Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: xgc/we1qKt1rKffCS3FY2+S4R+vC/68DUL2qtU5lXiY=
Subject key identifier: CC:26:08:EE:6D:4F:59:87:E1:C1:A7:25:2D:67:82:B0:44:37:A1:2F
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 019A4F61DF54FFEDBB6ACEF7DD81350111F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:00:05 +0000
Manifest this update: Tue 04 Nov 2025 15:00:05 +0000
Manifest next update: Wed 05 Nov 2025 15:00:05 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: kPtVsTMA7T6tyGz6M+gynf270Rud7KOlomzdYlOzpmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:61:df:54:ff:ed:bb:6a:ce:f7:dd:81:35:01:11:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Nov 4 15:00:05 2025 GMT
Not After : Nov 5 15:00:05 2025 GMT
Subject: CN=cc2608ee6d4f5987e1c1a7252d6782b04437a12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:a8:9c:aa:3c:79:f1:79:ef:25:e8:6f:51:a9:
40:f8:d9:00:b4:20:3f:e3:1f:d4:c8:22:7e:27:85:
c0:1d:0f:9e:88:17:d3:a1:70:14:df:91:a6:a3:ba:
3e:2f:b3:81:f7:e7:7a:05:e4:9f:2f:46:59:e1:51:
3b:cc:05:cc:81:fa:08:5f:f6:eb:72:97:20:48:8f:
14:23:e4:d3:4e:6f:f7:62:de:b3:91:89:49:9f:e2:
0b:dd:bd:58:df:92:ed:e1:4d:74:25:09:da:01:ae:
c8:de:3a:1f:cd:a3:9b:52:81:ae:da:e9:58:f1:0c:
df:89:a4:10:84:36:72:47:15:3a:ea:cc:57:37:d2:
bb:80:a6:d2:62:7a:05:a8:84:b8:74:db:66:b3:09:
ea:d9:86:c4:35:7a:8d:9e:66:c3:b9:78:2e:3a:ff:
56:5b:5e:9d:7c:96:4e:23:41:a1:b0:b0:99:01:9a:
63:20:d6:67:d0:d9:3d:28:46:02:13:55:ef:51:74:
34:ca:8a:79:ae:2a:f2:1a:ef:6d:a3:a4:9b:2a:5f:
75:92:40:c7:fb:9e:57:45:c4:33:b3:fa:93:99:ef:
b2:c8:22:23:61:3c:55:06:06:1a:73:ee:c3:2a:3d:
ce:07:2a:6c:0d:d7:be:90:65:de:cf:6a:74:ec:0f:
fb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:26:08:EE:6D:4F:59:87:E1:C1:A7:25:2D:67:82:B0:44:37:A1:2F
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1e:91:3e:55:af:19:d1:2a:94:15:8d:84:74:1e:5b:3c:27:
e9:6a:0f:b3:fe:2b:2d:72:57:3d:32:c2:92:0c:e6:44:39:c3:
a0:a6:5d:1a:20:66:b8:4c:15:25:72:5b:60:97:80:2b:04:97:
1c:06:58:3d:9d:3b:d5:0f:17:0b:3d:a4:17:e6:2b:61:1d:b8:
1d:77:6d:f5:07:9f:f2:22:0f:89:c3:58:ca:23:84:d2:50:69:
e4:52:7b:3e:f0:d5:1e:41:18:28:0c:4e:5c:ec:26:d2:be:c0:
e7:63:44:50:90:6e:24:3c:ad:b3:2c:2e:67:37:02:bb:06:c0:
44:9d:6c:1b:d4:65:23:55:de:ff:87:bd:fe:53:00:94:66:af:
d7:ba:46:b1:ad:bc:75:ed:ed:54:e8:97:80:89:41:bf:72:3a:
d3:39:7e:5e:dd:c2:c8:c3:b0:e7:78:10:da:5d:c4:eb:60:c6:
bc:18:2f:35:59:f4:2f:cd:eb:6f:ea:2d:76:cf:ef:2d:e0:59:
40:8f:0c:b8:79:83:f4:16:f5:21:be:6f:65:56:b3:97:bd:ed:
17:b5:7f:7f:63:d1:87:4a:1c:a2:7b:35:5e:c1:7a:b3:77:23:
94:2a:d0:27:fe:a9:c7:ab:00:fd:21:d7:aa:bd:8f:75:4a:fb:
75:3e:ef:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:37 2025 by rpki-client