Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: DsinrtMnuQ0II5ZDEltySBMzVNr+YtAnDRlFv8xF11s=
Subject key identifier: 49:43:0A:9C:17:EC:F7:83:5D:F0:40:FF:5C:56:00:BF:78:FD:9B:3E
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019A4D3D331C30880C7127F240A45708D0DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0DCB
Signing time: Tue 04 Nov 2025 05:00:47 +0000
Manifest this update: Tue 04 Nov 2025 05:00:47 +0000
Manifest next update: Wed 05 Nov 2025 05:00:47 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: cJk0a9FQYmQG4gaIrdr8Yx6TVqu7VMXKctEB0jJljUU=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:33:1c:30:88:0c:71:27:f2:40:a4:57:08:d0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Nov 4 05:00:47 2025 GMT
Not After : Nov 5 05:00:47 2025 GMT
Subject: CN=49430a9c17ecf7835df040ff5c5600bf78fd9b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4b:ca:30:f0:87:ce:2b:81:32:92:da:9a:b2:
ff:60:41:ef:a4:d3:4b:86:4a:23:58:92:03:01:d8:
80:b7:61:e7:98:44:b9:73:7f:47:34:a5:f7:e3:5f:
08:09:4b:8c:5c:cc:a5:a3:3f:2d:11:8a:92:20:db:
de:e2:15:f8:5c:0b:c6:90:c9:aa:90:48:fa:34:fd:
11:b4:8d:27:f9:81:a1:7e:27:4a:ea:31:0d:a8:16:
31:d8:3c:8e:f9:29:76:aa:d3:22:3a:05:13:8b:5f:
fa:a8:18:42:0e:40:fd:1f:fa:3b:60:31:67:e7:02:
d3:83:b2:6e:50:8c:30:84:6e:56:49:ab:ef:ca:f9:
c0:ae:28:01:c1:6d:65:9d:6e:d4:c5:6f:20:1c:3e:
67:54:b8:48:45:60:41:fd:91:cc:25:f0:2c:2b:7f:
b8:cf:bc:5d:06:88:40:5a:1a:36:06:06:b7:56:15:
bb:b8:81:d7:b9:a2:78:04:f3:e4:08:f8:19:2d:26:
a6:bd:27:b7:e5:34:ee:c9:a0:0f:bb:7f:b7:f9:76:
28:7b:e9:ab:20:05:16:a6:7c:9d:4e:95:19:51:93:
27:9c:65:5c:d4:d8:ce:31:d4:48:fc:b8:be:17:bf:
9f:f8:00:79:22:db:83:b7:9f:d3:20:0f:cc:18:94:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:43:0A:9C:17:EC:F7:83:5D:F0:40:FF:5C:56:00:BF:78:FD:9B:3E
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:f5:ea:39:08:ac:2e:85:92:fd:e5:13:5b:18:2f:9d:e9:
b3:d7:e2:69:fe:09:a4:26:e0:36:e6:35:cb:96:1a:8d:ed:01:
22:a7:e6:bb:30:78:54:14:a3:6e:3f:4d:3c:22:77:54:82:06:
29:49:de:c6:31:3b:e2:09:68:45:02:3a:22:4b:11:3f:03:37:
5e:ea:18:e6:b9:f0:ac:bf:e7:c4:05:50:fe:60:08:36:af:fa:
3d:27:0d:e6:e0:c8:8f:16:f2:32:20:77:d7:d9:62:39:c7:83:
69:95:5d:48:ae:82:ea:e0:da:54:b6:0a:fb:37:04:6b:6f:86:
0d:80:c4:50:01:3a:4d:dc:d8:9c:e3:35:fa:d9:e5:c2:c7:b0:
17:12:c4:a4:d9:6c:bb:39:c3:9b:31:02:ee:40:48:f0:9e:d8:
2d:30:fb:26:65:41:e3:48:84:c7:8c:a5:7f:6e:62:a0:03:a9:
a9:e1:23:81:2d:a2:2d:3b:e6:d5:6c:41:85:43:59:c9:09:f9:
42:06:50:48:64:54:9e:55:9e:0d:48:39:89:ba:15:c9:40:06:
09:41:f2:e6:12:07:cb:fe:df:8f:ce:ea:ca:95:18:af:13:cb:
41:71:25:f3:14:fb:c7:17:81:62:4c:37:9b:94:ac:33:cd:93:
b7:22:84:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:51 2025 by rpki-client