Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
File: QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft (raw, json)
Hash identifier: 95ubnMp4VwGgB0Oa3uzMrBrTsIBFPm/kWh0cG86h4Jk=
Subject key identifier: 66:8C:91:E4:66:F7:9C:34:5F:A9:FA:B4:2E:98:44:1B:2B:7A:20:D3
Authority key identifier: 42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
Certificate issuer: /CN=427a2670508b945123beecbf13145ffbd7bfcde4
Certificate serial: 0199FE10433A60122FAC4B6893841B740E9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
Manifest number: 08D0
Signing time: Sun 19 Oct 2025 20:01:42 +0000
Manifest this update: Sun 19 Oct 2025 20:01:42 +0000
Manifest next update: Mon 20 Oct 2025 20:01:42 +0000
Files and hashes: 1: QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl (hash: M38A631ORFTAjpt/sqT11chGwsHyDuBESpPb9J49xiY=)
2: bC15MrNbvaHvc_M6-zAakBbyrww.roa (hash: w8+yaL/cYfTmT9iePHgIvZ5N3rV9yU+eea+yLs6LsB4=)
3: ey2THT3vxYZt7oPHCFWCPLFWheU.roa (hash: 24QSz9cCbqNcvUaGh3j8TGkQz+MS9kGdeKEW+Heclys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:43:3a:60:12:2f:ac:4b:68:93:84:1b:74:0e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=427a2670508b945123beecbf13145ffbd7bfcde4
Validity
Not Before: Oct 19 20:01:42 2025 GMT
Not After : Oct 20 20:01:42 2025 GMT
Subject: CN=668c91e466f79c345fa9fab42e98441b2b7a20d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:25:ea:1e:fc:c1:60:0a:33:43:80:50:d3:4c:
b4:e3:65:54:9b:5f:b3:23:71:0b:81:3b:b3:00:da:
68:07:88:0c:ce:b1:f3:8c:ea:7c:1a:c6:f3:b1:c4:
59:31:12:9d:c3:8b:17:10:37:74:f6:bd:4e:bb:3f:
e8:39:9c:48:e2:86:91:79:0c:4a:20:4d:71:10:f6:
e4:6d:14:a0:0a:4f:09:04:93:13:fc:84:6a:72:2b:
80:14:11:81:3c:bb:a1:aa:28:27:51:a2:37:c2:bc:
2f:06:91:81:d1:8d:84:b3:5a:e6:90:d2:55:79:66:
8d:f0:a7:2c:96:a3:37:99:d7:4a:d2:30:ca:f9:17:
4e:ce:f2:d7:b9:e2:f6:cb:40:ab:0f:08:c7:7e:df:
46:35:95:e9:a5:09:72:e2:f2:8a:03:7b:58:84:42:
c1:9f:41:ac:60:fc:91:2d:32:53:93:cd:e4:39:38:
16:20:30:ed:a0:76:e4:55:43:79:c0:e4:f4:a4:a6:
9b:c5:f7:1d:f2:9e:1a:ba:bd:d6:2b:8e:c2:2c:13:
3a:bb:81:bd:d9:af:b2:7e:57:a7:cc:cc:cb:dc:87:
de:14:fb:cb:6c:87:fe:92:d2:62:07:18:04:14:5c:
5d:98:eb:93:9e:d1:f7:47:00:a3:f8:39:e3:ca:fa:
10:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:91:E4:66:F7:9C:34:5F:A9:FA:B4:2E:98:44:1B:2B:7A:20:D3
X509v3 Authority Key Identifier:
keyid:42:7A:26:70:50:8B:94:51:23:BE:EC:BF:13:14:5F:FB:D7:BF:CD:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QnomcFCLlFEjvuy_ExRf-9e_zeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ec2e08-f63a-4bd7-b864-06b3cea492ee/1/QnomcFCLlFEjvuy_ExRf-9e_zeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:45:3c:f8:e3:9e:cb:ae:a1:2a:30:90:b3:54:7b:8d:5c:54:
2c:e4:cb:8a:de:11:5e:22:e6:79:00:e2:c2:f3:5a:c5:04:1a:
6a:fd:10:5e:97:71:6a:72:d0:8e:31:4f:ec:c5:7a:18:07:33:
16:0d:f7:57:b4:1d:dd:f2:06:f5:6c:37:2a:91:4c:d8:3f:8a:
8e:4f:5e:5d:97:bb:2e:6d:3b:ed:21:82:18:f5:9c:9a:47:13:
16:cf:6e:77:f1:93:12:04:9c:19:77:fd:52:2f:9b:0c:16:b6:
be:ee:d5:6b:af:92:a9:58:ad:d4:5e:b5:23:a3:62:16:f2:54:
87:79:e7:69:e0:1e:42:52:fd:85:45:c8:ea:c7:c0:71:6e:83:
24:a1:a5:fc:55:d4:04:e5:9d:09:58:06:84:57:69:8c:89:de:
df:e7:1e:90:41:6b:bc:2f:b4:0c:62:e4:20:ad:16:65:00:3d:
96:e8:76:3d:37:85:97:62:07:71:b0:6e:27:2e:ed:55:f0:a8:
e4:c6:a2:df:ed:4e:4a:b9:5b:c1:69:97:9a:43:b5:a3:e8:1f:
f5:de:7f:42:c7:d3:18:be:93:fb:88:dd:09:b0:e3:64:a7:33:
36:63:7f:82:7c:7b:a1:ee:f1:80:87:4e:99:71:71:96:ef:d6:
f3:4f:3a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client