Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: eQO2Rjyyjeg8zvmJEteHnGYhFDEMBvXF/7eeO5w4uRg=
Subject key identifier: 98:85:11:15:90:C3:6C:89:55:05:D6:C7:15:CD:7A:29:6A:3A:1D:CC
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 019A4FCFD8110897690029C90A07903D2715
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 11A4
Signing time: Tue 04 Nov 2025 17:00:12 +0000
Manifest this update: Tue 04 Nov 2025 17:00:12 +0000
Manifest next update: Wed 05 Nov 2025 17:00:12 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: l6zGXbyHm2dgrZoQAfaj7UUSUMBnUp9K6RVX/drqgmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:d8:11:08:97:69:00:29:c9:0a:07:90:3d:27:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Nov 4 17:00:12 2025 GMT
Not After : Nov 5 17:00:12 2025 GMT
Subject: CN=9885111590c36c895505d6c715cd7a296a3a1dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:79:39:b8:e4:5f:f1:24:d1:5f:44:25:c8:07:
8f:9a:60:d5:68:08:99:31:e7:3e:04:84:a6:82:f3:
43:81:4e:89:01:99:49:de:73:1d:25:b4:08:8f:78:
e3:65:3b:b4:d8:da:6b:cc:d6:36:2f:c2:cd:9a:8f:
67:a1:d8:22:cd:a0:4a:51:7c:ea:13:cb:b0:37:8e:
f5:e8:89:1d:e7:54:2d:45:ca:81:bb:9a:57:36:c9:
ec:09:7d:55:7c:27:fd:fe:88:42:37:62:f8:cc:37:
a9:53:f3:7d:cb:df:a7:80:8b:37:a2:9d:6b:24:06:
7f:7b:25:85:89:45:5e:14:6b:a5:06:e3:8f:25:fc:
a8:b8:70:3b:09:b2:f2:0c:e6:79:42:a3:f6:3f:5f:
fb:ab:4e:3e:ab:c5:3d:9a:1f:47:bf:76:95:5d:23:
ce:ca:56:50:d7:25:79:2b:5c:ac:ff:4d:15:14:a7:
6f:86:da:54:f9:9d:f8:fe:6a:6b:44:5a:1c:62:2d:
ee:3a:a6:3a:0a:09:1d:61:cd:3f:16:a8:c6:5e:0b:
ff:e2:36:82:4f:80:37:47:9c:06:4f:1b:b9:79:52:
b9:1a:7a:28:be:b2:88:4e:1e:15:dc:ca:ba:7c:bf:
34:d8:b3:99:70:63:66:7d:06:d3:bd:cc:b8:21:55:
c6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:85:11:15:90:C3:6C:89:55:05:D6:C7:15:CD:7A:29:6A:3A:1D:CC
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:13:51:9b:03:1d:c9:dd:77:8c:94:ae:b1:81:8c:26:a6:63:
13:82:46:3f:cc:1e:ce:8d:e0:6c:e0:48:56:99:9b:c0:34:03:
83:70:06:2f:00:00:f9:76:be:82:9b:12:55:06:19:50:6d:6a:
41:00:1e:80:e6:15:43:ea:45:a7:c6:bc:52:d6:37:5c:5a:bf:
23:fb:70:ff:c5:b5:e7:1f:cb:d2:4a:8e:e0:a4:d6:06:32:ce:
8b:c8:e7:8a:66:92:14:fa:aa:ca:d5:f7:10:9f:0d:65:54:74:
8b:1d:90:5f:05:84:bd:a1:94:3d:f1:84:d4:16:aa:b7:11:fa:
ae:88:63:c4:64:fa:a4:89:78:f6:70:ae:ef:d4:c5:2d:01:68:
08:f5:ab:57:f3:88:45:ca:47:cc:95:92:32:0f:c6:1d:ab:34:
b0:9d:b4:cb:fc:1f:d0:91:3c:bc:4f:ff:e8:d1:9c:34:a7:87:
ca:09:3d:a1:b8:b7:08:15:39:d5:78:38:99:d5:a5:25:a9:0e:
7a:7b:d0:c9:bd:1e:ea:ba:a2:c3:3f:22:0a:41:b8:e6:cd:ae:
56:1e:bb:8c:a6:f8:dc:da:9d:e4:36:53:68:f8:c4:59:e3:50:
90:99:f1:f4:b3:f3:8d:9b:4f:52:ad:c1:31:ee:d1:68:e5:aa:
b2:63:ba:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:00 2025 by rpki-client