Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
File: QO9YSZMMyd10IR-zfiQRgkmh_EA.mft (raw, json)
Hash identifier: wecIbVEcvbmNcQgdiwon2/sIaVhHHX4IS7lawrU3od8=
Subject key identifier: 2F:CA:0F:CC:74:9B:CB:A1:3B:29:6F:D8:48:BE:46:28:BE:81:DC:9B
Authority key identifier: 40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
Certificate issuer: /CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Certificate serial: 019A228A8F1C150827A527C5E784A65310DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
Manifest number: 1700
Signing time: Sun 26 Oct 2025 22:01:37 +0000
Manifest this update: Sun 26 Oct 2025 22:01:37 +0000
Manifest next update: Mon 27 Oct 2025 22:01:37 +0000
Files and hashes: 1: QO9YSZMMyd10IR-zfiQRgkmh_EA.crl (hash: /WwEjaMEPgGw1jHQKDQE5Q/MHt7nIobP3hkb274oa64=)
2: UO07512-xyl7tPlxWkeH0XFHtjw.roa (hash: FGw3ypGv9x4G+fHO0s0Uxmz/ZFgsQL9y06qgJnZxgwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:8f:1c:15:08:27:a5:27:c5:e7:84:a6:53:10:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40ef5849930cc9dd74211fb37e24118249a1fc40
Validity
Not Before: Oct 26 22:01:37 2025 GMT
Not After : Oct 27 22:01:37 2025 GMT
Subject: CN=2fca0fcc749bcba13b296fd848be4628be81dc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:fc:28:90:e5:fe:6b:0c:12:91:2f:90:64:
93:d8:d6:06:17:cf:51:86:71:92:bc:54:3c:4b:c9:
c9:22:c3:d9:71:fb:1d:61:9a:f9:f9:e3:1f:88:6d:
fc:59:dd:40:8a:6d:13:f4:62:62:12:fb:ec:12:f0:
17:0f:0d:36:e4:e2:64:85:1c:64:aa:7e:52:3d:f2:
b3:51:d6:a4:8f:69:50:dc:7c:fe:a4:05:ff:e1:0d:
2f:b8:62:f2:55:0a:68:6b:f2:24:e2:93:74:e5:b4:
24:89:c4:9d:f4:3d:62:04:ac:97:90:09:a6:40:a8:
eb:0d:da:66:c4:e6:ba:aa:a9:e0:b3:88:d3:3b:c4:
40:d9:6c:6b:ec:dc:55:7b:2d:02:85:d3:83:ff:a1:
40:d0:79:ad:1b:ed:4e:b7:68:e6:01:01:de:5d:e4:
b1:c5:2b:1d:af:02:26:ca:37:98:32:db:af:8e:04:
ec:fe:5c:69:70:d7:3a:a0:b8:0d:2c:e2:56:ce:c0:
e5:d5:28:5e:5d:eb:65:35:1a:49:9c:80:0a:86:65:
f4:b0:75:60:3f:c2:9b:ca:85:ae:23:d0:58:d7:87:
24:ee:df:88:d2:f5:28:85:75:75:a7:41:69:ff:4e:
e8:13:1d:e4:70:f7:a0:aa:fd:01:7e:f6:65:4a:6f:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:0F:CC:74:9B:CB:A1:3B:29:6F:D8:48:BE:46:28:BE:81:DC:9B
X509v3 Authority Key Identifier:
keyid:40:EF:58:49:93:0C:C9:DD:74:21:1F:B3:7E:24:11:82:49:A1:FC:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QO9YSZMMyd10IR-zfiQRgkmh_EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/eea21a-c9d3-4c6d-9a52-9b2c6b08a84a/1/QO9YSZMMyd10IR-zfiQRgkmh_EA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:53:af:dc:c0:7f:cf:59:8c:fd:f9:8f:16:9c:5d:c7:93:9a:
6c:f9:e2:46:5d:08:08:95:95:78:ef:62:bf:ca:67:fa:3b:84:
8f:95:7d:b1:19:81:54:63:fb:83:ed:2d:23:9c:f6:39:af:c4:
c2:97:0d:23:2f:24:9e:e9:b9:14:fe:5c:51:cd:64:f8:9a:b7:
42:80:68:c3:ac:6e:b5:e8:1b:07:35:02:9d:7f:a7:d5:bd:c5:
40:75:08:27:ce:d3:7e:04:c2:3d:a3:3c:f3:99:2e:ad:77:a8:
73:6a:77:aa:f1:5a:94:02:db:61:52:c1:fd:81:5e:e1:d2:5b:
c4:db:a9:3a:41:8d:19:cd:80:2d:53:fd:ce:bc:60:c4:5d:65:
de:72:6b:c8:41:9e:b9:90:9e:28:4e:2e:49:fa:8b:b8:8d:2b:
e1:50:07:5e:05:9c:b6:e4:53:54:14:2a:44:59:ce:ea:6b:54:
35:43:6e:8c:5a:b6:bb:e0:f8:54:7a:dd:25:f7:0e:93:44:3c:
27:49:51:dd:a7:2e:64:36:4e:b2:61:e0:25:f4:a3:02:6c:02:
39:f5:d6:5e:50:2f:d5:97:41:de:5c:56:aa:b8:86:3d:35:b8:
7c:00:98:70:cf:78:59:ed:f2:ba:14:94:3e:2d:96:54:ab:06:
fd:16:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:36 2025 by rpki-client