Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: w+9TC+43HCY5Clu+zSgMqwTj58Eoi/jsQZ+2qnCWBig=
Subject key identifier: 6B:D3:F8:C0:CD:40:66:4D:0B:5B:80:20:46:1A:66:41:75:5D:85:CA
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019A56AE56226D7CDBC4CCEE384C34D82DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 170E
Signing time: Thu 06 Nov 2025 01:00:56 +0000
Manifest this update: Thu 06 Nov 2025 01:00:56 +0000
Manifest next update: Fri 07 Nov 2025 01:00:56 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: HIc+NZ0JTfltvtrmYKZZR/bf4Ty1ZkafPVlriUbGw0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:ae:56:22:6d:7c:db:c4:cc:ee:38:4c:34:d8:2d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Nov 6 01:00:56 2025 GMT
Not After : Nov 7 01:00:56 2025 GMT
Subject: CN=6bd3f8c0cd40664d0b5b8020461a6641755d85ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7e:34:92:87:ba:f6:0c:0c:98:fc:39:10:f4:
34:59:b1:16:b7:22:b7:09:9e:6c:07:da:58:3e:e4:
55:b7:77:a9:fc:a7:40:d8:87:6a:15:da:14:44:03:
47:51:0a:86:81:71:5e:b7:ea:07:ed:97:db:95:11:
9b:03:26:69:d9:2c:bf:9d:68:8e:f2:82:29:8f:76:
69:45:28:d6:a1:a2:61:08:4f:25:00:e6:93:8f:07:
70:ec:07:cb:33:a5:33:5f:31:51:a1:b0:44:07:48:
5e:61:1e:0d:30:41:0c:17:46:1f:18:2e:47:d4:92:
53:a7:7c:a8:42:91:2d:02:69:1c:9f:1f:4c:17:5f:
ef:df:fa:8d:39:82:cb:86:0b:f2:f3:c3:fe:60:4c:
bb:32:df:51:8f:f0:de:94:cc:b6:f3:32:cd:27:2d:
5b:31:9f:82:e6:64:9b:7a:92:14:d9:e3:31:0c:41:
05:f0:f8:b0:fe:9d:f7:d4:86:7c:42:f0:18:93:d9:
bb:ae:7a:17:c6:ab:24:1f:bf:f7:2d:78:2a:8e:5c:
00:27:58:fb:16:08:c5:33:1e:0b:13:77:1d:ed:ef:
53:4f:8b:12:e8:33:62:f6:49:4d:c8:c3:bf:36:26:
af:08:9d:ad:01:fe:a7:2e:a4:42:62:cd:8a:48:09:
8e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D3:F8:C0:CD:40:66:4D:0B:5B:80:20:46:1A:66:41:75:5D:85:CA
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:70:63:18:9a:43:45:ae:c2:df:65:3f:cd:37:ea:88:6a:63:
a2:d4:94:7c:64:53:58:a6:3b:66:fe:d2:a2:87:01:d3:ce:64:
74:2e:fb:58:5c:18:f3:e5:67:df:6a:3c:a7:fe:2e:d7:73:e7:
81:d5:dc:39:91:4f:4c:91:f6:dd:d0:e2:e1:f0:10:df:8d:16:
3a:6b:5a:0a:0d:07:5a:9f:ed:04:3e:05:bd:97:c6:20:56:51:
9b:fc:68:c7:ac:0f:e0:a4:10:99:6b:2d:e9:a8:27:94:1e:b0:
0c:ad:7a:ec:48:e3:b7:a3:61:59:58:15:38:60:b7:f8:42:a9:
99:09:a3:13:53:54:d0:fd:00:35:ab:66:a7:b7:fd:e1:13:4b:
f1:68:39:7d:6d:41:5f:9e:4f:b8:a3:3c:f0:47:5a:ea:4c:ce:
2e:f8:5f:41:55:c6:33:81:a2:c2:40:34:82:20:ee:27:09:27:
66:a9:34:e8:eb:2e:96:f0:c7:3b:ed:75:57:ab:e8:8c:d0:60:
67:27:d2:ba:6e:f0:8a:e4:7c:46:79:2d:91:a9:45:1b:0b:02:
2d:32:f5:db:a6:56:b8:d5:d8:c3:06:ad:89:75:cc:11:d7:5e:
55:fc:40:c2:b9:61:4e:67:63:2d:ef:b3:96:02:dd:9d:3c:0f:
c8:70:b4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:43 2025 by rpki-client