Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
File: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft (raw, json)
Hash identifier: 4dEHTtnI/m1aoBMxTUB/EdYRPD0OO+94Xzi5bewC+fs=
Subject key identifier: 9E:C9:66:10:DD:47:14:D0:7B:38:BA:D0:B8:AC:0F:0D:36:CB:BA:82
Authority key identifier: 40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
Certificate issuer: /CN=4092c47db8a21931154605d576c3b7341d06b4b4
Certificate serial: 019A4D739C3B7884DBDF261F4461FA1FA1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
Manifest number: 1495
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl (hash: 6o5mefjA1D3Y1/dZeKS8uRW5ihZ3xGYD97K9eVNhe+w=)
2: knkqtZcmX5gSTiCaXxHQZfriQgw.roa (hash: E9ZLKfrMdp8ZIK1kQ0GbAJkgNgAmhxZR6M5lJ1uXi1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9c:3b:78:84:db:df:26:1f:44:61:fa:1f:a1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4092c47db8a21931154605d576c3b7341d06b4b4
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=9ec96610dd4714d07b38bad0b8ac0f0d36cbba82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b2:07:8e:4b:ea:08:c5:c8:bc:8c:a7:d9:2e:
0f:75:75:cb:3f:ae:bf:b2:93:c0:a0:39:c3:83:77:
c9:08:3b:3d:89:3a:8d:c8:a2:fb:14:1a:10:34:7f:
6f:38:47:4f:9f:1e:06:27:15:44:50:3d:04:df:d9:
aa:ba:51:7d:73:70:26:de:fd:3e:bc:5e:39:3d:ca:
7e:b8:fd:2f:3b:7d:e2:66:a4:ea:ed:8f:de:5b:58:
e6:0a:7d:44:57:ae:a6:5f:89:55:d6:cf:19:42:f9:
82:5b:d1:00:06:19:f8:10:b3:c8:36:b9:42:88:0d:
24:43:f2:0d:f5:bb:ce:a5:7d:3f:4c:49:e3:26:e8:
65:63:a8:e9:fe:69:14:54:ed:c6:67:72:ba:22:04:
6c:f6:22:80:8a:2a:76:f4:fa:42:c6:a3:25:e0:5f:
06:31:4d:05:15:6c:da:88:55:cc:83:1b:64:cd:63:
ca:0d:14:d9:8e:91:59:9d:55:eb:de:84:1f:e8:c9:
9e:c4:3b:e6:31:5a:fa:2f:0d:8f:9c:64:05:b9:29:
59:2f:09:bf:8f:23:84:51:23:7a:a2:4d:d6:e4:41:
a7:64:88:c1:91:fa:76:58:37:b1:04:fb:cf:bd:13:
87:36:60:68:be:ee:4f:97:11:59:29:93:d0:26:11:
d4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C9:66:10:DD:47:14:D0:7B:38:BA:D0:B8:AC:0F:0D:36:CB:BA:82
X509v3 Authority Key Identifier:
keyid:40:92:C4:7D:B8:A2:19:31:15:46:05:D5:76:C3:B7:34:1D:06:B4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b228d9-7ff3-4c40-95a6-8a36a6facd50/1/QJLEfbiiGTEVRgXVdsO3NB0GtLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:33:29:d5:4b:7d:9e:e7:b7:fa:d2:14:a5:fb:5e:6e:52:1b:
d8:f0:89:b9:f8:80:2f:8d:9c:2f:d9:d4:25:e6:88:93:98:51:
0e:b1:1f:49:dd:2f:12:ac:e1:d7:55:63:e4:8e:ba:8e:5e:62:
2c:61:5d:55:b6:23:02:bf:47:83:96:0f:5a:cc:10:2f:26:1e:
8d:60:f4:77:c3:3e:33:59:d0:d8:44:22:1a:e8:8d:0a:97:2f:
32:4a:cc:7c:28:73:59:db:d7:7a:a3:a8:a7:7c:67:a6:be:14:
ec:c1:8c:90:8a:28:f3:c0:fd:94:7f:cd:a0:35:13:69:e6:f4:
17:83:92:d3:8e:18:26:e4:43:0f:dc:75:31:f6:6b:75:e2:a5:
30:9a:62:15:4d:e2:59:8d:b6:22:5a:a5:9a:42:eb:3c:b8:8f:
78:88:a0:8a:b0:ff:09:93:c3:e7:e9:f1:60:00:6e:f4:e5:0b:
9a:35:ef:5c:bd:9b:49:8a:58:51:ac:5c:dd:8c:b4:d1:fd:77:
bf:81:31:da:1c:e8:1b:3c:88:69:bb:72:40:18:10:a6:23:31:
63:77:f5:9a:ba:11:87:fc:87:00:7e:79:a5:a7:a4:4b:74:e4:
43:fb:76:21:dc:ac:fb:91:c3:79:d1:75:af:6e:ce:40:44:b3:
0e:cf:01:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:58 2025 by rpki-client