Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
File: QfIoYMpivSg4-DKPF4OdHoYI0m0.mft (raw, json)
Hash identifier: b6tgtJ2sfeFe8tn6JG4BexW8lI/kOyS/0YVfhMRXuZA=
Subject key identifier: 21:F3:82:0D:EC:E1:D0:2B:24:49:B9:63:31:CA:87:6A:B4:9D:FE:A9
Authority key identifier: 41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
Certificate issuer: /CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Certificate serial: 019A5074B8C7B25746436FE6E3F2A0584AAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
Manifest number: 02E7
Signing time: Tue 04 Nov 2025 20:00:18 +0000
Manifest this update: Tue 04 Nov 2025 20:00:18 +0000
Manifest next update: Wed 05 Nov 2025 20:00:18 +0000
Files and hashes: 1: QfIoYMpivSg4-DKPF4OdHoYI0m0.crl (hash: gPIEopx1pgh5q2n0rTOe5W/gWuQhkMvHS5e6qRuj2bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b8:c7:b2:57:46:43:6f:e6:e3:f2:a0:58:4a:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f22860ca62bd2838f8328f17839d1e8608d26d
Validity
Not Before: Nov 4 20:00:18 2025 GMT
Not After : Nov 5 20:00:18 2025 GMT
Subject: CN=21f3820dece1d02b2449b96331ca876ab49dfea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1a:e8:b8:e8:8d:fd:ee:09:fc:7e:7d:31:09:
9f:c0:c7:55:46:14:a9:e6:a7:35:18:62:a0:37:a5:
aa:30:ee:70:63:b6:94:e2:0e:3d:c6:62:6f:a8:a5:
66:cd:b9:80:bd:1d:fe:8a:3b:aa:59:c5:8d:f0:16:
de:58:f1:50:7f:f6:45:61:20:9c:af:42:02:7f:7a:
e5:bc:74:f8:bf:33:9e:65:90:d7:7b:d9:df:2c:c4:
eb:75:4c:41:ee:00:8e:98:85:f4:63:3c:dc:17:5f:
58:00:92:90:9a:f0:07:b1:9c:f1:d7:73:58:47:ce:
13:52:db:59:86:55:54:fa:02:ad:ba:78:74:26:05:
49:1a:3c:bf:9a:5c:57:da:b2:29:cf:89:80:a3:8b:
73:f8:47:d0:62:f0:7b:92:35:da:91:1e:5d:3f:52:
79:e2:3b:ae:58:f3:9d:ec:77:61:6b:af:09:72:57:
54:7f:00:25:49:b0:d2:93:2d:fd:a2:83:ba:85:9f:
de:83:f5:77:fc:78:ed:e9:f1:6f:12:3b:24:4a:ba:
b5:fe:13:2f:ad:a6:8c:73:5e:a2:af:84:5d:c6:a1:
8d:41:d1:3d:c0:e5:3b:09:bb:2d:12:f3:9d:5d:d9:
17:92:b7:47:f0:59:0c:b7:c5:a5:02:a4:4d:da:93:
df:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F3:82:0D:EC:E1:D0:2B:24:49:B9:63:31:CA:87:6A:B4:9D:FE:A9
X509v3 Authority Key Identifier:
keyid:41:F2:28:60:CA:62:BD:28:38:F8:32:8F:17:83:9D:1E:86:08:D2:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfIoYMpivSg4-DKPF4OdHoYI0m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/63a990-04bf-4f77-84a1-fac64e1fb342/1/QfIoYMpivSg4-DKPF4OdHoYI0m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:85:e6:a7:5e:58:03:fb:2d:eb:83:0d:27:e6:07:6f:62:ee:
38:ac:ba:01:b3:74:a7:48:29:12:c8:95:bb:f1:cc:06:2c:e4:
10:50:57:4f:a7:c2:c8:82:e1:37:8b:f3:52:d3:4b:07:07:8b:
c3:35:2e:24:b5:71:a5:82:2e:2f:da:7a:52:55:59:64:26:2a:
9e:ad:09:30:0b:65:6d:79:db:d9:15:19:56:16:72:7a:f2:e1:
21:6f:da:f8:9c:2c:10:5f:11:a1:62:83:ed:02:26:4a:3c:fd:
3f:f6:9e:bf:6e:48:5b:2c:5d:f1:17:04:f0:78:41:f7:f4:1e:
1d:5f:8d:66:94:43:a6:04:c6:84:ec:a3:27:48:ba:0e:34:58:
68:cb:1f:09:ae:47:2f:32:65:38:d8:f3:49:c2:6e:7a:d9:43:
da:a0:34:fa:b7:8e:bb:46:e7:3f:f3:9d:12:66:be:05:36:1d:
1f:e7:1c:53:b7:de:54:1f:c1:97:c1:12:e1:ba:26:98:c9:19:
f8:c6:11:e2:b7:e5:f8:a8:64:fd:a6:55:fe:0f:55:f8:83:d7:
86:cc:6f:9d:a4:96:91:32:ea:99:d4:2e:0d:3d:83:dc:bb:0e:
82:9a:2e:da:b4:b8:0f:3a:b0:e8:0b:a1:24:e7:26:b4:95:16:
3e:40:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:11 2025 by rpki-client