:35:7a:8f:f9:88:ff:bc:36:f9:3d:6d:
aa:5a:77:1b:36:7f:1e:80:52:38:ac:31:d5:41:cc:
ec:53:fd:be:03:da:7a:8c:e3:4e:10:a5:ed:17:84:
54:3b:83:14:f2:01:da:e2:b4:7d:d9:3b:5f:57:06:
a7:6c:fa:c5:a0:4c:10:87:37:f1:87:c8:3a:db:03:
44:71:63:5e:03:fe:54:07:aa:0d:84:78:62:b2:ab:
4c:62:30:33:4b:63:76:c0:64:61:87:d6:f6:13:b6:
19:cb:bd:7f:e7:4b:cb:6d:77:bc:3f:a9:92:ca:8b:
35:28:eb:e4:b3:22:65:b3:2d:1f:21:11:4a:47:16:
b3:c0:28:ce:92:d7:e4:47:f4:df:2d:f0:47:53:2a:
06:4c:7f:ed:80:f4:71:f5:14:56:98:cb:03:42:62:
4e:91:4b:7f:20:b1:0b:3d:3b:1e:63:a1:31:fd:4c:
92:d5:d6:28:0f:1f:1d:c8:0f:c0:50:9b:db:c1:99:
17:e4:8c:7f:c5:69:fc:23:e0:c6:63:a3:37:32:ad:
f4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:83:11:5F:CB:22:1A:B4:2E:40:75:C5:C5:3E:3D:A9:9D:7B:36:D8
X509v3 Authority Key Identifier:
keyid:43:D0:96:53:84:DC:44:48:7A:83:17:1A:6D:5D:05:A9:4A:6A:D6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9CWU4TcREh6gxcabV0FqUpq1nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/cf7617-926d-4c4b-9976-81a78319fd6a/1/Q9CWU4TcREh6gxcabV0FqUpq1nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c6:55:7b:cf:00:c8:f7:7a:a5:d2:af:30:50:b9:77:16:d1:
c1:81:34:5d:df:49:e3:8a:ff:e7:58:39:b0:7c:b3:3e:62:45:
3a:53:07:e4:45:98:57:f3:17:34:88:e0:f3:57:e8:9b:dc:49:
f8:5f:7f:d0:34:d1:30:34:99:d0:6f:cb:35:6a:0c:8a:e6:15:
14:c1:b7:d8:9a:ba:15:5a:ed:ed:b3:0e:ff:d8:ce:af:77:ff:
c4:74:c9:19:32:91:26:59:57:35:05:af:4f:4f:45:c4:a8:36:
11:c4:fe:1e:87:1f:0e:0d:06:f5:25:3b:b3:e2:45:d7:d0:e6:
3d:b6:1b:36:33:03:5b:f5:76:3d:80:db:54:45:0b:c4:87:81:
b4:7d:d4:8c:36:8b:ed:51:ed:51:3d:4c:f5:86:f5:e1:5f:8d:
28:a5:dd:ec:5d:7a:55:33:0c:ee:b2:20:f2:6e:bc:25:9d:a7:
34:46:b5:fe:4a:d2:dd:2c:ea:98:a9:bd:82:d4:23:d1:ea:00:
28:ac:57:38:51:ce:57:a4:ff:3d:ad:51:e7:02:92:c2:63:e6:
60:02:b0:fe:11:54:12:7a:80:20:f7:07:a0:c6:72:20:e1:f6:
2a:67:fc:41:33:37:e9:c0:48:10:0a:a0:5c:9a:9c:36:1e:50:
e6:27:d8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:47:26 2025 by rpki-client