Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: EPObJuAahv9VzUZYE3lPFrfnlQOFZLGKAWwKMfFjmU0=
Subject key identifier: 7B:5D:7E:3D:52:5D:53:6F:EF:E9:26:CB:8B:31:D1:B6:60:31:26:F6
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019A4D3CEE0E74A28D41996DA912C39107DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 0318
Signing time: Tue 04 Nov 2025 05:00:29 +0000
Manifest this update: Tue 04 Nov 2025 05:00:29 +0000
Manifest next update: Wed 05 Nov 2025 05:00:29 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: rRWj8DqBV8ucqJJ1GWgWJgBHI7xzuETJe17tRK9U5rc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:ee:0e:74:a2:8d:41:99:6d:a9:12:c3:91:07:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Nov 4 05:00:29 2025 GMT
Not After : Nov 5 05:00:29 2025 GMT
Subject: CN=7b5d7e3d525d536fefe926cb8b31d1b6603126f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:2d:ca:3d:82:98:9d:b2:4e:a7:13:ab:bc:
cb:21:ea:1f:ab:29:e0:bf:06:36:42:8f:0e:7a:4b:
43:5d:d9:91:e6:db:5a:1b:b8:b3:1b:49:43:15:87:
8d:18:44:7b:e4:b6:79:69:a9:90:57:5a:90:a5:7e:
5a:b2:b5:11:16:68:dd:0d:fa:06:5e:9a:31:3f:d8:
25:d2:bf:94:83:b7:b3:96:a2:49:71:e3:1a:b0:e8:
a3:f2:e0:65:f7:53:61:de:1b:59:8e:bf:be:44:97:
6a:a7:ad:dc:d5:cd:20:fa:f0:ac:b3:d3:d9:ba:93:
b3:af:9e:99:3e:3a:b0:e7:2a:a0:c1:8b:0e:80:e8:
cb:6c:fc:cd:d5:23:cc:7d:c3:20:ee:c3:ac:f7:0b:
84:bc:4b:23:08:44:f9:aa:db:34:94:60:3b:90:81:
d6:31:27:cb:fc:bd:31:08:83:72:03:a9:e9:83:77:
15:78:12:af:b5:b2:b8:19:50:a1:b7:e6:09:32:47:
77:5a:8b:19:1c:d7:04:b6:6a:df:50:e2:ed:cd:f2:
6a:d6:ff:46:5b:53:f4:91:4a:12:69:93:7f:01:8a:
f3:66:99:7e:5f:a7:5b:3f:48:f1:9f:65:5c:73:69:
3e:69:5d:a8:47:93:5d:17:ac:a1:de:e8:f8:79:2a:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:5D:7E:3D:52:5D:53:6F:EF:E9:26:CB:8B:31:D1:B6:60:31:26:F6
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:b3:22:27:72:f0:48:23:bd:3d:67:8b:26:e4:c6:7b:37:0f:
28:24:24:31:fc:5d:9b:d1:56:5c:d9:2c:b0:b0:a7:5a:ae:d1:
bb:bc:02:79:3f:52:f4:51:27:07:d4:30:1f:0a:63:2e:1e:72:
22:0c:6e:94:da:e7:7d:dd:69:f7:52:6c:18:13:22:4a:90:f3:
1c:dc:f3:ac:1a:f3:6e:d9:d1:6c:50:c5:41:c6:64:ea:e8:49:
4a:35:58:7f:20:1f:05:42:51:ca:26:80:d3:cb:8c:11:a2:19:
25:81:04:c5:cb:f0:fe:73:d7:4a:eb:91:9b:77:f0:d8:88:01:
62:8c:eb:cc:33:f0:70:b4:ef:fe:e9:4a:8c:91:68:27:25:a6:
c8:3f:de:47:56:18:f3:37:d8:f9:2c:27:de:52:f4:9f:58:3a:
98:b5:39:22:d7:16:7d:99:75:5f:57:36:38:a2:ba:40:78:90:
08:81:9f:45:59:7a:08:be:ff:5d:51:94:70:03:14:c8:f7:e5:
35:c1:a9:b4:5f:c0:31:0c:72:ed:db:cc:c9:1a:30:eb:47:f2:
b9:14:03:c4:55:dc:a8:4b:f1:ed:00:34:fa:15:03:61:88:6e:
0a:b1:a1:49:21:d7:70:bf:49:cd:fd:58:bb:c1:86:0c:ab:f4:
87:cc:20:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:41 2025 by rpki-client