Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: E0jIasF8bxkf2wY2ll5hjCsItkGZ3rTgbXJItbVsa50=
Subject key identifier: 8E:43:20:55:B5:9F:02:F7:2A:66:5E:AC:FE:80:7A:5D:7E:C4:F3:95
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019A4D0733FEDDA91211334C5B5C9C13E111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 068B
Signing time: Tue 04 Nov 2025 04:01:48 +0000
Manifest this update: Tue 04 Nov 2025 04:01:48 +0000
Manifest next update: Wed 05 Nov 2025 04:01:48 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: GtzfT1p0hxtQ26PRGkTi2QZPuqLTsSp1rE6Ekrp01dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:33:fe:dd:a9:12:11:33:4c:5b:5c:9c:13:e1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Nov 4 04:01:48 2025 GMT
Not After : Nov 5 04:01:48 2025 GMT
Subject: CN=8e432055b59f02f72a665eacfe807a5d7ec4f395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:83:a2:92:7a:a8:07:a7:4d:dc:42:c4:60:
e3:30:cc:65:d9:0a:d0:80:c3:68:cf:75:72:35:8e:
c4:6a:b9:dd:fc:f4:56:8b:b3:15:95:b2:5e:aa:8f:
b7:4b:13:13:dc:0c:19:aa:3d:a0:f3:9b:56:21:d3:
13:42:00:c4:09:1d:13:5c:75:a5:a5:c9:40:c3:ba:
0f:3f:14:23:6d:bf:8f:bb:36:a7:94:8d:db:97:29:
f7:08:9e:c6:b0:c4:de:c6:b6:10:ec:2f:19:1f:e6:
e5:1a:b8:50:77:a8:a4:53:36:2b:a0:1b:ff:99:d3:
d3:ce:34:77:53:5d:72:de:59:7c:78:fb:9c:96:a4:
1e:e7:17:76:a7:01:54:82:52:48:42:68:c3:c7:2e:
fa:bf:ea:e4:93:b3:e5:43:cb:ea:ec:16:35:ee:70:
9f:94:38:a4:d9:f0:8f:df:82:55:46:4a:72:0f:08:
42:31:ab:c4:66:57:04:ef:1d:23:6e:5a:0c:c7:82:
aa:a4:7d:cd:8b:41:3c:08:bf:0e:eb:7e:b1:1a:e2:
7d:c8:e2:c7:bc:80:cd:59:0e:1d:f5:34:f6:99:6a:
71:6a:79:35:5d:63:c7:59:d9:6f:fb:29:94:c9:26:
26:eb:4b:ec:19:fa:bb:66:50:a1:e0:df:30:37:1d:
a3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:43:20:55:B5:9F:02:F7:2A:66:5E:AC:FE:80:7A:5D:7E:C4:F3:95
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:bd:0f:ac:49:b2:d1:c7:c4:36:d7:ca:40:8b:45:4a:1c:34:
1f:ca:29:6c:75:34:36:bd:1c:d4:53:71:f2:12:d1:d8:cf:0a:
0e:cf:64:02:81:0f:54:6b:83:b4:a2:8c:01:c7:e1:34:e5:f9:
5a:78:3a:d7:8a:8b:5a:06:ab:c5:3f:f1:23:1f:7f:12:cd:1e:
a7:37:69:8e:41:0d:f5:cd:a0:96:2e:57:1b:52:f1:5b:bf:9d:
a3:0b:14:7d:60:40:ff:71:55:01:3e:72:71:23:75:20:0a:8c:
d3:3b:9e:98:be:8f:2b:e6:c8:db:14:80:fc:2a:f5:57:09:9b:
f9:29:2c:bf:cf:2d:c3:f6:cf:03:bd:14:d3:b3:01:2d:c5:68:
41:21:be:2e:b5:ac:e1:b3:f5:e2:dd:1b:91:2e:97:ba:a7:be:
25:31:6e:28:10:85:4f:36:07:22:f2:a5:56:28:d9:8f:16:12:
36:9d:ac:1c:aa:e4:23:e2:40:ce:de:c0:07:48:1e:95:3c:9e:
74:42:80:90:df:4f:3a:0f:93:32:e2:6d:31:7f:d2:1c:6c:c1:
4d:da:ae:b2:89:52:f5:52:ae:26:52:ca:ac:90:1b:18:f0:fa:
e3:2d:dc:b6:57:e4:30:23:79:3a:81:ef:56:ea:3e:fb:2f:bc:
3d:3f:02:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:52 2025 by rpki-client