Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
File: QdoQ1mXBDhy27GwhUOPmAkBFudo.mft (raw, json)
Hash identifier: DUmBT2Aa1VRZQJZU0OBYZwCNDDKKh1Ob+r9Ggt0yrsU=
Subject key identifier: BE:46:AD:B7:E0:F5:D1:C8:3E:30:0E:9E:4A:49:D2:75:E0:B2:BF:F1
Authority key identifier: 41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
Certificate issuer: /CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Certificate serial: 019A4E4F8001D8E6DB2B44DA90E5AA7CF680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
Manifest number: 1040
Signing time: Tue 04 Nov 2025 10:00:24 +0000
Manifest this update: Tue 04 Nov 2025 10:00:24 +0000
Manifest next update: Wed 05 Nov 2025 10:00:24 +0000
Files and hashes: 1: QdoQ1mXBDhy27GwhUOPmAkBFudo.crl (hash: q/A+aEbo8xY2WKFg8LAzh9Km/kow3jKSecbMvbOE5LE=)
2: j3zO5OguCGwVjS4_cTve-Ba-iMs.roa (hash: djJiO0HYB1/EJ/pv3egGmNDFEP34QgqPKHUoq0TwlWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:80:01:d8:e6:db:2b:44:da:90:e5:aa:7c:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41da10d665c10e1cb6ec6c2150e3e6024045b9da
Validity
Not Before: Nov 4 10:00:24 2025 GMT
Not After : Nov 5 10:00:24 2025 GMT
Subject: CN=be46adb7e0f5d1c83e300e9e4a49d275e0b2bff1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:16:82:4e:d0:2e:ea:70:f2:df:22:e6:84:6e:
97:5c:61:c1:37:60:17:9f:a5:ee:57:37:0b:35:18:
a6:27:83:a7:f1:36:ac:a6:7a:f2:fa:f2:6f:10:3e:
a2:0b:4f:e0:a7:bc:35:a8:b3:f3:31:74:0a:66:39:
cc:6e:e6:bd:1f:2c:d4:37:8b:dc:cf:19:70:77:03:
8a:80:c7:03:de:06:1e:12:c9:85:22:52:b4:d5:28:
72:cf:ed:8c:a4:a1:2e:d0:09:c7:a6:18:39:23:47:
5f:6a:be:05:d0:31:2a:7c:23:46:21:42:8c:a7:28:
60:e8:92:99:1e:1b:ac:12:8b:58:53:80:88:58:97:
60:4f:48:bb:5a:51:06:9b:60:01:52:20:cf:2e:35:
31:fb:95:5b:c1:8c:53:67:f7:e7:1d:80:4d:76:6e:
e6:93:2e:02:c4:64:21:59:81:15:96:50:70:8f:ef:
c8:52:d3:c0:42:a4:5b:6b:23:ca:13:a2:fc:f9:f2:
b2:3d:8f:0a:c7:fb:3b:43:69:74:e4:f9:f5:e6:2a:
a2:6f:f5:a5:69:85:af:85:78:ce:f7:a1:18:3c:86:
b3:ae:39:46:49:f8:f3:96:d1:9f:e5:f0:bd:e2:80:
22:71:8b:51:f3:b9:ce:05:f9:d8:78:17:f0:eb:92:
f2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:46:AD:B7:E0:F5:D1:C8:3E:30:0E:9E:4A:49:D2:75:E0:B2:BF:F1
X509v3 Authority Key Identifier:
keyid:41:DA:10:D6:65:C1:0E:1C:B6:EC:6C:21:50:E3:E6:02:40:45:B9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QdoQ1mXBDhy27GwhUOPmAkBFudo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bade34-0ac1-421f-8934-bb1fc4547033/1/QdoQ1mXBDhy27GwhUOPmAkBFudo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:d4:07:8c:f8:3a:cc:3e:7f:71:15:c7:3a:e7:21:4f:ad:a7:
9a:4b:73:26:88:66:e8:e9:f6:07:d8:29:1f:87:74:ee:10:9c:
40:a2:36:8b:79:fe:3b:bf:19:7d:09:7a:6b:3f:39:29:af:e2:
9e:36:f3:54:dd:6b:92:bf:27:35:69:88:56:85:11:af:9c:4b:
e7:ce:fe:03:e8:70:d3:d9:93:d9:38:35:a3:ba:ff:f4:22:e0:
0d:3a:68:25:fe:82:c4:b3:31:b2:ca:c1:d3:dc:d0:74:c0:13:
f3:2e:7b:f5:55:82:82:14:8a:c9:ba:36:ed:83:52:87:bc:b6:
69:98:0f:f7:fa:03:75:65:51:15:fa:0e:f1:31:d5:b5:d6:53:
1b:ad:4d:64:a6:87:d8:ba:07:b6:6e:52:f8:47:ad:99:e2:b7:
1e:04:a0:38:28:73:21:22:ed:ef:2c:16:19:91:60:ff:81:02:
42:b1:39:a5:d5:43:b6:88:a8:57:38:6f:fb:eb:cf:fa:b3:3a:
fb:29:ad:a7:fc:91:1c:8a:3d:2b:9d:88:7e:31:10:ef:30:c3:
a8:93:0e:13:38:bb:40:ca:88:9e:db:34:87:ba:fe:46:7d:ff:
aa:a7:7f:71:01:ae:d1:f5:72:c8:d1:9a:4c:39:6a:c7:ef:ed:
d7:3a:b9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:06 2025 by rpki-client