Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
File: Q-BF0CHUiuhhoM5n040VoGdlOjE.mft (raw, json)
Hash identifier: m3gnlLPEx+VLK2FftMGR3+6YSzdnnkWI3gdOxe+ItZ4=
Subject key identifier: A9:A2:E9:FB:8C:89:EC:91:CD:3B:61:18:BB:3C:36:AB:38:11:30:EE
Authority key identifier: 43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
Certificate issuer: /CN=43e045d021d48ae861a0ce67d38d15a067653a31
Certificate serial: 019A71EE961F6A8E45AEF2A2AF3BB7DAA7BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
Manifest number: 0D0D
Signing time: Tue 11 Nov 2025 08:00:52 +0000
Manifest this update: Tue 11 Nov 2025 08:00:52 +0000
Manifest next update: Wed 12 Nov 2025 08:00:52 +0000
Files and hashes: 1: Q-BF0CHUiuhhoM5n040VoGdlOjE.crl (hash: 3T5i8omgJJFPvmZe4ndvd3SWgINPAWpje0bIBUPTh/s=)
2: XNqUza-1RrV34b84oczapxMF-Cs.roa (hash: Cr97r6Z1ePJazya6FJNCZUabXsw1/WFse2z8LJYuBQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:96:1f:6a:8e:45:ae:f2:a2:af:3b:b7:da:a7:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43e045d021d48ae861a0ce67d38d15a067653a31
Validity
Not Before: Nov 11 08:00:52 2025 GMT
Not After : Nov 12 08:00:52 2025 GMT
Subject: CN=a9a2e9fb8c89ec91cd3b6118bb3c36ab381130ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3d:1b:05:2c:6e:be:20:d0:a3:d2:46:86:28:
ba:e4:2f:4a:8a:5f:04:1e:d9:dc:08:52:56:76:e7:
a6:eb:b1:b2:21:d8:ac:7b:62:a3:5f:83:09:ae:f3:
87:50:28:d6:9f:a5:66:ef:0d:b8:e8:bc:d8:5a:af:
59:34:57:ad:7b:d1:e0:d3:70:62:aa:33:26:7e:45:
92:35:c1:34:cd:0b:c9:8a:d6:17:4c:81:e3:4f:0b:
2f:57:61:ed:78:8a:a2:c4:25:a0:4d:f8:89:a2:d8:
aa:50:97:b1:c2:43:c8:5b:2a:57:91:e8:55:5c:d6:
f1:e6:16:51:0b:41:13:70:a7:8e:13:7b:cf:c4:1f:
62:bf:02:ae:be:98:86:67:2f:f5:58:51:7c:97:4f:
47:d5:3a:22:59:85:69:06:c8:5d:d3:22:4a:07:c6:
d7:f6:3e:1a:69:1e:b5:41:c3:79:d9:dd:1e:7b:ad:
c1:40:9d:4c:00:fc:2d:79:51:62:20:0d:8c:1f:e1:
69:30:71:c2:ad:06:b3:57:12:06:fc:ea:1f:43:6b:
53:0e:e0:d0:44:3b:fd:89:95:5c:01:99:32:c1:e7:
a1:69:9d:a2:53:e5:39:13:c9:6e:a1:31:ca:2c:52:
ed:40:7f:19:f2:35:97:90:9f:f9:d9:c7:f5:f4:4e:
2a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A2:E9:FB:8C:89:EC:91:CD:3B:61:18:BB:3C:36:AB:38:11:30:EE
X509v3 Authority Key Identifier:
keyid:43:E0:45:D0:21:D4:8A:E8:61:A0:CE:67:D3:8D:15:A0:67:65:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q-BF0CHUiuhhoM5n040VoGdlOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8f573b-dc8d-4876-bca2-3b02c99c733b/1/Q-BF0CHUiuhhoM5n040VoGdlOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c2:46:b1:41:7e:60:8d:15:f6:9e:78:8e:88:82:71:c6:ab:
4a:32:01:0d:ca:9f:b0:a4:d8:66:87:80:b9:3b:c1:b3:5b:c7:
93:0b:93:59:6f:9d:20:6a:e0:29:f1:30:49:88:57:4e:33:75:
c5:38:37:e3:92:6f:a2:02:ad:33:0c:6d:8a:3a:90:70:2c:3e:
72:d6:c9:ed:88:8c:50:30:97:86:b9:9d:d8:c8:ad:d8:59:e5:
2e:7b:4b:10:c2:f5:a1:f9:dd:ab:93:99:09:7c:86:c7:df:23:
49:76:e4:b1:fc:9f:1b:0b:ae:56:36:28:7a:6f:4b:17:78:72:
79:67:48:5a:78:04:fd:8d:d4:a7:c3:3d:bc:03:70:fd:fb:6d:
ee:74:35:3c:24:e2:47:a7:85:8b:68:63:fb:73:9e:38:d1:04:
b8:6d:9d:12:f0:32:8f:11:8e:a4:8a:17:9f:3d:47:5c:7c:b3:
20:cb:fd:c1:b7:63:14:57:50:02:58:7f:5e:7a:85:4b:33:08:
d8:cb:06:a0:87:aa:d4:8c:2e:2e:14:36:21:a5:9a:8e:0a:ba:
c4:86:67:a7:2e:de:92:0f:19:24:98:29:b7:80:d9:4e:70:da:
2c:61:11:8f:cf:36:f6:42:79:c1:6b:e7:d3:52:18:0e:05:87:
e5:8c:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:51:38 2025 by rpki-client