Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
File: QET9GYC6AXiKNTom_viVTtfBH5Y.mft (raw, json)
Hash identifier: Covx2wg3ma31+xVRF4ZxfT6bEsNLrQ9MaF/DqcRhERY=
Subject key identifier: 5E:3C:FE:48:1D:F8:CC:87:D5:50:A3:06:E0:D1:F0:D0:7B:96:17:5C
Authority key identifier: 40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
Certificate issuer: /CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Certificate serial: 0199FD347D8DC5DF0EA2194427BBB17CD097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
Manifest number: 0DCB
Signing time: Sun 19 Oct 2025 16:01:39 +0000
Manifest this update: Sun 19 Oct 2025 16:01:39 +0000
Manifest next update: Mon 20 Oct 2025 16:01:39 +0000
Files and hashes: 1: QET9GYC6AXiKNTom_viVTtfBH5Y.crl (hash: uC/++Th01kJf8gNClGye0r/hy7eCpN2gyJAt8ipEkBo=)
2: VF4oENC3ROv0PkRYyOKz5znS7Lw.roa (hash: VANb10DSIL8eOlHbsJ6So28/QiKbnVdpu6HtPHf6lTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 16:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:7d:8d:c5:df:0e:a2:19:44:27:bb:b1:7c:d0:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4044fd1980ba01788a353a26fef8954ed7c11f96
Validity
Not Before: Oct 19 16:01:39 2025 GMT
Not After : Oct 20 16:01:39 2025 GMT
Subject: CN=5e3cfe481df8cc87d550a306e0d1f0d07b96175c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a4:b2:73:a7:d3:32:fa:92:06:39:ca:46:0f:
ab:08:bd:0a:e2:90:22:21:10:b8:f7:51:38:0a:90:
75:c3:32:18:6a:e5:75:c3:40:e6:ff:2b:91:31:3a:
4c:0e:a1:a0:31:bd:5a:f4:2b:9b:3a:0e:bc:c5:20:
5b:4f:59:19:09:d3:96:e1:9c:4e:7a:f2:38:7c:7f:
5f:cb:46:da:84:79:5f:b7:94:c0:45:75:ce:65:18:
eb:7c:da:a7:85:67:65:50:ce:bc:dd:39:df:95:06:
2a:ad:33:6d:9e:46:5b:80:b4:96:4e:ca:93:24:7c:
ca:f6:7c:2e:68:1b:2c:58:a4:8c:4c:f5:b6:79:6c:
58:9e:aa:2b:68:c2:f7:02:68:d4:44:98:68:e9:7e:
25:05:f8:cf:ae:d8:6e:16:1d:2b:ca:5d:f2:25:55:
09:29:47:47:62:8e:40:bf:70:dd:c3:aa:e0:cc:46:
e6:55:31:3b:8a:57:f8:fe:f3:7e:68:77:22:b6:73:
45:de:1a:32:52:cb:16:9e:8f:77:63:86:bf:f0:d4:
3c:28:fd:39:c1:16:e7:ee:83:35:85:92:08:40:cf:
87:de:c2:37:7e:81:b7:87:7a:c5:ad:b5:ac:8b:9e:
98:99:63:e7:2c:88:9e:85:6f:1a:42:30:ba:f9:89:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:3C:FE:48:1D:F8:CC:87:D5:50:A3:06:E0:D1:F0:D0:7B:96:17:5C
X509v3 Authority Key Identifier:
keyid:40:44:FD:19:80:BA:01:78:8A:35:3A:26:FE:F8:95:4E:D7:C1:1F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QET9GYC6AXiKNTom_viVTtfBH5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/15b16a-f76b-41a4-88bc-91cf616d2c52/1/QET9GYC6AXiKNTom_viVTtfBH5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:45:b6:ca:60:3d:b8:6f:6a:d4:2e:9a:b5:9a:1f:19:2d:f1:
9f:ed:3e:ae:af:c8:8f:42:2b:af:ec:1e:12:f3:a7:ee:6b:c1:
ef:4c:7b:c4:1f:66:66:57:77:4c:ae:16:c1:fa:06:ad:20:04:
fa:7b:e8:7b:a0:c9:55:8a:12:0d:43:83:82:ed:9b:36:3b:72:
f1:39:5c:09:88:fc:b1:c6:15:42:30:29:6f:d8:59:94:7a:3a:
1a:3b:62:b8:01:6b:aa:cd:67:50:ca:bc:ae:6c:c7:f1:60:95:
1c:3f:5a:a3:df:c6:1a:1f:14:27:f1:c6:d4:1c:81:f9:de:d3:
a9:bb:fe:78:dd:56:d4:24:92:a7:f5:20:b3:8a:30:59:4f:50:
97:0d:b4:93:24:4a:cf:e1:01:e3:d4:19:11:cb:10:b2:2b:6a:
44:d0:6f:7b:f9:e1:52:11:b0:f7:e7:a6:ca:40:bf:56:cd:61:
d2:65:24:a8:02:90:9c:6d:2e:a3:ed:4f:ee:cb:66:13:50:0b:
dc:1b:e4:c5:01:13:64:50:c2:b0:8c:d9:93:d7:ce:0c:f9:e3:
10:11:1a:6a:b3:ea:20:a3:e2:db:00:1b:6e:35:a9:a2:c2:07:
f8:09:f1:63:5b:93:b9:48:cb:4f:75:a5:58:79:9c:37:7c:6b:
c4:4b:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:08:20 2025 by rpki-client