Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: B4rLgz0uC4OXPZhYs8M6TGy6F/UnC9Abm8n2CcZIvLQ=
Subject key identifier: 4B:AD:39:70:C4:5C:F1:62:16:D8:64:F1:C0:03:54:1E:1E:14:9D:3E
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 019A541AF2A14CEB710BF83557BCE08068F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 0398
Signing time: Wed 05 Nov 2025 13:00:43 +0000
Manifest this update: Wed 05 Nov 2025 13:00:43 +0000
Manifest next update: Thu 06 Nov 2025 13:00:43 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: o2dIfKjzFwu6arTyqcaV3wMxw+1Jwjs6l/TNkK5ZFN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:f2:a1:4c:eb:71:0b:f8:35:57:bc:e0:80:68:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Nov 5 13:00:43 2025 GMT
Not After : Nov 6 13:00:43 2025 GMT
Subject: CN=4bad3970c45cf16216d864f1c003541e1e149d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:8e:cf:e1:8a:4e:d9:35:fa:dd:bd:df:f9:
58:58:6e:b8:27:d5:ae:b2:a6:ce:9a:bc:61:40:6d:
c6:5c:33:81:ce:94:5b:55:b2:f6:4e:9e:a9:e0:33:
90:53:57:a6:65:26:62:54:07:4c:60:2e:09:70:af:
3f:b6:1b:c0:0a:cf:d9:4a:98:90:65:04:18:01:89:
42:10:f6:69:f5:31:50:ec:76:93:17:13:fe:d2:89:
ea:f5:f8:ca:54:2c:bf:cc:83:93:c2:44:3f:c4:4e:
5d:1d:0b:39:0e:66:ea:cb:26:4a:48:06:ae:ef:c3:
a1:53:0c:5f:38:dc:db:f8:d6:8d:b0:0c:fa:8e:14:
df:89:3d:fb:ac:87:41:7b:52:33:66:db:13:f7:d0:
ce:ff:63:b8:42:13:c4:d9:86:1e:af:26:ae:cf:48:
84:7c:3f:f8:34:ac:ff:81:b9:a2:2a:3c:68:25:9a:
f7:82:bd:e1:7f:12:3c:69:17:8a:c6:1a:ab:36:67:
7a:b4:76:43:5f:d0:db:df:fb:0c:c6:85:c1:50:12:
64:6d:63:53:50:4d:d7:0c:aa:64:6b:28:38:cf:48:
f0:65:42:a4:56:19:63:b1:e6:88:84:95:85:61:8e:
83:9d:8b:2d:24:ed:61:ad:75:89:aa:b1:8e:85:3e:
56:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AD:39:70:C4:5C:F1:62:16:D8:64:F1:C0:03:54:1E:1E:14:9D:3E
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e1:a3:0f:0c:2a:a1:20:d8:5a:25:64:89:c6:f2:fb:5d:0a:
6d:25:9c:de:58:a7:ff:d4:1d:07:3b:4b:13:c6:91:14:1a:37:
93:ea:f6:d0:df:1e:29:9f:0b:0c:91:04:5c:f1:a5:a9:3f:4b:
53:1d:03:3c:19:9b:79:53:1f:9d:8e:f4:0b:cb:41:da:1b:aa:
70:45:62:08:e6:f7:51:e1:2c:66:dd:bc:8b:56:20:c1:5a:a3:
be:9f:e2:1e:9a:cd:e9:da:04:d7:45:d4:b9:c5:40:d1:e3:24:
41:ef:5c:0d:9b:93:18:45:9c:a8:21:b6:9a:f6:8e:a7:34:5b:
f3:eb:fe:3f:32:40:3e:8e:1e:82:9e:10:9e:38:f2:6b:4e:19:
7e:cb:6d:a0:1e:51:90:db:42:1d:d4:c2:d9:1e:52:2d:8d:77:
40:fd:4f:34:e4:71:1a:ff:da:af:5e:14:9e:f2:6f:12:ea:10:
34:59:1b:eb:fe:fd:38:e4:4d:ff:96:09:f5:42:68:f7:99:f5:
2c:be:f8:c5:2f:9c:8b:54:25:94:08:38:09:c6:2c:6a:1e:88:
9b:f7:5c:01:63:f3:5f:6c:5d:56:e7:2d:3e:01:7f:5f:6d:d2:
22:d1:04:6d:76:cc:0b:c3:71:45:8c:23:fc:e8:d4:23:f5:83:
98:61:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:22:00 2025 by rpki-client