Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: rnDdicw7X6QJbmOJ1ZMtnRYq09RGuHwRs85wbOGH2Gk=
Subject key identifier: 4F:EE:DC:9B:D0:4F:98:93:B2:8A:BD:0B:96:E2:2F:C6:16:33:77:7D
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 019A7112F14A5C56887C413E4C77607E8375
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 0503
Signing time: Tue 11 Nov 2025 04:00:58 +0000
Manifest this update: Tue 11 Nov 2025 04:00:58 +0000
Manifest next update: Wed 12 Nov 2025 04:00:58 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: Rt6XwHAOZUoAE2Sy9W+6TdrDkImGyGPLxvVler5MM5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:f1:4a:5c:56:88:7c:41:3e:4c:77:60:7e:83:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Nov 11 04:00:58 2025 GMT
Not After : Nov 12 04:00:58 2025 GMT
Subject: CN=4feedc9bd04f9893b28abd0b96e22fc61633777d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:96:f1:52:d6:34:f4:63:e4:87:59:22:28:74:
4e:4a:2b:4e:78:2b:d3:a9:a5:cd:bf:12:7b:c1:40:
df:c5:77:51:39:87:2c:39:38:3d:dd:29:c6:dc:1a:
28:31:f5:34:7a:9c:c5:84:ab:14:b7:0b:a0:61:45:
b6:19:74:fb:82:31:01:f2:22:a6:e4:97:45:46:d4:
e6:25:16:2d:8a:33:c8:72:e8:5c:9f:d1:be:72:da:
8a:b3:9d:8d:ff:cd:6d:6a:de:85:22:00:b0:89:61:
38:50:bc:10:70:a1:69:ea:0c:4f:96:07:4f:2c:c4:
64:95:d4:ec:f6:c0:6e:05:b5:0c:ec:05:e2:29:13:
ec:f6:7c:33:ef:00:40:1f:9a:07:ab:23:36:1d:2f:
3d:dc:7e:5f:04:ba:23:c6:6a:82:fe:a1:93:af:2c:
c5:f3:67:95:8c:e4:99:a5:db:b6:b6:7e:1e:48:65:
b2:02:6e:30:3e:70:a9:c1:7a:6b:a8:aa:76:12:c5:
2c:23:82:a0:fd:25:e6:16:0e:2c:a0:ba:18:c8:06:
cf:8c:49:4b:84:f2:b7:07:ba:14:7f:a1:c3:59:11:
f7:50:d9:1c:d3:5c:6c:84:4c:8d:59:ea:e4:b5:ad:
dd:23:2e:17:cc:0e:9c:29:4a:94:05:e6:3a:48:6e:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:DC:9B:D0:4F:98:93:B2:8A:BD:0B:96:E2:2F:C6:16:33:77:7D
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:51:bf:86:da:55:6d:25:f9:4a:68:be:8a:34:e0:47:60:1c:
2b:cf:1a:5b:36:f9:37:d3:ed:64:00:39:07:7e:a6:9f:f5:00:
a1:9b:eb:af:93:c6:dd:2c:a5:ae:1d:16:4d:82:c1:10:16:90:
fc:d7:58:6f:7b:e8:dc:b3:e1:3b:97:d4:ac:e6:b3:48:e5:94:
9e:92:c7:0e:13:d1:e1:7d:4b:dc:90:cc:5b:c4:93:e9:c5:25:
db:26:f9:e1:0f:e0:a0:a9:60:dc:47:78:0e:c9:2f:a1:d1:68:
96:ea:3b:b5:92:00:f4:14:f6:f0:bf:37:62:48:b0:f1:64:15:
5f:5c:85:66:c4:4b:73:62:55:09:76:ec:ec:53:35:60:3a:d6:
0c:e9:c4:0b:75:71:b9:9e:ea:e6:26:1a:45:eb:85:83:18:e7:
0b:71:28:7f:ef:6c:47:ed:45:b1:ac:b5:68:5e:c6:da:7d:ad:
04:3d:b1:e7:90:43:04:b4:61:12:9e:7b:db:c1:98:49:01:7a:
30:84:fd:31:3b:20:87:e6:20:99:34:48:35:81:11:68:d7:8a:
22:90:b3:e8:39:48:ac:f5:4f:63:af:94:01:26:47:ec:a1:cc:
ac:cd:d0:de:6d:3e:a5:e2:cf:b5:68:bf:2a:71:c5:5c:34:55:
00:2c:78:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:02 2025 by rpki-client