Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
File: QEeepWLdOn0M8qbpeLa783j3POQ.mft (raw, json)
Hash identifier: JPSdRJCaJCfX4pVts9M80safZh+WvR+zlBchH0SSbMw=
Subject key identifier: 13:3C:45:D7:1F:FE:66:B6:8D:4C:3F:BF:00:04:DA:E2:BA:7D:F2:6D
Authority key identifier: 40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
Certificate issuer: /CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Certificate serial: 019A706DFC66F9FE9E7AEFF75803F6E6C012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
Manifest number: 146C
Signing time: Tue 11 Nov 2025 01:00:47 +0000
Manifest this update: Tue 11 Nov 2025 01:00:47 +0000
Manifest next update: Wed 12 Nov 2025 01:00:47 +0000
Files and hashes: 1: QEeepWLdOn0M8qbpeLa783j3POQ.crl (hash: aaE7OhLsqfzg0BKdfGNtIlwOXPDWD/11Yu6uWLmH8Rc=)
2: kDxnmkry6GSjGehsL9ntYXTgGms.roa (hash: wkEfOOZJ9TKbc6rsvn871D/mFlSMnjRucRMB/y4Wzco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6d:fc:66:f9:fe:9e:7a:ef:f7:58:03:f6:e6:c0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40479ea562dd3a7d0cf2a6e978b6bbf378f73ce4
Validity
Not Before: Nov 11 01:00:47 2025 GMT
Not After : Nov 12 01:00:47 2025 GMT
Subject: CN=133c45d71ffe66b68d4c3fbf0004dae2ba7df26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c8:da:4b:64:c5:0c:b8:f6:da:87:11:01:4e:
da:8c:10:26:d5:ca:5c:86:93:6f:42:30:b7:cb:c8:
04:66:9a:16:96:25:59:e9:10:14:b0:8a:69:f5:f8:
dd:86:11:04:d0:15:dd:fe:5b:89:2c:95:1d:5d:24:
a7:87:2c:4b:85:34:bc:d7:41:7a:58:30:19:42:b5:
25:aa:57:09:06:f8:21:99:8a:af:98:3c:16:f4:d8:
c3:e0:c0:b6:0f:cd:8a:52:81:43:a6:7a:cb:d0:0b:
6d:3b:d2:aa:6a:43:9f:cb:03:64:b5:51:5d:d1:b5:
bf:6f:15:11:e6:7a:90:8c:04:50:45:e1:9c:33:94:
97:ec:1f:b5:91:e4:c3:72:59:53:4d:b5:18:c9:d8:
43:71:5a:24:e1:21:81:67:2d:be:76:4b:ff:10:dd:
9f:b0:88:98:0a:2c:51:41:85:09:cc:5f:c2:c0:8c:
84:c2:40:33:10:23:b5:12:dd:63:e1:d8:a6:6e:f4:
e8:bc:c9:03:19:ce:66:a6:a4:87:47:3b:12:55:fb:
a3:5e:8e:c5:5c:de:6d:92:0e:5a:1d:8b:c3:d4:80:
bf:07:d7:e7:e0:d1:7e:6a:a6:ea:3e:dd:30:e3:9e:
ce:0e:86:d7:98:80:d6:f3:d8:b4:01:b7:f9:17:c9:
a7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3C:45:D7:1F:FE:66:B6:8D:4C:3F:BF:00:04:DA:E2:BA:7D:F2:6D
X509v3 Authority Key Identifier:
keyid:40:47:9E:A5:62:DD:3A:7D:0C:F2:A6:E9:78:B6:BB:F3:78:F7:3C:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEeepWLdOn0M8qbpeLa783j3POQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/e74a58-bb9e-4ae9-a746-8936f091f4f4/1/QEeepWLdOn0M8qbpeLa783j3POQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:63:e8:c0:d0:05:eb:4a:c8:8e:cd:9c:09:36:62:c5:93:d5:
24:e3:fa:a3:7f:17:c0:79:85:d0:8e:2f:e3:29:32:16:2d:f7:
1a:38:40:57:8b:9e:35:70:c7:f7:ea:aa:3b:08:78:7c:95:f4:
6c:78:20:17:17:a4:8e:e4:f7:4b:b9:be:79:fd:62:5c:94:ab:
03:bb:a0:18:3c:0f:55:03:ed:f6:cd:7a:6b:58:81:7a:f7:d1:
6f:5c:ba:e3:c5:0d:31:b0:84:fb:cb:d3:3f:3e:d9:cb:9f:1a:
f9:7a:3f:69:07:b7:d7:47:2c:2a:fd:94:40:f9:91:3c:b7:e7:
01:87:62:e0:4f:5e:3d:74:c5:14:ba:ea:19:d4:e3:a5:02:95:
1a:24:5f:a7:b0:83:f1:84:41:dd:72:4e:00:c8:e6:18:1b:6f:
a6:17:75:b2:c2:0e:cd:2a:a4:4f:e1:72:ba:e3:33:ac:45:f3:
67:d7:4f:3f:67:11:92:89:24:06:ed:58:65:04:9d:e2:9b:e3:
fd:df:36:c2:e7:bc:f2:bf:b6:bf:63:d4:74:47:f3:d6:13:69:
42:df:0a:19:54:a6:81:04:1f:dd:91:68:e6:c7:ae:c7:0e:67:
50:10:6e:73:6d:41:aa:96:2d:99:07:7b:67:73:66:67:03:f2:
f8:59:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:26 2025 by rpki-client