Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: PkEHFKL0vXG9sZeWI4jbk0ie7JQRMwRXLbnrUaD+dzM=
Subject key identifier: E7:FC:B4:FF:3F:DC:DF:A4:FA:55:C5:C3:17:AD:D5:D8:86:D6:73:5A
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 019A71B7FEF392CE22FDF6C62A25588BDDD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 069E
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: QpdGhjJV2DoYwcsAANLla1NTXhww+TGv8i6sgzNHSDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:f3:92:ce:22:fd:f6:c6:2a:25:58:8b:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=e7fcb4ff3fdcdfa4fa55c5c317add5d886d6735a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:98:54:60:00:67:62:74:8b:f3:91:8d:e4:
80:56:d3:10:75:3a:b5:37:cf:9c:f2:56:07:b2:fb:
57:28:3f:16:be:24:e1:11:0d:9e:4f:3f:2d:02:bd:
b0:bc:2b:b3:3f:f9:7c:58:09:4f:83:92:c9:91:30:
bb:37:47:97:98:9d:b9:f2:37:b7:2f:60:2b:3b:f6:
1d:e3:45:f7:19:71:2f:c3:c1:6a:b1:e0:26:7b:6e:
8d:f5:85:70:41:6c:70:ad:35:09:32:b4:43:07:7a:
57:cd:cd:6c:67:40:4f:14:2a:99:09:10:42:82:db:
89:db:19:8c:44:b7:76:df:4f:a0:c9:79:ed:ee:a4:
e7:86:fa:89:24:c8:29:63:aa:7e:63:cd:da:89:2d:
07:53:e3:ab:ab:85:b2:f6:3e:d3:e5:fe:b6:5c:c8:
f1:ae:19:6b:42:dc:7d:84:a7:ee:e1:a2:37:07:d1:
83:99:cc:22:79:53:ff:91:19:53:d8:2f:4e:23:3d:
47:d6:6b:d6:c1:04:13:d5:1f:37:e2:e3:c7:6b:a7:
02:3b:d3:50:3e:50:aa:a8:6b:98:c1:ef:30:cc:82:
39:8a:0d:ba:09:8e:a6:30:52:24:ec:99:34:9f:bb:
a8:91:09:ba:f2:93:8f:05:74:59:40:5d:d7:f9:2c:
57:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FC:B4:FF:3F:DC:DF:A4:FA:55:C5:C3:17:AD:D5:D8:86:D6:73:5A
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:7d:65:fd:19:b0:03:2d:2b:25:55:5d:78:ef:0c:85:ad:83:
af:6e:bb:16:1f:7d:3e:eb:09:58:80:69:c7:e8:14:49:da:97:
88:e1:d4:66:56:3a:6e:5c:1b:d5:08:32:ec:61:d1:cb:4b:4b:
e9:ed:d8:fb:63:b2:29:6b:21:ba:d4:98:ba:87:85:36:f3:3d:
8f:c5:58:a6:44:97:6a:88:59:ef:bf:76:19:8f:81:7b:fe:63:
23:97:9b:84:77:ad:f4:35:f1:4c:a1:2c:38:4b:3a:bf:f6:4b:
4c:04:56:8b:6f:fb:54:ba:ce:ba:50:5a:9d:89:1b:fe:ab:b8:
0e:74:dd:54:0b:83:cd:52:a8:68:f5:5e:d8:8c:8a:75:2b:5f:
68:e0:7a:42:6e:57:4f:a7:97:f4:da:1f:22:6c:d9:d7:19:66:
5a:de:31:16:7f:bb:d6:8f:11:c7:97:d8:d7:76:d0:32:b3:0a:
07:e9:21:60:a9:84:48:00:96:0b:b0:e9:a3:96:7c:f9:e3:f5:
f1:8e:bb:cf:57:43:70:cc:75:c9:81:c8:63:64:39:61:cf:d5:
6e:16:3c:f2:ca:80:21:c0:9f:ad:99:e7:1d:cf:3f:64:83:4d:
fa:e6:e2:d8:f1:4c:94:22:25:39:fa:35:ff:79:2a:dc:5a:c9:
fa:b4:2b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:09 2025 by rpki-client