Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
File: QbpsBQULUMcLmjXTQjC3rDCdTZo.mft (raw, json)
Hash identifier: DTouzYJZtAKG9NJv5EDYp/BChY6CqQyp5yIQe8aSsKY=
Subject key identifier: FB:DE:65:EE:0E:2C:6B:EA:DE:7C:3B:AD:BD:DC:57:A9:E4:3C:FE:8D
Authority key identifier: 41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
Certificate issuer: /CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Certificate serial: 019A7112D5FB713492EEFDD4C1B51E3A995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
Manifest number: 040B
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: QbpsBQULUMcLmjXTQjC3rDCdTZo.crl (hash: WA0KfkGSK/oGoc2WTOdUKxB/4WJO+3aQVq7HuOPkL9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d5:fb:71:34:92:ee:fd:d4:c1:b5:1e:3a:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ba6c05050b50c70b9a35d34230b7ac309d4d9a
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=fbde65ee0e2c6beade7c3badbddc57a9e43cfe8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:54:ba:45:a6:f0:bb:32:e8:d0:0f:d9:8c:19:
10:f5:e7:30:0e:59:9c:b6:42:16:7a:2d:06:d7:d3:
2f:33:9f:13:97:fa:29:7a:f6:29:d6:19:a6:3a:b5:
b6:c6:b3:e7:e5:60:aa:ef:55:14:bc:5a:20:90:56:
1e:76:e5:93:e5:e7:dd:7d:a7:e7:50:29:99:cb:0e:
22:db:f0:de:bd:9b:2d:5d:27:93:74:a1:09:43:85:
f9:a7:8f:40:c5:8b:df:cf:ae:02:a0:fc:47:9c:f6:
8c:63:77:e8:fb:1d:c2:39:49:aa:8f:68:b9:be:d7:
9e:2b:38:71:ef:02:2e:d0:47:4c:84:52:f3:d4:25:
d0:78:1b:74:b5:79:49:24:82:ef:0d:e5:c0:ec:45:
9b:b5:c7:be:08:6f:ef:64:78:15:fe:e6:c2:7e:90:
30:a9:eb:fe:0c:44:f5:58:a2:b4:25:4a:f4:15:84:
a7:6e:24:3a:11:6f:84:14:7d:e7:0b:7b:db:5b:13:
07:20:c9:4a:41:24:3e:95:89:1e:c0:90:88:d9:8a:
09:26:05:4c:66:32:91:d2:c0:a9:84:d6:f0:7d:e9:
fc:78:c3:c1:69:3e:c7:ef:07:fe:d1:e8:cb:b1:f2:
bf:6c:57:f2:ac:7a:9a:a3:fa:b9:f7:1b:b5:90:5c:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:DE:65:EE:0E:2C:6B:EA:DE:7C:3B:AD:BD:DC:57:A9:E4:3C:FE:8D
X509v3 Authority Key Identifier:
keyid:41:BA:6C:05:05:0B:50:C7:0B:9A:35:D3:42:30:B7:AC:30:9D:4D:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbpsBQULUMcLmjXTQjC3rDCdTZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/072d10-d4df-4f51-91b8-b0b858c0fba4/1/QbpsBQULUMcLmjXTQjC3rDCdTZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:9f:f1:a7:11:ab:9a:8f:74:3c:17:53:b9:ce:98:e5:cc:ba:
22:7b:00:a7:7f:7a:3c:ce:24:e6:fe:40:28:3d:35:f3:97:d5:
96:ff:fa:c6:cc:ca:71:d5:89:cd:74:53:ca:36:53:02:fc:0f:
59:b2:15:2d:a3:00:cf:39:ac:fd:a2:a4:b9:74:10:d0:d7:e0:
64:77:1f:db:48:5c:81:e8:ea:16:20:21:80:55:b7:08:e0:c3:
ae:10:62:9f:c0:01:d0:0e:dc:60:5b:a6:14:28:e4:dd:1d:fd:
55:6d:77:4b:b9:a0:c9:27:1d:d8:3f:85:60:ac:c7:1f:07:9d:
cf:b3:bc:b5:82:83:40:47:40:49:69:9a:73:5b:dc:4e:c9:30:
68:fc:bd:38:6d:45:a5:5a:f1:e5:f5:f9:0b:a7:cd:0d:86:51:
9d:a5:27:08:6d:56:86:e0:32:e7:b8:f5:03:6e:2d:68:21:39:
26:25:84:a1:42:71:f7:fb:85:42:eb:3f:76:c0:3b:4c:f9:d8:
d8:6f:5d:e4:42:48:1e:71:47:90:61:1b:92:d1:21:24:3a:0c:
8e:e4:70:64:eb:03:e3:95:35:df:c9:31:df:f9:fc:28:8d:08:
29:69:37:8f:58:b0:0e:6d:f4:3d:f4:53:b6:2c:89:84:81:fa:
3e:6e:c1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:48 2025 by rpki-client