Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
File: Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft (raw, json)
Hash identifier: c+XLVP5R2tl5GedXRXBl7nqJ2hog8ymqAVm72uRYxE4=
Subject key identifier: 9E:49:BD:AF:B6:22:22:32:9F:6F:4E:CD:F5:98:14:16:9C:B8:08:59
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 019A71808CAE0FC13C4386D2430BC5CCB97C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 06:00:41 +0000
Manifest this update: Tue 11 Nov 2025 06:00:41 +0000
Manifest next update: Wed 12 Nov 2025 06:00:41 +0000
Files and hashes: 1: Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl (hash: Z+eBt+a8As2FXC1/Rx7t/iBaB9IDv4szKE67jWWkOYU=)
2: pFcInvEW15iKWvoPMx5EVwuCano.roa (hash: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:8c:ae:0f:c1:3c:43:86:d2:43:0b:c5:cc:b9:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Nov 11 06:00:41 2025 GMT
Not After : Nov 12 06:00:41 2025 GMT
Subject: CN=9e49bdafb62222329f6f4ecdf59814169cb80859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:60:28:e3:b1:44:69:5e:bd:9e:5b:07:6d:
73:3a:54:0f:73:92:37:67:7a:48:46:cc:d5:9a:b8:
2f:b0:3f:29:41:9d:a9:3a:e8:b5:58:37:08:d2:e4:
5e:7a:13:61:97:c5:4e:c1:da:8b:3a:91:0d:df:4b:
30:0b:bc:c8:3a:fd:15:04:7d:b1:6e:cb:07:6d:3b:
17:8b:08:e0:c3:c6:25:36:15:b5:37:60:03:89:8b:
75:f6:32:a7:14:71:4d:ce:cd:e6:8e:45:70:c4:f3:
00:62:47:a0:db:54:54:23:bc:6b:ea:77:a2:b4:54:
f8:df:5c:de:53:43:34:71:28:9a:2d:61:dc:5e:82:
24:77:6b:27:7b:40:34:1f:76:ba:12:f1:fe:e6:b9:
80:8a:d0:14:dc:3a:43:55:95:05:79:d5:7b:d3:c3:
04:d1:75:e5:e6:ec:26:21:c2:9a:7b:f0:b9:6f:6f:
38:d2:ec:64:7d:85:80:e3:76:ca:ab:ad:b9:93:39:
6d:b9:e8:31:84:f7:12:ad:ee:fe:41:6d:07:ba:d6:
04:9f:7f:ee:d3:4a:09:d5:3b:6b:41:01:77:89:65:
d9:9d:c4:52:be:99:e9:eb:f4:a4:3d:42:00:c9:2b:
f9:4a:b4:74:10:0a:b7:3f:c2:16:d7:c8:c5:2b:84:
10:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:49:BD:AF:B6:22:22:32:9F:6F:4E:CD:F5:98:14:16:9C:B8:08:59
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d8:01:cf:b7:dd:a3:18:b4:52:ea:86:1b:a3:4b:a3:a0:4f:
b8:c6:13:04:ef:8d:07:66:2e:d4:f0:93:1e:99:e5:39:e0:31:
37:bb:72:77:ba:d7:80:66:e9:7b:26:8d:9e:65:11:25:bd:b2:
7f:2a:ca:60:3a:04:c7:4c:79:d4:77:dc:38:eb:5e:4f:c4:bb:
e6:83:2a:a9:a7:de:56:d7:a8:b5:1a:ad:b9:e7:35:7a:19:f5:
00:0a:5c:5f:b5:3d:30:c3:29:33:c9:a0:f1:95:25:30:6f:f1:
89:c3:fc:3c:ca:d7:02:01:cf:ea:a2:f7:f6:9b:5f:4d:59:0f:
43:7e:a8:4c:3a:91:b1:18:e4:9a:45:77:31:50:7d:a3:57:55:
4b:c8:c0:63:5f:79:51:85:c8:48:cd:9b:cc:54:33:f8:73:92:
b8:42:d5:73:de:4b:0d:ce:ab:04:d5:7a:6f:47:a5:51:09:e5:
2b:8b:7c:56:75:e8:70:5c:68:a6:18:61:52:d9:97:f9:e6:5f:
f0:42:08:64:7f:6a:85:2f:ac:6e:69:e7:e9:fa:55:87:5d:c8:
68:f3:7f:51:73:ac:f6:66:97:c2:ae:da:98:9a:46:64:5b:48:
4d:40:71:8d:e9:ed:38:a8:29:56:7f:39:90:61:89:3e:6c:53:
06:88:f9:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:18 2025 by rpki-client