Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: 5feOlLzlpzXw5b3yhMLBi/geBLHuTiDEOeHXa0Vd//8=
Subject key identifier: A1:AC:9D:9F:F5:93:84:68:B0:51:C3:CB:EB:FB:40:EA:D6:A1:1D:76
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 019A71EE66E07E8A162D63FB4BD12421E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0DDE
Signing time: Tue 11 Nov 2025 08:00:40 +0000
Manifest this update: Tue 11 Nov 2025 08:00:40 +0000
Manifest next update: Wed 12 Nov 2025 08:00:40 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: +OfhoXylsqOxijFlLNWwK740p0cjfi9yvv8FrBtRR/s=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:66:e0:7e:8a:16:2d:63:fb:4b:d1:24:21:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Nov 11 08:00:40 2025 GMT
Not After : Nov 12 08:00:40 2025 GMT
Subject: CN=a1ac9d9ff5938468b051c3cbebfb40ead6a11d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:51:e7:47:c4:9f:2e:d0:96:0d:d3:91:dd:c6:
39:8a:06:ab:56:fb:48:be:df:14:4f:b9:77:ab:55:
eb:bc:e5:2c:57:08:8b:44:f9:65:e8:5e:57:8e:ae:
36:4d:6e:ce:46:96:3a:cb:c6:f5:aa:dd:e0:d3:1b:
18:8c:e7:4a:b4:c6:a7:50:dc:7e:65:ea:40:c5:b1:
72:93:d3:ad:87:09:c4:65:65:df:df:81:b7:e4:71:
11:15:17:91:05:f2:ea:5e:fb:d2:8a:36:bd:47:3a:
92:d7:3b:8c:e3:7f:e9:b0:0f:5a:d8:4a:59:91:a2:
0b:a6:b7:b2:20:e4:52:3e:d8:81:a2:ec:87:04:01:
92:e8:25:d9:23:38:c7:7d:99:ea:56:45:e7:fb:a2:
69:60:29:4e:7e:0a:fc:0c:86:74:e6:24:4f:48:88:
fe:c0:6c:3d:45:b2:00:47:ab:c0:fd:ae:f3:2b:99:
a4:d5:79:c5:f7:20:9c:3f:7d:80:72:92:0a:e1:3b:
8a:dc:b6:76:5b:23:ff:b2:b7:3c:64:53:c8:e1:da:
8b:3e:6d:8b:a2:60:94:77:31:16:ae:7f:e6:cf:3a:
61:54:45:83:2b:3e:eb:3f:a1:97:89:85:83:6a:fc:
32:6a:e1:66:ea:ac:04:64:ed:a0:ca:45:9e:b4:2e:
7c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AC:9D:9F:F5:93:84:68:B0:51:C3:CB:EB:FB:40:EA:D6:A1:1D:76
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:26:70:3d:1e:e8:d7:f3:88:70:7c:3a:40:f3:2a:4b:cd:
da:d6:15:ad:e4:c8:fa:b6:3d:95:3e:17:c3:d0:c8:d5:c2:42:
21:cf:ea:8c:41:a4:76:9f:81:50:9c:0f:32:87:b6:f7:62:b0:
6a:3e:0f:46:7e:91:f4:57:74:e7:6a:93:30:30:e7:43:72:a1:
9b:4a:b2:da:f2:16:26:a6:e5:87:09:40:45:9d:18:44:2d:ed:
b5:54:00:eb:ca:5c:95:e9:b1:8f:db:4c:3c:4c:42:3f:6d:d7:
aa:84:d8:5d:29:6e:b9:44:b0:8e:a5:f9:03:12:22:fe:32:ee:
bd:2d:0b:c7:ba:db:ea:7f:16:16:3c:46:ae:26:63:3d:20:e3:
40:5d:60:bb:24:f4:8c:b6:22:61:21:e1:e4:06:17:b5:30:4c:
b8:59:e1:53:13:77:ec:de:b9:6e:93:d6:68:e3:3f:af:6d:ed:
e4:04:6b:87:5a:a5:48:95:5b:14:8e:a5:b5:38:cd:22:a6:67:
40:68:43:d6:a4:95:1a:39:37:28:16:35:78:5f:e3:11:a8:09:
3a:a6:eb:c2:f2:67:01:9d:27:cf:a2:74:56:42:d9:e1:1b:dd:
2f:c8:08:7b:e6:7f:86:57:1c:a3:5c:e5:9e:8a:15:48:a9:d1:
c0:75:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:29 2025 by rpki-client