
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
File: qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft (raw, json)
Hash identifier: pRSE4D4/0Qhert5v3phmpSQIY1xeyjasOmXdvai2pPY=
Subject key identifier: 32:04:CF:41:5A:78:E3:C9:2B:74:11:71:35:46:85:D7:E5:51:3A:69
Authority key identifier: A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
Certificate issuer: /CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Certificate serial: 0199FC589814CF64FE0DD5859DF38E8B709C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
Manifest number: 07CB
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 8CcKJiF0r4FrDqB9K7MCSFJJvag.roa (hash: oH5satYFVvZ45Q+JWd3Hf90Jew1mrnQWjIvCBL11FrU=)
2: qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl (hash: 6LpCq13MJ7wli7MkDl8GWgS0oyzp7bTz0NrP6CpVZl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:98:14:cf:64:fe:0d:d5:85:9d:f3:8e:8b:70:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9cad9a977bf8b6b40f0b8e998e5787c6ae641c0
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=3204cf415a78e3c92b741171354685d7e5513a69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:4c:33:c3:68:38:d5:74:35:2e:70:b0:d6:
bf:1a:a6:cc:29:bc:17:91:ed:77:f2:99:ef:39:03:
da:bb:ee:09:e9:2f:81:00:8e:65:c6:3e:2a:f3:1d:
00:92:45:f7:e6:ae:a8:ea:67:93:13:98:5f:62:ce:
49:2d:0d:d7:a9:cf:3d:03:76:76:dd:ac:73:9c:fb:
ee:2f:93:a6:a2:1a:1c:d1:fb:cf:bd:01:ba:47:79:
8f:ea:ad:87:24:7f:a9:4a:b7:97:4a:bd:dd:53:0c:
1f:71:29:43:f6:de:7c:46:a2:5b:80:35:5f:21:1d:
d6:db:06:b6:1c:91:e6:0f:d6:85:00:43:82:2b:9a:
21:3b:51:9a:1e:29:30:e4:ec:11:94:dc:39:1e:49:
a1:59:f1:4f:48:01:71:26:bd:ed:84:fc:63:79:43:
cc:55:01:f3:ed:10:75:b7:59:0a:bd:a6:2f:a2:62:
ca:49:a0:dd:93:ad:b6:55:c0:27:8f:4a:d7:40:84:
eb:a3:ce:68:9e:56:0c:02:29:d3:dc:2d:cc:68:c7:
c3:44:aa:dd:63:83:ad:f3:a0:47:f6:82:2e:63:3a:
54:d9:25:c4:b2:25:55:b5:f6:4d:7b:8a:24:d4:bb:
a1:88:62:04:27:7e:8f:cc:bd:86:b6:0c:3c:d1:9c:
bd:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:04:CF:41:5A:78:E3:C9:2B:74:11:71:35:46:85:D7:E5:51:3A:69
X509v3 Authority Key Identifier:
keyid:A9:CA:D9:A9:77:BF:8B:6B:40:F0:B8:E9:98:E5:78:7C:6A:E6:41:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qcrZqXe_i2tA8LjpmOV4fGrmQcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f2003-9210-44bb-8a27-db3ec75fa20c/1/qcrZqXe_i2tA8LjpmOV4fGrmQcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:67:90:e5:99:84:7a:bc:b1:c1:49:d6:9c:09:08:7a:9a:85:
34:6d:63:22:04:fd:09:ff:d1:97:a8:43:8e:08:bb:53:77:63:
e6:8d:ad:81:ef:b7:38:80:51:f8:9f:93:1f:92:e2:f4:00:1a:
a7:e2:9c:54:8e:87:c0:23:2b:25:96:3b:90:6b:09:ed:71:02:
ca:8c:d2:75:77:f1:5f:75:62:96:dc:9d:ba:ce:83:8b:54:06:
7a:9d:80:cd:24:f1:38:40:6c:aa:40:88:6c:1f:a3:f4:32:dd:
0d:eb:7b:4f:c7:7b:e0:64:01:39:1c:1f:15:43:d3:47:e6:cf:
12:7c:ff:64:df:95:0e:e5:48:8d:2b:d7:84:5d:4d:e8:77:a8:
59:d8:75:2c:a0:04:41:76:5e:32:eb:7c:3d:4d:a3:1c:23:fa:
e8:a7:2f:f0:d4:33:e3:d8:cc:f4:12:a4:50:2a:f0:af:c0:e3:
57:98:85:34:9c:68:78:5a:2f:ef:3c:44:6e:62:2a:9e:33:0a:
c9:13:4a:dc:0d:33:26:2b:98:54:ae:03:a8:e0:a9:5e:c7:1c:
e2:e1:b2:c0:d3:9e:04:80:8b:55:ea:bf:8b:e5:1c:1a:e9:ad:
81:63:73:96:39:f0:04:b3:1d:fb:3e:0d:c0:32:bf:68:35:37:
63:4f:6a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:11 2025 by rpki-client