Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
File: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft (raw, json)
Hash identifier: 2fow5clXYF/ja7YGIspOpNrcrmnZU1tVz0uJo+ZMxyg=
Subject key identifier: 61:5C:EC:BC:85:5E:E6:B7:80:E1:47:45:2B:EF:3C:85:C0:19:30:6A
Authority key identifier: 40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
Certificate issuer: /CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Certificate serial: 019A0335B2055B3D7E4EC1BB0314C05BA548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
Manifest number: 08B2
Signing time: Mon 20 Oct 2025 20:00:41 +0000
Manifest this update: Mon 20 Oct 2025 20:00:41 +0000
Manifest next update: Tue 21 Oct 2025 20:00:41 +0000
Files and hashes: 1: QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl (hash: SWRPMGDJ9WFznUMCRcpNgLsUfHHTUltoqzb5mc7NHJs=)
2: Z5KDHzf527U1qRAIHwgcHaWLd8Y.roa (hash: 2FLC0+uc30V7W0I0O5nyFk8rgVmBx+XIWSxS6WsMyJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:b2:05:5b:3d:7e:4e:c1:bb:03:14:c0:5b:a5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408fa017532ff6d9fb38b40037896afaf0aacf8b
Validity
Not Before: Oct 20 20:00:41 2025 GMT
Not After : Oct 21 20:00:41 2025 GMT
Subject: CN=615cecbc855ee6b780e147452bef3c85c019306a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:93:0c:39:b0:3b:17:f0:f9:a8:09:18:fe:53:
96:fc:24:0b:5e:51:c9:fb:4a:b3:46:d2:f2:3e:38:
df:5e:a0:c8:81:18:6c:77:59:3b:a2:03:c8:7f:da:
a2:4f:41:8c:75:d0:81:9d:63:cd:f1:8e:61:4f:e7:
fe:b2:23:04:9f:fd:29:11:66:68:2e:58:4d:9e:cd:
46:ba:fb:e9:53:13:b3:bb:91:bf:5b:00:4d:30:d1:
c9:22:5b:80:98:4c:49:60:d4:c0:12:07:cf:45:bb:
e3:a5:41:fa:f0:4b:1a:dd:03:f4:6e:06:9b:7c:6d:
f2:8c:2e:fa:34:6b:04:c4:25:fb:ac:1b:60:b6:ff:
18:2a:1a:7e:22:11:78:10:c8:b2:4f:4f:e2:0f:88:
71:85:91:3f:09:ee:a1:0b:2a:1a:a0:03:ef:51:48:
ec:8a:60:c2:23:dd:75:40:3a:20:f9:04:2c:05:2f:
80:46:f4:8b:b9:91:3e:6e:74:81:6f:27:f3:76:97:
2d:f6:9b:97:02:94:9d:68:e0:8b:29:a8:7c:64:fc:
66:cf:11:aa:1d:33:ec:9f:ec:b6:c9:ac:1a:c6:b0:
a5:de:03:90:12:bd:cf:3f:51:db:61:b6:49:25:db:
54:4b:52:67:e4:0d:64:31:ae:f8:e4:fc:f1:76:fc:
d2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:5C:EC:BC:85:5E:E6:B7:80:E1:47:45:2B:EF:3C:85:C0:19:30:6A
X509v3 Authority Key Identifier:
keyid:40:8F:A0:17:53:2F:F6:D9:FB:38:B4:00:37:89:6A:FA:F0:AA:CF:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/adb871-6972-4dd6-8360-f1982a691d45/1/QI-gF1Mv9tn7OLQAN4lq-vCqz4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:01:96:6f:8a:05:1b:69:ba:29:93:c6:bd:de:47:94:1f:51:
f6:16:4d:91:0c:a2:e6:88:b5:04:20:de:70:9f:a5:b1:64:4f:
c3:7c:f1:a8:27:07:20:fc:52:a2:0c:c1:5f:76:20:a3:c1:fa:
65:c3:75:90:80:c6:fe:bb:06:ab:c6:72:bc:c5:f6:12:c0:c2:
bc:51:a0:2f:2d:9e:cb:7e:72:71:e2:9e:3a:40:10:51:d6:39:
47:4d:63:29:53:29:aa:ca:35:6d:fa:d7:7b:7f:58:e1:bb:3c:
e8:da:7b:29:8e:40:3b:df:96:12:a6:41:e0:5f:58:d1:a8:d6:
0a:d3:ce:7d:77:e6:bc:fe:b5:af:10:4f:7c:b8:63:95:64:50:
34:ca:b3:41:00:88:bc:a0:e2:45:2d:8c:a8:6c:63:e1:52:0e:
59:68:4a:10:fa:db:d0:9d:af:84:65:19:bf:04:05:d0:43:4d:
d0:92:8e:4e:97:e1:e4:86:1f:43:cc:de:6d:e8:23:d5:4b:45:
20:ba:b5:47:2e:ce:78:7c:74:02:9f:a1:5c:c1:6b:43:76:53:
8a:72:42:ac:87:51:34:a6:9a:82:1c:2c:ec:42:7c:c4:cd:c8:
13:e7:2a:f2:f1:40:09:c1:87:b9:a6:03:3e:54:8f:8c:27:a2:
44:c9:de:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:13:35 2025 by rpki-client