Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: nh9lcLfjYistdqoYHY47ohM/qTfZQemvUpd0nojen3E=
Subject key identifier: 52:2D:C3:1E:93:D9:66:21:2D:AE:1B:E3:9E:11:BF:FE:FC:16:40:3B
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019A52D228E99B357220C6693A25F2881F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 110A
Signing time: Wed 05 Nov 2025 07:01:36 +0000
Manifest this update: Wed 05 Nov 2025 07:01:36 +0000
Manifest next update: Thu 06 Nov 2025 07:01:36 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: PLJmtY0R5VHF00qfe6Fk3wy1pS/1NEQ+wvHWpuoXt/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:28:e9:9b:35:72:20:c6:69:3a:25:f2:88:1f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Nov 5 07:01:36 2025 GMT
Not After : Nov 6 07:01:36 2025 GMT
Subject: CN=522dc31e93d966212dae1be39e11bffefc16403b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:e0:3f:2d:c5:29:50:2d:8c:88:05:ae:35:
4f:40:32:56:46:40:10:50:6c:19:0a:27:2c:3b:43:
4c:ee:f8:2a:5f:35:74:d9:c1:e4:aa:a1:2e:32:92:
e5:77:b9:32:1e:fc:7b:77:dc:28:52:cf:a2:70:8c:
b2:19:2e:73:12:3e:fc:2c:57:b3:5d:ed:e8:14:ee:
20:d4:2e:fe:ab:26:f4:44:36:4a:58:d5:f6:35:bf:
fe:7c:a9:19:4c:03:80:ea:97:9f:67:82:4c:3f:6f:
0e:b8:8d:04:84:89:45:ec:63:62:47:c2:8f:ee:21:
24:51:07:d0:8c:16:a1:5f:20:fc:3b:83:8e:8d:b4:
56:8f:ae:3e:4e:b5:3e:11:32:e9:47:6d:f1:f0:52:
9c:2b:ae:00:ef:aa:c1:5b:1a:bd:09:de:ea:71:68:
fa:57:8b:ad:00:2f:41:15:0d:8a:dd:7d:32:3b:6f:
f0:56:02:15:8d:1d:34:03:ce:52:75:9b:1a:09:c5:
eb:db:82:95:b8:e2:7b:f1:61:79:76:ba:6e:87:fd:
20:95:44:9e:7e:43:0a:6c:2b:d8:6b:19:90:74:0a:
2b:53:e3:99:49:38:bd:5b:2d:b4:04:56:90:81:90:
d2:45:09:42:4f:43:5c:69:1d:9f:b7:5c:22:22:ac:
09:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:2D:C3:1E:93:D9:66:21:2D:AE:1B:E3:9E:11:BF:FE:FC:16:40:3B
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d3:87:30:a1:5d:0e:ee:a4:0b:77:0c:1c:99:11:49:34:f3:
0f:d9:f1:ca:11:e7:6e:e1:ad:f9:f6:be:47:39:6b:8d:98:ea:
c9:ee:b3:a5:2c:1e:51:6e:06:27:62:81:a5:8c:01:5d:01:fb:
93:96:3e:98:89:74:a4:a8:bd:3a:a1:49:3d:0a:4f:68:54:3e:
3b:4a:ca:48:cb:b1:b2:41:c0:33:06:42:be:dd:cd:f1:0e:33:
45:3f:d9:11:94:1b:4e:8a:99:b8:44:e5:a6:0d:9e:c4:f6:5b:
07:5b:48:dd:e2:6d:89:9d:12:7a:49:00:e2:f0:1d:7d:24:97:
11:4c:d0:ab:cf:ce:52:68:5e:7b:53:59:06:ff:37:37:1b:f2:
be:38:7d:52:0c:2e:8b:36:42:52:4f:a3:b1:cc:89:fa:04:61:
43:05:62:07:2a:2b:ac:e0:10:00:19:7d:f6:ff:36:01:45:2b:
5d:9d:1a:cf:ec:65:90:f3:48:4a:d6:ef:f9:75:fc:be:d4:0a:
e4:da:92:95:d1:50:c8:c8:55:79:58:50:95:dc:de:52:0c:c4:
94:96:21:32:37:32:5f:82:4e:62:c3:f0:bb:2b:53:bb:bf:59:
94:3a:70:f2:f2:d0:f5:3c:59:c8:66:33:43:20:8b:2c:15:95:
6a:aa:21:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpS0ijpmzVyIMZpOiXyiB91MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNGFhYmJmYWI5ZGU3MTI2YjdkMTE5ZGI1MjRkYTQxMTFm
MDRhZmUwHhcNMjUxMTA1MDcwMTM2WhcNMjUxMTA2MDcwMTM2WjAzMTEwLwYDVQQD
Eyg1MjJkYzMxZTkzZDk2NjIxMmRhZTFiZTM5ZTExYmZmZWZjMTY0MDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OHgPy3FKVAtjIgFrjVPQDJWRkAQ
UGwZCicsO0NM7vgqXzV02cHkqqEuMpLld7kyHvx7d9woUs+icIyyGS5zEj78LFez
Xe3oFO4g1C7+qyb0RDZKWNX2Nb/+fKkZTAOA6pefZ4JMP28OuI0EhIlF7GNiR8KP
7iEkUQfQjBahXyD8O4OOjbRWj64+TrU+ETLpR23x8FKcK64A76rBWxq9Cd7qcWj6
V4utAC9BFQ2K3X0yO2/wVgIVjR00A85SdZsaCcXr24KVuOJ78WF5drpuh/0glUSe
fkMKbCvYaxmQdAorU+OZSTi9Wy20BFaQgZDSRQlCT0NcaR2ft1wiIqwJDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFItwx6T2WYhLa4b454Rv/78FkA7MB8GA1UdIwQY
MBaAFEBKq7+rnecSa30RnbUk2kER8Er+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYt
NzFhMjdlZjgxNzg2LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9kNGM4YjktZTA4YS00YTI5LTkxYWYtNzFhMjdlZjgxNzg2
LzEvUUVxcnY2dWQ1eEpyZlJHZHRTVGFRUkh3U3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfdOHMKFd
Du6kC3cMHJkRSTTzD9nxyhHnbuGt+fa+RzlrjZjqye6zpSweUW4GJ2KBpYwBXQH7
k5Y+mIl0pKi9OqFJPQpPaFQ+O0rKSMuxskHAMwZCvt3N8Q4zRT/ZEZQbToqZuETl
pg2exPZbB1tI3eJtiZ0SekkA4vAdfSSXEUzQq8/OUmhee1NZBv83Nxvyvjh9Ugwu
izZCUk+jscyJ+gRhQwViByorrOAQABl99v82AUUrXZ0az+xlkPNIStbv+XX8vtQK
5NqSldFQyMhVeVhQldzeUgzElJYhMjcyX4JOYsPwuytTu79ZlDpw8vLQ9TxZyGYz
QyCLLBWVaqohPw==
-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:19 2025 by rpki-client