Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
File: qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft (raw, json)
Hash identifier: zunTJNsVPV+1VH/zhErGnzD/mqNxwtyQppbIjQ6XIoU=
Subject key identifier: 1D:3E:40:82:85:3D:EE:6E:9B:F4:CC:B7:A8:E0:14:CD:F3:01:63:30
Authority key identifier: A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
Certificate issuer: /CN=a9d988d1df0a6ccab2e93614951059960bad4342
Certificate serial: 019A1504DB1A896ADF98E6C7A0E6034F5F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
Manifest number: 14F9
Signing time: Fri 24 Oct 2025 07:00:31 +0000
Manifest this update: Fri 24 Oct 2025 07:00:31 +0000
Manifest next update: Sat 25 Oct 2025 07:00:31 +0000
Files and hashes: 1: NX8Ag0pA74LGhUL_oaE0Kzx7aAU.roa (hash: LYvjPxPyW03jv1kHAAP+K13/fh1ywtNoDmOlSYUCweg=)
2: gAnTD0iNr7m1r1pYRaaA5fXHh-s.roa (hash: Cw97eXSR4+iVCR14Tmpd8X95xlXnCaFcwxnubQAt8e8=)
3: qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl (hash: P88RemjhUwAFCIVbXSS/5yeOKqLBroph0AWBBWj0aq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:15:04:db:1a:89:6a:df:98:e6:c7:a0:e6:03:4f:5f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d988d1df0a6ccab2e93614951059960bad4342
Validity
Not Before: Oct 24 07:00:31 2025 GMT
Not After : Oct 25 07:00:31 2025 GMT
Subject: CN=1d3e4082853dee6e9bf4ccb7a8e014cdf3016330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:a2:60:3c:06:f4:72:89:47:7f:23:82:84:
bd:d1:f2:59:81:50:00:ed:7c:ae:df:fe:fe:c1:95:
92:0a:40:95:e1:af:e7:3d:fc:52:68:0b:b5:3a:80:
a9:82:83:3e:1b:04:a3:14:45:73:5a:f5:6a:ab:da:
30:c4:79:06:2b:1e:32:c5:06:68:b6:ff:35:bc:8b:
79:f6:1b:9e:7c:80:02:88:d3:2c:c1:57:ed:f9:a4:
b3:bc:a9:c2:c3:2b:d4:8f:59:da:61:e6:56:f9:e0:
6c:80:68:73:9a:a5:ac:18:20:71:91:8a:6c:0b:ed:
d8:ea:e2:77:06:4c:d6:88:3f:a4:45:1b:77:98:6f:
b0:3e:cc:9a:65:b3:30:b6:d3:6f:1b:f2:a1:f9:4e:
2a:fd:52:3f:8b:92:c3:db:61:d7:44:65:24:7a:ba:
8e:df:2c:ba:cd:e9:ba:c1:30:20:eb:4d:43:79:d8:
ec:6a:94:8a:e5:cf:bd:f9:1a:67:1a:de:54:ff:46:
90:44:e0:1a:c9:6c:ae:f9:f7:91:37:c6:10:c3:9c:
67:82:7b:40:d9:14:2d:5c:c4:3e:9e:20:59:7e:96:
e6:51:d6:89:f5:8f:63:bb:90:d1:25:f1:69:ea:11:
c4:4a:f5:4e:8a:ff:46:3d:64:4b:30:26:04:93:79:
91:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:40:82:85:3D:EE:6E:9B:F4:CC:B7:A8:E0:14:CD:F3:01:63:30
X509v3 Authority Key Identifier:
keyid:A9:D9:88:D1:DF:0A:6C:CA:B2:E9:36:14:95:10:59:96:0B:AD:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdmI0d8KbMqy6TYUlRBZlgutQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/64ce8b-ff7a-4744-9712-d9730f5b5867/1/qdmI0d8KbMqy6TYUlRBZlgutQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:36:63:8e:7b:df:44:4d:22:19:07:5b:64:db:eb:ba:2f:25:
d1:27:e2:88:86:6f:72:63:86:66:40:13:b2:88:f9:38:9b:db:
49:bf:0b:37:1e:10:3c:68:af:e2:0c:c5:bb:3a:1e:4e:50:06:
df:de:b9:63:9a:0a:c0:e0:b9:b9:e2:5c:4d:e8:64:ba:38:75:
54:f7:e6:de:c4:a6:2b:47:47:a2:12:b4:73:bb:6f:e6:d0:03:
53:f5:3f:9f:2f:78:7b:5e:c8:95:45:e4:8f:06:4b:e4:a2:bb:
a2:fd:bb:ad:0c:a9:f5:f2:6f:63:ec:f3:d3:47:98:7d:dc:8a:
e5:ec:d5:80:bd:0b:62:5e:56:f5:21:f6:01:4c:d4:13:2c:a0:
a9:4f:78:2f:ad:1a:c7:38:53:47:cc:e6:c0:54:0b:4e:2c:22:
b2:b1:98:04:dd:53:8b:8e:b1:e0:af:da:16:80:57:ef:17:ab:
14:eb:cd:f6:83:ab:6d:77:33:92:6c:94:60:02:91:b2:00:84:
5d:67:79:a2:19:28:c9:85:b9:60:0f:c1:09:4f:27:7c:63:77:
15:dc:1f:67:e5:d2:8f:f9:48:fc:44:8d:97:a6:2c:f0:13:d6:
21:52:bf:59:bb:ad:e2:71:30:95:3c:7f:4b:22:eb:1b:5a:f9:
3d:09:f9:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 09:11:41 2025 by rpki-client