Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: 6+vuu1XMH/c59S24sEssbOVbUrGeKPkaY//Ys6kS1/o=
Subject key identifier: 9F:57:5D:D1:D9:A1:89:7B:BE:99:47:BE:F9:6B:EB:38:56:AB:B9:75
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019A541B16CD01BCF33C9CDD8778B42226FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 03FC
Signing time: Wed 05 Nov 2025 13:00:52 +0000
Manifest this update: Wed 05 Nov 2025 13:00:52 +0000
Manifest next update: Thu 06 Nov 2025 13:00:52 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: TEbrwhb1QgUkAx2f3JERqSn2VO4zLWVoIE686u+ROkI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:16:cd:01:bc:f3:3c:9c:dd:87:78:b4:22:26:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Nov 5 13:00:52 2025 GMT
Not After : Nov 6 13:00:52 2025 GMT
Subject: CN=9f575dd1d9a1897bbe9947bef96beb3856abb975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:a6:7b:3e:35:e8:c3:a1:9a:6c:d3:8b:2e:
05:dc:e5:51:dd:f4:a6:77:82:66:d4:a1:e3:20:e5:
f4:73:21:8c:11:93:d0:8d:bc:fb:66:64:64:0b:57:
34:04:aa:a8:8d:42:67:0c:85:d1:52:1d:91:84:39:
4f:c4:14:ba:df:8c:17:f2:0c:23:86:6b:6d:b2:9d:
64:66:2e:2c:42:62:75:75:af:d9:45:4a:cc:ef:f0:
70:6e:df:20:7a:8d:e3:6a:a6:42:92:ee:58:1a:c2:
ec:41:cb:3f:19:5d:7e:f4:6e:de:18:1d:a3:5d:67:
d1:d6:32:dd:0e:ed:4b:0d:d9:36:34:47:59:57:a7:
c8:f2:81:e0:d6:b8:e9:52:85:2d:43:f2:5e:94:49:
c7:3a:95:7a:bb:c0:d7:ea:69:da:11:d7:5e:99:8f:
01:85:c4:c9:d3:5b:52:e8:3a:9a:42:84:43:71:5b:
33:c9:90:8a:0a:6c:ba:b3:20:f8:98:39:51:dc:c8:
23:8d:d0:19:19:b6:97:bb:8e:61:25:67:ac:90:b9:
50:ab:74:c6:5d:17:1a:d9:a5:34:bb:2c:88:37:b6:
85:51:d4:94:53:ca:22:55:72:58:67:21:32:28:28:
ae:89:a8:9e:f8:73:f9:ea:63:02:dd:5d:bc:7e:93:
72:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:5D:D1:D9:A1:89:7B:BE:99:47:BE:F9:6B:EB:38:56:AB:B9:75
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:00:56:bf:0e:31:f5:ba:10:21:e1:7d:f3:55:30:07:6d:
a8:5d:95:86:f9:4d:20:ea:09:8c:24:b1:12:ae:8e:dc:6a:1c:
10:cf:90:28:f3:18:01:f1:02:9e:3a:c7:70:0f:31:0a:d0:1c:
76:a5:ad:ca:13:17:33:2f:39:9f:a0:fc:48:51:24:82:77:b2:
06:8b:84:69:cb:63:6c:4a:49:28:a7:da:dc:93:6a:4d:c1:3c:
1b:c2:0e:36:31:f5:5e:16:95:ba:61:9e:82:70:8b:aa:92:0b:
fb:0c:19:90:6e:3e:e9:dd:80:4f:64:72:1b:97:9a:82:6c:71:
2b:bc:3d:1c:26:62:f3:89:f9:0e:55:9a:e2:c2:49:66:11:a1:
88:59:40:b0:8f:a2:92:49:ca:26:65:e3:57:1b:81:e7:df:b4:
8e:50:c0:c1:3a:bb:6c:45:64:bc:f0:5e:aa:d0:4f:85:ff:2f:
05:59:2b:f8:37:b6:c8:29:c4:5d:b7:54:0c:87:11:10:98:8c:
1c:61:37:8e:f7:7d:f9:94:5f:c9:ea:2d:22:40:da:e8:52:0c:
69:fd:4a:40:1e:fa:65:cf:d7:38:38:eb:2d:a6:74:6e:69:02:
4c:1a:0c:5a:05:92:51:80:d4:c4:89:90:8a:c9:68:67:e9:86:
c9:7d:00:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:36:47 2025 by rpki-client