Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: J/C0vqjFvIDqXJkYH/21pn3rX4tb/A+kL4V/WrgpsbU=
Subject key identifier: 38:65:A7:17:38:82:0F:16:C6:2F:86:C1:82:C2:CF:1B:65:CD:00:FE
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 019A4DE1CBCDB996D758237FF717014B5764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 03A6
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: //EmxK6y9QZchTSs5NoR97kECVb4NDFsAJt3hhUz/GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:cb:cd:b9:96:d7:58:23:7f:f7:17:01:4b:57:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=3865a71738820f16c62f86c182c2cf1b65cd00fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:9e:63:c8:62:b9:d1:ee:6d:ca:6f:0e:98:
58:98:54:22:5a:13:5b:ee:38:28:8d:52:02:ac:90:
f5:35:94:9e:83:2d:e2:ec:48:20:da:0e:97:3e:5b:
19:1e:71:f2:52:2a:db:70:c2:87:f3:da:1d:ed:6d:
60:a9:c0:64:50:f1:0f:55:c0:b1:02:eb:cc:62:66:
bd:e3:c9:8a:cc:20:05:7b:f9:32:ee:d5:60:ef:d8:
a5:f7:cc:15:f0:9c:8d:06:4d:b7:73:0e:81:e5:bc:
dc:fe:cd:a8:90:18:fd:6d:1e:a0:d7:cc:3b:e7:fd:
66:bd:ba:48:1a:2b:76:0b:f8:b9:c9:9c:02:16:d6:
c8:89:30:80:22:73:7f:ff:20:99:ad:0c:c6:74:e0:
4f:e1:29:60:b7:3b:35:88:e3:63:7f:bb:2d:56:36:
5c:49:34:ea:fa:d4:71:d1:3b:eb:b6:f7:f0:c7:02:
52:30:45:ef:ee:81:d2:b8:65:cd:c1:67:68:3a:e8:
07:b0:3b:51:0d:89:4c:89:57:be:eb:17:18:5a:c5:
3d:3c:71:e3:08:41:1d:45:4f:d2:ae:2d:70:5b:28:
70:b4:44:61:25:62:e7:0d:17:9c:be:6f:c9:67:5e:
60:84:8d:f6:a9:81:3c:65:1e:d8:45:b4:c1:32:10:
06:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:65:A7:17:38:82:0F:16:C6:2F:86:C1:82:C2:CF:1B:65:CD:00:FE
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:8c:cd:e2:5c:3b:f4:2c:16:4f:7b:71:a3:c8:09:da:74:
f8:99:18:99:33:1d:f3:a7:6f:41:47:5b:04:a6:2a:89:d9:03:
fe:24:da:05:ba:fa:18:70:59:38:35:c8:74:04:d2:cb:f7:7f:
bd:d4:3a:77:63:95:6c:9f:65:c7:01:ab:68:a6:f8:51:44:29:
1e:95:55:30:73:bc:c2:bd:b1:23:c7:8b:fd:7a:26:1f:cd:87:
6f:92:90:74:b1:35:35:3d:73:e9:01:45:fb:42:4e:92:88:c3:
e2:bd:39:d5:88:30:01:17:9a:48:ad:52:fe:23:73:2b:52:9e:
6b:1a:1d:47:7f:cb:43:74:79:0d:2f:7d:69:1e:fb:14:84:0e:
fc:c6:eb:ca:6c:f7:89:4f:cd:c4:2c:cc:ac:be:67:ed:4d:c2:
e7:46:32:fd:83:d2:cf:38:68:f9:9b:25:5f:b7:73:b8:80:9f:
b5:e0:88:54:e7:2b:63:9e:d3:c6:d0:78:4e:10:d8:4f:2e:01:
36:25:4f:55:ab:ef:76:81:7b:6c:f5:0e:ed:4e:1e:d1:a1:72:
80:e8:80:86:f6:b1:5b:e6:0e:bc:b0:5f:8e:ef:2e:02:ab:c8:
66:43:16:2b:ee:f3:d6:66:3b:b0:2e:ad:75:49:d2:83:7b:71:
e9:e3:3a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:43 2025 by rpki-client