Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
File: Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft (raw, json)
Hash identifier: KTvObZkdAjK0CRace/WsJwGNHm6eqhZ11Z2Qsm42eGE=
Subject key identifier: 5C:1A:90:58:0B:06:8F:BD:2D:5D:B6:30:E4:C0:8F:DB:A4:C9:02:14
Authority key identifier: 41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
Certificate issuer: /CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Certificate serial: 0199FC58502C132D497CD690D9E9B91D0F0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
Manifest number: 1075
Signing time: Sun 19 Oct 2025 12:01:10 +0000
Manifest this update: Sun 19 Oct 2025 12:01:10 +0000
Manifest next update: Mon 20 Oct 2025 12:01:10 +0000
Files and hashes: 1: ASgPIcJDfuPjOm8cjrU_yX9d6LI.roa (hash: FoRf6zKDxzFzqNvRaEaSA99AYo7HeXRCWwfxlBkAE5Q=)
2: Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl (hash: K6+S3QQS8i2JEef0mB+3SLFzih5rRntbnws7PXFxQw0=)
3: jJHHC0ke4zgy7tsBzgOSiuwx8KQ.roa (hash: y6+yWoGbJ/QqPwBhk36qsFBsa4k6khZqZ0ihGtdEnfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:50:2c:13:2d:49:7c:d6:90:d9:e9:b9:1d:0f:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ef4b060a8b79b2893d3309ad50d1cccb2b9e31
Validity
Not Before: Oct 19 12:01:10 2025 GMT
Not After : Oct 20 12:01:10 2025 GMT
Subject: CN=5c1a90580b068fbd2d5db630e4c08fdba4c90214
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:bb:38:6a:2f:0c:7b:1c:59:d0:21:cf:5f:5b:
29:8e:8a:a8:02:5d:d9:f4:93:eb:f0:3b:2a:f1:8b:
9b:5f:da:ec:6c:88:77:0f:c1:bc:75:3e:a1:fc:55:
34:d4:1b:50:ac:da:85:5f:c5:ce:20:a3:e6:74:bd:
2c:66:58:a2:53:19:21:d7:58:1f:01:24:80:d3:ca:
e9:f0:81:68:43:3d:89:e5:61:35:58:a2:f1:74:ba:
48:f7:06:7c:6a:fb:11:05:af:73:a1:76:a3:e1:a8:
40:58:ba:19:43:79:5e:28:1a:05:c4:4f:3f:0b:42:
bd:0a:79:2e:af:94:3b:ac:74:8e:15:44:98:6f:3e:
28:8f:ee:4c:26:30:d1:a8:6b:ca:0a:d9:93:6d:05:
13:13:aa:97:54:0d:ce:de:aa:a2:51:6c:9a:d8:83:
74:35:14:5d:cb:6c:45:c5:8e:f2:6a:5c:48:0e:7c:
11:8e:76:11:c3:29:9f:98:ff:0d:72:d1:ab:d3:ae:
00:03:f9:5f:c7:79:96:1e:b6:a1:19:45:6a:65:d8:
19:a1:77:37:fd:32:44:4b:91:59:07:16:68:77:b9:
91:e9:5b:31:47:e9:51:f1:82:b7:f8:0b:f2:c9:2d:
c8:68:11:19:4c:57:07:b6:a9:7f:23:51:75:ee:05:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:90:58:0B:06:8F:BD:2D:5D:B6:30:E4:C0:8F:DB:A4:C9:02:14
X509v3 Authority Key Identifier:
keyid:41:EF:4B:06:0A:8B:79:B2:89:3D:33:09:AD:50:D1:CC:CB:2B:9E:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe9LBgqLebKJPTMJrVDRzMsrnjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/111b81-aa6c-40da-bed1-bf8e5d8265a2/1/Qe9LBgqLebKJPTMJrVDRzMsrnjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:67:04:61:b7:08:17:a8:7e:5d:96:7f:54:bc:7c:d4:74:ed:
0b:44:28:77:23:75:83:03:4f:42:4b:a1:8b:1a:38:3d:25:aa:
ff:24:a2:a4:f7:82:b0:c3:1f:cc:25:53:b4:5d:fd:41:9c:da:
1e:c2:2f:af:47:f6:94:fb:6a:e2:6a:c7:a0:c5:c0:7a:df:71:
73:8e:8b:e6:b0:6d:bd:28:e7:09:ac:81:a7:70:bf:df:d4:26:
43:d2:a4:bb:0c:65:fa:62:d6:30:48:67:1d:b8:dc:27:0c:64:
c0:0f:e0:93:9d:e4:e2:36:bb:14:b2:60:6b:29:6e:2f:33:93:
c1:61:32:8f:ff:83:af:12:05:5a:83:d4:72:b4:83:ed:04:fb:
50:92:a6:12:7e:c9:a3:16:57:2c:1a:c2:d6:75:2a:e1:71:29:
a9:79:70:fe:32:af:44:65:8e:30:27:e1:29:74:0b:1b:83:71:
b3:0c:34:e1:92:05:c9:60:3f:72:88:e8:f1:b7:be:2b:a5:96:
37:45:1b:f0:5f:81:12:44:5a:28:75:9d:09:6e:e8:23:88:01:
cc:ab:c2:2b:98:49:64:42:1b:5b:21:d5:f0:28:e0:6c:1d:99:
af:e2:16:90:de:07:6e:11:32:41:5b:57:67:e5:e0:8b:7f:5a:
75:c9:6b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:25 2025 by rpki-client