Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: XYWZVFFBr4rS2OfuWS6OHxsvgNSW3gg6vZpMJlQkV6s=
Subject key identifier: 40:4F:AD:A8:79:86:42:FD:FC:8A:68:9E:E6:AD:92:36:9E:85:15:22
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 019A4EF58F1696341BEECD9E2924FD8B5901
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 1207
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: N8TURWwMFHC6EAuHlMCvU1nYJ3LF+k6gjVGto6SZym8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8f:16:96:34:1b:ee:cd:9e:29:24:fd:8b:59:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=404fada8798642fdfc8a689ee6ad92369e851522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:38:45:c5:84:5f:1b:4c:19:77:ec:01:83:7c:
fe:05:ce:a6:4b:50:41:4e:f7:c0:b2:cd:05:1e:9d:
c6:06:dd:db:0a:0e:86:7b:72:24:66:df:84:97:36:
37:b9:38:61:f0:a7:72:d6:87:5b:00:d6:8c:48:b3:
af:74:0f:b6:9b:c4:f8:0f:88:a8:96:13:26:77:88:
37:e4:8d:ee:0c:ca:f2:ef:9c:8e:ac:d0:4c:3f:e3:
92:f8:90:55:97:7f:10:55:43:b6:1c:95:de:09:53:
c2:3f:00:fc:a9:7b:51:af:ae:bf:7c:ff:4b:11:f9:
0f:6e:e2:71:cb:25:94:5a:6c:e2:f4:6e:a5:a1:a5:
08:78:c2:af:77:35:45:78:6f:87:36:1c:13:af:9e:
05:e7:cd:eb:d3:18:0a:a5:4f:c2:dc:db:b6:25:8a:
36:16:96:c3:f5:be:c8:47:f8:6b:ea:fd:52:0f:8b:
ee:e8:0d:e7:3f:3f:2f:23:c8:6d:d7:3b:6f:b3:2f:
ea:cb:f3:a1:d0:22:34:79:40:62:ba:39:3a:57:8a:
c3:b9:5a:cb:86:c8:2f:80:16:9d:e7:b5:db:b3:10:
65:6c:4a:42:07:a1:7b:d4:e1:98:79:ce:71:31:54:
98:e3:13:b6:1d:cd:17:3c:04:7e:d7:d4:61:9d:2d:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4F:AD:A8:79:86:42:FD:FC:8A:68:9E:E6:AD:92:36:9E:85:15:22
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:77:0d:cd:0c:08:6a:33:06:42:92:66:8f:51:ad:4f:d0:e0:
52:c0:d3:84:de:3c:12:56:df:43:c8:fc:ab:1d:78:43:bf:94:
96:c6:e5:ca:23:75:76:2b:66:90:ce:e8:5b:df:ab:07:3d:87:
14:03:89:6c:4e:a3:e3:3f:e9:c7:98:47:ab:a9:57:06:d4:c6:
f5:12:71:ca:46:dc:ac:e6:d0:1f:91:83:db:40:48:1e:99:28:
cc:01:19:a5:4d:32:db:e7:00:e6:52:6c:02:bc:97:e5:79:cb:
a2:2f:5e:bc:2b:2a:b7:35:93:13:33:37:1e:90:2a:e8:6d:45:
ed:26:11:66:0a:d8:53:86:02:4e:19:ae:53:b8:cf:4b:dc:db:
f9:fd:50:bd:89:5b:bb:aa:bf:02:b5:a2:77:77:79:aa:d2:ea:
a4:92:64:b1:6d:fe:d2:8c:cf:e9:43:78:cd:12:9b:e8:0a:13:
ba:df:37:db:ec:b7:f0:3f:73:a3:4a:e4:d2:ee:9d:89:c4:ae:
9f:fa:a0:f1:ff:de:c8:44:54:ed:39:2a:4a:65:6b:67:17:db:
84:4b:8f:a5:e0:3a:b2:17:91:68:97:82:54:61:f4:a1:9d:b8:
bc:de:78:41:fd:c7:9c:55:33:01:f4:d6:70:5f:3a:dc:73:7a:
35:13:2b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:32 2025 by rpki-client