Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
File: QM_TpJvHHnSg0L9-NGyomylZehI.mft (raw, json)
Hash identifier: LvxMzCCyWbcSjUU8o5qtgwzBgKuEz4cbU0YUXBhy0eo=
Subject key identifier: 15:52:EB:B6:FE:DC:56:7E:55:99:77:2B:96:AD:C1:7B:A3:9E:48:46
Authority key identifier: 40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
Certificate issuer: /CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Certificate serial: 019A50E33C76E4C87C1CBCED5457FFF165D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: QM_TpJvHHnSg0L9-NGyomylZehI.crl (hash: W44Gl0xkdmg9AIfI0Om7DhyBSO5VSsiAJRJcItcoZ5w=)
2: cOU0f1SCKSAnKUQtSDidcXUui3Y.roa (hash: SxetuqQIAbe3h1o0xhzW+JEeQWRKvCIOYuGwJHKjEXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3c:76:e4:c8:7c:1c:bc:ed:54:57:ff:f1:65:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40cfd3a49bc71e74a0d0bf7e346ca89b29597a12
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=1552ebb6fedc567e5599772b96adc17ba39e4846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:aa:c2:7f:c2:6b:71:b2:df:e9:72:77:f7:
cb:20:da:0d:e9:d9:60:0c:43:98:9a:44:ea:99:aa:
07:a2:a6:6e:19:63:67:1c:67:0a:d1:9a:c3:d2:09:
22:5b:18:29:b2:bd:28:8f:9c:4a:50:58:0e:f6:42:
20:a4:fc:32:c4:46:69:67:8c:68:af:b9:a7:85:a8:
6a:71:02:a2:41:75:68:a6:42:8d:e1:de:c9:2b:98:
94:04:ce:2d:c5:94:2c:5d:b0:e7:d9:0c:7f:4e:b2:
80:e9:6f:63:88:62:72:86:f3:57:9b:40:85:9d:66:
1d:a3:9f:7c:b0:0e:a4:b2:53:29:b8:00:9d:18:eb:
91:e5:d2:48:6f:3e:a4:c3:79:2a:7d:0b:2e:2e:89:
a5:26:b6:aa:4f:36:78:0c:5d:13:e5:b3:7f:48:dd:
ea:83:55:0f:0d:9e:98:40:87:c4:52:be:7f:db:a0:
77:f5:47:2d:c1:7c:f9:36:08:a2:97:39:ee:c6:80:
76:16:8f:80:04:07:39:77:69:c1:90:12:4f:58:27:
7d:17:84:67:c4:a9:59:15:cb:f9:e9:c1:8e:fd:08:
98:ed:0e:63:44:ea:46:b7:2a:fd:f0:5b:62:65:60:
35:b9:20:55:18:0a:ac:3c:9d:70:f8:6f:82:b3:2f:
89:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:52:EB:B6:FE:DC:56:7E:55:99:77:2B:96:AD:C1:7B:A3:9E:48:46
X509v3 Authority Key Identifier:
keyid:40:CF:D3:A4:9B:C7:1E:74:A0:D0:BF:7E:34:6C:A8:9B:29:59:7A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QM_TpJvHHnSg0L9-NGyomylZehI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0b9f07-f166-4675-b185-60b6ebbb7e6f/1/QM_TpJvHHnSg0L9-NGyomylZehI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:ac:7c:1e:ab:e3:38:de:9f:a8:da:c1:2f:4f:37:03:0d:a4:
d5:83:50:78:bb:f0:1b:64:87:17:fd:47:7c:0e:4d:ba:f0:a3:
c2:69:e6:8d:83:02:80:c2:49:6a:de:ce:72:0c:27:83:94:fd:
70:ef:8e:cf:d4:42:35:a0:53:61:73:1d:21:df:07:86:ff:5d:
11:df:bd:ba:cb:39:2d:12:84:3e:ec:fd:4d:b2:b5:c8:1a:5e:
20:95:36:de:af:66:59:5b:c0:69:3e:ab:ea:e0:6c:eb:75:2f:
34:4a:94:df:ba:43:45:e5:e0:ee:73:df:15:b0:31:eb:bc:40:
59:23:c9:b3:54:00:a7:48:b7:6d:42:90:76:ea:8b:77:84:ee:
5f:2b:8c:64:c1:aa:67:d0:ea:f1:4a:6a:00:ca:02:c4:50:ce:
4c:2f:5e:aa:a2:4c:5a:47:e6:e1:e9:68:dc:50:bf:b4:e8:13:
3f:d3:c8:11:0d:6b:52:1f:a0:8b:08:48:23:47:07:46:2d:a3:
3b:a1:88:9e:04:3e:af:55:81:b5:76:6c:54:30:6b:44:60:db:
57:c0:c3:f2:5d:58:13:a4:0f:97:fd:a6:96:40:f2:a7:11:0b:
03:83:2c:b3:e7:0a:55:55:da:cd:6f:67:f7:c3:94:4d:4a:28:
b2:a2:88:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:20:27 2025 by rpki-client