Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: xgvIXgpRKJDpyfzi5Xc7zXpLYrs6AZ5DDnV1UDe4uJQ=
Subject key identifier: 11:F2:56:7A:6C:C6:48:08:32:81:F5:34:B7:84:A5:1A:41:A2:72:73
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 019A70A54D56210D0B1C7D6C9E80A6CF24C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 04A9
Signing time: Tue 11 Nov 2025 02:01:12 +0000
Manifest this update: Tue 11 Nov 2025 02:01:12 +0000
Manifest next update: Wed 12 Nov 2025 02:01:12 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: 0rIJE0W64IFpMlUyg97VUSF9IqABOOKOJjw7FBSxYTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:4d:56:21:0d:0b:1c:7d:6c:9e:80:a6:cf:24:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Nov 11 02:01:12 2025 GMT
Not After : Nov 12 02:01:12 2025 GMT
Subject: CN=11f2567a6cc648083281f534b784a51a41a27273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d1:ec:fa:98:d5:d3:25:2a:02:af:ec:c0:11:
45:40:75:8a:8c:f0:29:56:ef:c7:53:5f:2f:b8:ce:
ea:1a:d9:7f:a4:2c:d1:df:06:f6:ba:00:d3:fb:2f:
14:e5:16:f4:b8:d9:11:67:e3:48:94:84:e3:c1:ed:
4f:0d:7b:15:6e:cb:ad:e1:34:1e:19:3c:5c:27:1b:
ca:d1:c3:30:2d:c8:ba:55:3c:ae:94:ae:aa:f4:0f:
07:6e:59:c1:2d:d3:88:1c:bf:eb:36:10:dc:77:1d:
82:b3:8b:13:46:69:bd:48:9b:af:06:b8:e6:93:8f:
4b:dc:8f:0c:2b:41:24:c2:d4:a2:b5:0a:2b:69:7f:
52:25:1c:c7:7e:02:d9:1f:0f:4b:e2:71:f2:e4:b5:
33:53:d6:8c:4e:cc:c1:a6:d5:ea:0c:00:52:fd:f0:
a0:22:aa:46:b6:89:dd:11:53:51:9c:cd:a7:05:44:
32:ce:15:33:6f:15:e4:07:fe:3e:03:a8:62:81:f7:
d0:93:66:2b:ea:67:fb:f6:d1:a1:5b:ef:2a:ea:72:
1e:1c:a8:be:16:1a:8e:23:0a:bd:df:5e:a9:2e:7b:
e3:3d:d6:57:e8:7f:1d:a4:8c:f2:28:31:10:29:a6:
15:c0:e7:6f:af:79:f3:fc:73:c0:d4:24:5d:0b:92:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F2:56:7A:6C:C6:48:08:32:81:F5:34:B7:84:A5:1A:41:A2:72:73
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:05:40:00:15:59:86:05:b9:a5:cc:ac:32:e9:4c:12:b0:75:
6f:e6:85:dd:8e:fa:d6:f0:61:94:51:f9:e4:99:ad:77:9d:a5:
c6:f0:60:f2:20:4c:fb:c5:7f:e1:0a:95:c1:d2:9a:4c:ba:44:
1e:a7:0b:24:4a:3e:e1:3d:15:f1:ba:e3:f1:51:a6:05:af:0d:
5a:4e:ac:3e:30:8b:15:0d:2a:93:c7:23:12:4b:c9:f2:8d:cb:
b3:e7:8e:a4:f6:4a:16:f6:fa:59:2d:8c:c7:8a:03:1a:ab:b6:
e2:20:72:7d:be:a1:d8:2d:e4:c4:42:73:a4:5c:73:05:79:b8:
6a:01:d7:8a:07:bb:c1:e5:25:1c:ae:47:cc:fc:76:3f:3a:ab:
52:db:d1:27:80:92:46:e6:a0:aa:15:29:5b:b4:44:66:8f:a1:
14:93:e8:68:8a:0c:a4:07:33:0d:51:a0:e6:e5:d5:95:cb:4a:
32:a8:06:f4:1d:74:4f:91:6c:9a:cd:d7:56:35:2b:a7:b7:d7:
05:3d:85:66:d7:36:27:5b:93:b7:58:46:cd:39:c2:15:2e:43:
87:c2:e9:be:6f:e0:35:8d:2a:4f:0d:3b:c0:4c:6c:bf:97:56:
c3:88:2a:3f:03:85:b9:2e:0b:43:46:0f:e6:ec:dd:0b:b8:35:
23:65:7b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:01 2025 by rpki-client