Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
File: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft (raw, json)
Hash identifier: riF+nyxKeI/tLzs4ooTUFWiyKiDqtwC+oaOT/aICPhY=
Subject key identifier: BE:A5:12:05:99:32:98:B5:77:60:52:F6:B4:9B:48:34:42:85:EC:89
Authority key identifier: 47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
Certificate issuer: /CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Certificate serial: 019A559B4CAF9D284F5D3D1BEDE411D187F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 20:00:32 +0000
Manifest this update: Wed 05 Nov 2025 20:00:32 +0000
Manifest next update: Thu 06 Nov 2025 20:00:32 +0000
Files and hashes: 1: R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl (hash: Kz7i9yo8VHPIwX9SnJqtKJ5KJ4dm8XFWWAcqdqHG4u0=)
2: UBzZXqpHAZVZ_dUL4TUUD1ewE-4.roa (hash: dU40dyYAxG0jUVXRYy3IsfQ8lbv7vAwEo5+BvKJGXqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:9b:4c:af:9d:28:4f:5d:3d:1b:ed:e4:11:d1:87:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e42233ed630b0b89f52c077ff0d5c2b37d4dfa
Validity
Not Before: Nov 5 20:00:32 2025 GMT
Not After : Nov 6 20:00:32 2025 GMT
Subject: CN=bea51205993298b5776052f6b49b48344285ec89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:42:d5:5a:2a:39:c3:29:92:ad:7f:2a:f6:
eb:65:70:ce:98:1b:33:da:44:80:bb:76:9e:01:f5:
12:99:8e:58:5e:fd:f0:50:81:56:e4:c7:6e:dd:7b:
ba:35:a5:8c:20:1d:9a:03:94:2f:18:e6:37:da:f4:
47:a1:f9:ca:26:6d:f9:11:15:09:1e:cb:42:5c:50:
59:b7:d6:a5:71:b7:6f:54:c3:f5:4d:95:a2:70:ea:
5f:a0:46:0b:de:90:e4:13:8e:04:7b:72:27:8e:09:
b8:a8:61:09:85:80:96:3e:3c:84:27:f8:cb:ee:68:
6b:88:23:94:23:6c:92:9f:2f:81:c7:bd:98:8e:72:
11:03:bd:43:b3:77:97:f7:81:fb:89:1d:c9:52:a9:
3d:e2:bf:bb:3c:ed:00:20:70:19:76:bc:f9:99:df:
d5:f1:f9:f6:e0:12:85:f6:9c:7b:f6:c7:5c:e3:2d:
58:23:91:af:d1:29:7f:92:79:07:f9:68:d1:95:1a:
d5:61:ae:05:0b:96:2a:68:1f:ad:40:d0:e1:b7:f1:
d8:40:fd:52:19:e6:3d:4d:b4:aa:5f:9e:0b:bc:06:
51:e4:fc:f6:6a:f9:d8:90:a4:60:75:9b:84:27:4f:
6b:c0:dc:28:c2:92:8c:16:e6:d9:3b:63:d5:f5:3d:
a1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A5:12:05:99:32:98:B5:77:60:52:F6:B4:9B:48:34:42:85:EC:89
X509v3 Authority Key Identifier:
keyid:47:E4:22:33:ED:63:0B:0B:89:F5:2C:07:7F:F0:D5:C2:B3:7D:4D:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/e94817-f259-4ffa-9ba3-7eb95cc0f749/1/R-QiM-1jCwuJ9SwHf_DVwrN9Tfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:df:ad:42:ca:9d:8e:ce:6a:06:b8:87:4b:ea:a7:5f:35:c1:
30:e6:84:86:74:a0:9e:5b:51:9a:9f:7f:9d:74:d4:6c:11:4f:
b3:4b:4c:4d:19:4f:24:e5:ec:1d:5f:d8:91:e3:cb:99:65:bd:
83:a3:1c:b2:93:f1:69:dd:77:ba:b9:50:c4:29:35:15:b3:c0:
94:4e:63:b8:f1:9a:75:c4:9a:ee:83:97:85:16:67:2d:d5:d4:
bd:b6:fd:ac:56:28:2a:36:bf:da:57:1f:d9:c6:9f:b8:9a:16:
6e:b0:ee:78:ac:6d:ee:42:a9:d5:a7:ed:18:a4:ab:44:3c:8e:
7d:05:c2:82:6d:0a:67:40:19:ec:0e:3f:a4:d1:d3:3d:3e:ed:
b0:47:d0:73:c6:35:7a:09:ca:00:8f:4a:36:44:6b:92:80:d3:
ab:0a:4f:53:4a:63:8c:ad:8f:18:63:8e:9d:6c:4f:dc:47:72:
4d:c3:e0:87:e7:a3:9e:c9:bc:ae:ef:d1:34:b9:fe:d7:59:c8:
7a:53:2d:8b:5d:51:ce:b4:00:50:48:80:35:02:a3:48:80:9f:
74:e5:9a:18:9d:2a:59:e9:9b:48:39:36:35:83:ef:a3:2f:3d:
45:95:48:cc:5a:c8:de:99:11:a1:2d:1b:c1:77:30:a9:58:b1:
ff:70:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:14:09 2025 by rpki-client