Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
File: QBMclDl36gqT787s000dXRyxgq8.mft (raw, json)
Hash identifier: 1VaMKlOUUnc1ELUML2j4ojjvMlqI3PsxVy3GNbxzQDs=
Subject key identifier: EB:96:F5:9A:23:68:2C:1F:18:0C:1F:FE:3B:0F:44:C9:96:6E:A3:34
Authority key identifier: 40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
Certificate issuer: /CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Certificate serial: 019A4DE204741BC07F901A3E2268ACAD4187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
Manifest number: 0FBB
Signing time: Tue 04 Nov 2025 08:00:49 +0000
Manifest this update: Tue 04 Nov 2025 08:00:49 +0000
Manifest next update: Wed 05 Nov 2025 08:00:49 +0000
Files and hashes: 1: QBMclDl36gqT787s000dXRyxgq8.crl (hash: tGjcJEf/3LH3Otv9DErnPnbkcSRaShGYgoD8pKpcEAM=)
2: ULUALQSKNZEpPcNq68X1y69o-9w.roa (hash: u+zVU0SkY5ZMKNVKnpjmcvlKMcttm6HzHNnhk032Vso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:04:74:1b:c0:7f:90:1a:3e:22:68:ac:ad:41:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40131c943977ea0a93efceecd34d1d5d1cb182af
Validity
Not Before: Nov 4 08:00:49 2025 GMT
Not After : Nov 5 08:00:49 2025 GMT
Subject: CN=eb96f59a23682c1f180c1ffe3b0f44c9966ea334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:dd:be:39:e4:c0:62:41:cf:64:d8:0f:c5:
be:b2:d6:05:d2:02:bd:bb:3f:f3:61:8a:d8:d0:cb:
7d:68:8e:1e:14:82:d7:f8:38:b7:4f:3d:8d:dd:e2:
1e:e6:f1:ac:e7:04:15:de:84:fa:a0:1e:a9:3c:cd:
53:b5:59:49:5a:86:d9:b2:61:e9:1b:f0:3a:fe:6f:
fc:87:e4:62:da:43:fa:87:93:5f:36:56:8f:8f:17:
9c:93:e9:4c:4b:c4:9f:c9:0f:9a:ba:6f:46:cd:8b:
11:d3:cd:40:05:c3:f3:59:fa:6a:46:e0:76:ce:1e:
05:a6:3a:86:0b:3a:3c:7e:f4:78:8f:e6:c0:ee:c1:
23:23:d4:7f:c5:13:ae:cf:4c:73:94:53:4b:4e:e9:
d4:a3:3b:76:d5:4b:71:35:a2:00:d0:2f:99:d1:b1:
c8:70:70:9c:d8:de:e4:1c:86:1d:a2:95:0a:e2:1b:
93:0d:67:90:79:16:05:89:50:c7:f7:69:9c:64:97:
f3:b6:8c:7a:8e:d7:27:b0:56:42:87:6f:e6:38:13:
ee:5e:0c:33:9d:4e:53:b7:1d:f2:7f:5f:dd:bc:40:
3c:38:a7:d5:5e:dd:57:a0:a3:03:e3:7e:30:52:8e:
dc:7d:1a:96:73:af:2b:11:f7:33:29:f8:d0:6b:c8:
e2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:96:F5:9A:23:68:2C:1F:18:0C:1F:FE:3B:0F:44:C9:96:6E:A3:34
X509v3 Authority Key Identifier:
keyid:40:13:1C:94:39:77:EA:0A:93:EF:CE:EC:D3:4D:1D:5D:1C:B1:82:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QBMclDl36gqT787s000dXRyxgq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c9b74-753b-42e2-b41a-2b649d5ebaf3/1/QBMclDl36gqT787s000dXRyxgq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e9:89:bf:9b:4c:e6:3e:8e:dc:00:4e:b0:8d:2f:4b:36:e9:
21:f0:cf:06:aa:06:bc:5c:92:8d:95:53:02:53:cc:68:78:ed:
f1:22:15:95:40:e4:1f:67:eb:59:c2:a9:7c:e2:98:fe:9a:22:
53:03:03:f3:90:03:55:f1:a5:9a:05:d4:6e:07:68:d3:a2:c6:
2f:34:eb:4a:f5:e4:ec:ee:6d:88:89:04:55:19:de:87:1b:b0:
a6:08:b8:a7:0d:ee:b3:81:cd:ce:4d:21:22:4b:de:af:e5:9f:
e8:e0:05:1a:af:33:2e:e5:3a:48:a1:e8:da:5d:a9:6f:05:77:
99:48:5c:bc:cb:2f:bc:c3:cf:ca:6d:d6:97:dd:7e:da:35:a2:
10:84:e3:b6:7f:17:20:21:7d:59:4a:35:61:15:a3:41:8d:42:
84:fc:09:ea:e6:84:a5:cb:6c:3b:06:7e:da:5c:6c:22:34:77:
34:e5:62:6d:17:79:ae:b6:af:97:55:f4:d4:c5:45:24:eb:8e:
b6:13:25:db:87:92:94:90:22:5f:95:15:25:4b:e4:0e:ed:80:
c3:01:e7:e5:18:8c:2d:1e:de:db:ba:a7:9c:fb:7c:91:4f:63:
52:b3:73:e4:10:1c:4b:f6:5c:ef:25:51:a9:97:15:86:fc:70:
57:14:53:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:53 2025 by rpki-client