Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
File: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft (raw, json)
Hash identifier: JecHzxzjHU8F49BlQESfUtMu5ctVFI6RiaggeGZ7Irk=
Subject key identifier: 3F:45:E1:57:06:E6:54:BC:E5:CA:FA:61:B2:15:94:D1:1B:E1:72:2C
Authority key identifier: 40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
Certificate issuer: /CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Certificate serial: 019A52D1C0F056D63687D758725FA4D1DFF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
Manifest number: 1662
Signing time: Wed 05 Nov 2025 07:01:09 +0000
Manifest this update: Wed 05 Nov 2025 07:01:09 +0000
Manifest next update: Thu 06 Nov 2025 07:01:09 +0000
Files and hashes: 1: QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl (hash: L9alQHsiVzrwXC9TIP4A+pP5LhZ+uVvH93RpJJWibf8=)
2: fSiDlWwoGniklT0F1na2YoYly6g.roa (hash: jQShuABqrNJ6xVnXKO1phumkAcZdn3LFktiTS8/eFss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:c0:f0:56:d6:36:87:d7:58:72:5f:a4:d1:df:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cb59a418eadfa5dc869f56f1847fb25d987fc6
Validity
Not Before: Nov 5 07:01:09 2025 GMT
Not After : Nov 6 07:01:09 2025 GMT
Subject: CN=3f45e15706e654bce5cafa61b21594d11be1722c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:84:76:16:0c:25:e2:f0:ac:80:0c:78:dc:
05:e0:cb:9f:8b:6e:58:e9:4c:43:58:b7:e4:f8:26:
86:79:b6:7b:ca:4b:64:34:c5:6d:ca:29:de:25:ed:
71:89:e5:94:d4:be:d9:fa:b5:70:70:6b:18:dd:91:
27:8d:39:2c:d3:59:7c:95:4f:c2:78:94:1e:04:bd:
78:f7:fb:c0:b5:f7:4a:11:37:20:4d:76:93:ff:94:
3c:a4:af:54:80:51:eb:bc:45:5c:ff:06:4d:3f:39:
29:a5:0e:11:6d:6e:35:e1:77:c1:42:be:fb:6e:23:
2c:dc:94:90:09:de:35:4a:72:db:d6:9b:a1:0d:26:
bf:88:29:8e:bb:dd:fe:a0:bd:de:28:77:dc:5e:26:
85:bf:97:ba:13:59:9a:6a:88:f8:8c:55:bc:48:92:
87:d4:18:c1:2e:b9:15:0c:64:52:4c:db:70:fe:fd:
00:3d:be:d7:6d:bb:ba:d6:a4:e1:dd:9b:84:3c:48:
38:c6:67:4d:2a:2b:49:1b:0f:f3:a7:8e:4e:a5:94:
53:63:d4:f2:f2:d3:5f:21:e3:d4:51:aa:b7:7f:7a:
39:82:a9:85:7c:ae:f8:0b:bc:99:37:11:9f:0d:e9:
59:55:b5:15:74:32:8d:19:98:dc:6f:f8:17:d7:a4:
ff:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:45:E1:57:06:E6:54:BC:E5:CA:FA:61:B2:15:94:D1:1B:E1:72:2C
X509v3 Authority Key Identifier:
keyid:40:CB:59:A4:18:EA:DF:A5:DC:86:9F:56:F1:84:7F:B2:5D:98:7F:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/924c77-b283-4a52-9094-11f1b5a4b0dc/1/QMtZpBjq36Xchp9W8YR_sl2Yf8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:8d:b5:50:e1:1b:9f:c7:85:f0:21:20:b7:18:51:43:d4:9c:
67:57:1a:f8:c1:60:49:07:da:6c:87:5e:ed:ae:36:0d:b8:4f:
e3:07:b8:df:25:2b:de:a8:9a:12:9a:f9:f1:7d:66:92:91:4e:
68:de:d4:d8:ab:31:96:49:60:55:bc:20:5f:89:f9:81:2c:8e:
77:c5:b1:2c:60:db:7e:9f:c1:ad:d7:bd:9e:6c:c8:18:74:72:
a3:c3:a3:40:61:c8:d7:bd:e2:89:e9:29:a3:bb:4e:19:45:81:
b0:95:51:86:48:49:4b:c4:ca:c3:b3:c6:20:ba:11:c6:19:bf:
6e:3d:56:07:62:72:7b:a6:ce:38:2b:e8:7a:c6:d4:da:c7:51:
61:2c:92:ea:bc:84:19:69:49:35:de:04:bb:41:6f:bd:ba:da:
ba:36:42:57:1e:1e:b9:a9:59:1f:7a:3d:c3:ea:18:cd:7f:49:
35:41:f7:2e:a6:46:90:9a:be:f4:83:5a:44:5d:a7:0c:3c:d4:
42:d4:e1:6c:9c:16:87:be:99:e5:f4:1f:63:df:3e:60:a2:f5:
69:ff:72:dd:c9:ec:77:e4:75:8a:4c:f7:d7:ed:79:11:63:33:
12:30:a7:05:2c:02:c0:ad:50:52:41:db:76:e4:33:f2:2f:24:
6c:49:f2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 15:33:42 2025 by rpki-client