Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: QI+SuCAGi17CseHThftjLJszF0oYmjwZeBkmJncr/io=
Subject key identifier: 0A:BB:43:71:20:8F:35:91:B0:51:0E:62:3D:B9:1D:2C:C8:BC:6B:8F
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 019A52D1A10BE7C54D6D3E28D586EF275118
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:01:01 +0000
Manifest this update: Wed 05 Nov 2025 07:01:01 +0000
Manifest next update: Thu 06 Nov 2025 07:01:01 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: 99vRiXQW6a4cvMUeoAwViOwci6h/w/NWZWlQyCJdBUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:a1:0b:e7:c5:4d:6d:3e:28:d5:86:ef:27:51:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Nov 5 07:01:01 2025 GMT
Not After : Nov 6 07:01:01 2025 GMT
Subject: CN=0abb4371208f3591b0510e623db91d2cc8bc6b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:6f:e2:4e:84:08:0f:31:f8:bd:da:18:ce:9f:
c7:ec:51:13:5c:c0:64:5b:3b:dd:26:72:c1:bc:d0:
ad:d2:a6:14:68:16:25:35:07:56:d1:6f:35:f2:87:
b6:a1:9b:8c:a8:0b:fb:1e:45:0c:b1:2d:2e:64:62:
8b:c9:8c:0d:df:1c:2e:0c:d7:39:2d:e0:14:1a:06:
ad:7a:4e:e8:69:2b:59:85:3c:f1:1f:41:eb:ec:ca:
94:1c:90:d1:bf:5b:9c:c2:92:7d:ef:5a:ea:c6:fd:
91:04:1b:77:63:7d:a2:f3:eb:9e:c5:a9:f2:02:22:
49:05:90:dc:93:e4:33:e6:e0:7d:8a:9b:9c:93:e7:
f8:0a:ba:a4:aa:66:a2:74:94:86:56:7a:1a:f1:22:
8d:e4:8a:7b:f9:67:52:b0:48:da:9a:cf:03:d4:93:
1b:7d:a5:0d:91:9b:ff:1d:94:33:e6:2f:0a:28:29:
b1:f7:3f:5c:1f:f1:97:c8:c2:95:1a:63:68:8b:08:
e4:c1:21:09:43:7a:bc:59:50:6c:cf:f8:f8:95:7d:
7d:c2:60:41:2a:aa:c0:9a:9c:7e:51:94:e7:f2:95:
52:6e:42:0d:62:31:5c:8c:61:e5:e5:33:6b:5c:9b:
ef:d9:7b:b3:e0:f4:72:ab:ed:3e:60:fa:0b:5b:83:
7e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BB:43:71:20:8F:35:91:B0:51:0E:62:3D:B9:1D:2C:C8:BC:6B:8F
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:35:22:e0:9d:95:ef:1a:9f:64:f7:aa:7d:0e:1c:5d:b4:a7:
64:12:3b:cb:e3:a1:db:c5:9c:d1:39:6c:1b:d8:8a:68:2f:55:
ef:e5:f0:cc:e7:d8:c4:af:6a:40:f5:c2:57:93:2c:64:50:2f:
7d:0e:5a:24:78:95:9c:16:6d:78:5e:bf:b9:be:82:cd:13:cc:
62:5c:e4:31:a8:7f:08:eb:4c:9c:28:ff:08:70:da:ef:58:e9:
2e:96:24:53:2c:3a:65:ab:56:f0:74:58:fe:3c:83:42:a9:af:
d4:e5:1b:0c:9d:c9:36:bf:87:b7:f3:cc:89:e0:ec:58:da:05:
a0:a7:24:f7:f0:64:3c:77:e9:f7:4d:a9:7a:3e:cc:0a:f0:3e:
98:f5:b8:17:3c:b0:8d:75:6f:ce:91:85:18:30:92:ce:b3:b6:
c5:25:97:1e:cf:85:86:d6:e6:1a:a1:33:47:3e:30:9a:0f:c1:
e8:fe:3d:77:9d:50:65:36:87:26:0d:7f:7b:c0:9e:20:f4:37:
62:8a:a6:03:5d:dc:7d:88:e3:ba:27:c6:41:0c:68:9f:34:f5:
d8:24:c0:00:5e:57:f8:ac:90:4d:23:6b:7e:56:99:e3:b2:80:
4c:6a:2c:34:ec:ee:8d:8e:57:84:55:e6:1d:16:b2:eb:e3:24:
4d:47:42:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:39:17 2025 by rpki-client