Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
File: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft (raw, json)
Hash identifier: T1VQrOWJZi0VLwx7WAGG3LRdFz33hpUanCg9J3ik7YQ=
Subject key identifier: 09:A6:13:B6:69:4E:D2:87:4F:04:B1:0E:0A:AE:3A:FE:F3:D1:12:2F
Authority key identifier: A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
Certificate issuer: /CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Certificate serial: 0199FCFDB245E0A3FF84F30E34CB78273B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 15:01:48 +0000
Manifest this update: Sun 19 Oct 2025 15:01:48 +0000
Manifest next update: Mon 20 Oct 2025 15:01:48 +0000
Files and hashes: 1: qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl (hash: fZVPLkaTjdimyn8WktJXdOKJxz1m4SvcnlX1DHs9PTU=)
2: uE_fVUsQj_lty3I3lYpDSAIBXSQ.roa (hash: RZlwhFI1FuSzwxiwupmztd/WqpFc9LHBsKw5C8YM+Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b2:45:e0:a3:ff:84:f3:0e:34:cb:78:27:3b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ef61bdc034fb5638bcf19e07ec21d90019d42c
Validity
Not Before: Oct 19 15:01:48 2025 GMT
Not After : Oct 20 15:01:48 2025 GMT
Subject: CN=09a613b6694ed2874f04b10e0aae3afef3d1122f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:d8:7c:fe:97:89:1a:fd:8e:73:29:19:62:
80:60:60:56:7a:dc:58:e2:bb:a1:3a:7c:5c:8b:d0:
c1:f4:c8:39:1c:d0:cd:75:cb:8f:79:b8:4e:73:19:
ca:4b:ed:05:47:36:67:73:52:20:8d:f7:42:d6:3e:
01:03:1d:89:8c:21:bd:d0:9c:fc:55:9f:d1:b9:aa:
35:09:ff:4f:f3:05:b4:10:88:84:f9:e7:de:6f:ce:
5f:2d:31:f3:26:30:43:6d:0d:72:1f:8b:99:1d:d8:
de:7d:35:65:a4:da:46:7c:39:e7:15:dd:22:60:b4:
32:b7:9d:c9:3e:b5:e2:47:99:66:e8:4b:d4:c6:7f:
7c:73:c6:c7:f3:64:85:52:3e:8e:01:e4:2b:22:d8:
8a:40:70:ae:83:2f:9b:6f:73:54:18:17:09:7f:c9:
fc:5c:af:ad:56:a4:df:04:22:05:32:13:33:e2:34:
de:53:57:24:d4:40:6c:30:3b:b7:34:89:83:7c:b0:
dd:fb:cf:43:08:14:11:f2:0e:16:73:59:f3:ca:24:
60:5a:40:95:0f:b1:c1:5f:e1:9a:53:3a:a2:d5:cd:
1e:55:be:d4:41:ca:0f:f2:83:51:a0:c4:7f:ac:6b:
b3:e0:f5:b7:4f:51:43:97:9c:61:b4:7e:fd:81:80:
a0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:13:B6:69:4E:D2:87:4F:04:B1:0E:0A:AE:3A:FE:F3:D1:12:2F
X509v3 Authority Key Identifier:
keyid:A8:EF:61:BD:C0:34:FB:56:38:BC:F1:9E:07:EC:21:D9:00:19:D4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/300165-25c6-401b-9cbf-1f49bc7fd3bd/1/qO9hvcA0-1Y4vPGeB-wh2QAZ1Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4f:03:17:e5:5f:5e:7b:96:d5:8e:1d:aa:88:b0:2a:fc:ed:
36:e6:8e:95:29:6c:63:8a:f0:24:c5:f2:25:c4:23:55:38:00:
97:90:c3:2a:4c:96:5f:7f:5f:55:8b:43:98:82:06:9a:28:a9:
20:c7:42:f7:8b:08:1c:76:47:9f:2b:44:90:c6:c5:4b:29:2c:
fc:2a:eb:66:e5:7c:31:68:79:36:27:00:a7:b8:c8:27:bc:c5:
91:e3:4a:39:0a:27:cd:9c:3b:68:1c:ee:9a:bc:0c:3e:fd:9e:
66:b3:ef:69:c7:39:40:d2:9c:85:fe:1c:f1:de:77:59:22:50:
d8:ab:bb:a0:c2:2d:75:12:46:fd:14:f7:c1:61:b0:3b:3f:3b:
eb:b9:72:34:1e:9e:cc:43:23:1d:05:c3:b2:62:81:ec:ab:dd:
38:a8:37:3f:db:2e:18:34:2e:1a:6d:e9:75:f2:f3:a8:32:26:
c5:d0:df:ac:a9:a1:70:b3:31:a7:a7:1e:56:2a:53:3d:55:31:
26:42:15:87:99:6a:f8:10:16:c2:b2:a0:10:70:82:be:53:8e:
ef:a5:98:fd:29:f9:a8:98:c9:9c:4f:d6:fa:56:53:7c:c7:98:
d6:e4:b3:c7:0f:56:fb:8c:26:65:72:61:61:d8:ca:d0:13:36:
d1:e3:54:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:38 2025 by rpki-client