Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
File: QeCd-53O-KUy-yEdLoplRs759YA.mft (raw, json)
Hash identifier: 3yzP1L5UwB5lgIjM/hJ8+NKflPxSywlPecPzZGaxphU=
Subject key identifier: B8:9B:74:E8:9A:B0:55:EE:38:CE:DD:E9:FE:F5:73:D1:77:D1:4E:E7
Authority key identifier: 41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
Certificate issuer: /CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Certificate serial: 019A71B7C674CF260F2351EE6BCC161C3B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 07:01:00 +0000
Manifest this update: Tue 11 Nov 2025 07:01:00 +0000
Manifest next update: Wed 12 Nov 2025 07:01:00 +0000
Files and hashes: 1: QeCd-53O-KUy-yEdLoplRs759YA.crl (hash: FKZIeurt12AaETUuvIbH0Xjjc4QD/JThhTWCVC1cs4M=)
2: e4JEVh_6cDhCUoHK96y7TvtTEf0.roa (hash: xuBEIWySS4QJ6iOhH7VSUCCJB986bi0LqcmYz8ug3Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c6:74:cf:26:0f:23:51:ee:6b:cc:16:1c:3b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41e09dfb9dcef8a532fb211d2e8a6546cef9f580
Validity
Not Before: Nov 11 07:01:00 2025 GMT
Not After : Nov 12 07:01:00 2025 GMT
Subject: CN=b89b74e89ab055ee38cedde9fef573d177d14ee7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cd:3c:d4:d9:a5:bb:ce:6b:31:ee:a6:1b:0c:
48:ec:f6:60:f8:06:2b:8e:b9:a3:9a:6d:cb:20:a8:
b6:b2:79:39:15:d9:37:d9:fe:a1:f2:3d:28:55:72:
b5:2d:5a:d7:eb:06:e9:ec:d6:fa:63:6e:1f:d3:8d:
e4:0c:a8:80:5e:50:80:b8:1f:41:1b:bb:1a:9b:5b:
86:bc:33:92:b3:02:24:14:55:38:6c:39:fd:10:c5:
da:65:9b:fa:de:51:10:ef:bb:98:0a:6d:66:cd:2a:
25:6b:19:6a:b2:3b:a6:bb:3d:b8:5f:2f:53:7a:1a:
01:e6:5e:f8:93:0e:e1:63:83:fe:0a:7d:f6:8a:eb:
30:12:18:4c:91:ba:ae:bb:05:99:1e:d4:5e:22:49:
95:84:27:ab:71:7b:0f:fa:9f:97:8c:e5:d9:1a:95:
e3:b5:a9:45:87:67:b8:c0:96:14:5d:66:f4:89:15:
cd:68:f9:e9:a4:c0:10:6e:c0:b1:1c:74:6f:56:34:
00:87:b1:92:9a:a3:15:20:ca:b2:96:c1:f0:9e:b2:
23:ec:fe:1b:cf:09:b7:91:f1:21:0c:bf:a4:d9:1e:
d6:ff:58:0f:5a:54:43:be:02:97:1c:46:e4:c8:99:
23:5d:c2:2c:51:53:22:41:3e:78:ac:75:f4:61:15:
38:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:74:E8:9A:B0:55:EE:38:CE:DD:E9:FE:F5:73:D1:77:D1:4E:E7
X509v3 Authority Key Identifier:
keyid:41:E0:9D:FB:9D:CE:F8:A5:32:FB:21:1D:2E:8A:65:46:CE:F9:F5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QeCd-53O-KUy-yEdLoplRs759YA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/39d6dc-0664-4305-8ce0-20bfa78c9a1b/1/QeCd-53O-KUy-yEdLoplRs759YA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6c:37:46:95:22:64:3f:7e:d6:c3:51:8a:5d:48:ff:a8:b2:
ba:4d:c3:e0:d9:1f:17:ad:56:ab:a6:20:63:3c:7b:52:62:f5:
7d:e0:6d:12:bd:8b:aa:fd:79:d1:e6:7f:ae:99:02:c3:12:6b:
09:00:c0:77:3b:bc:77:48:45:56:2f:57:31:de:9b:a5:7e:f8:
0c:2d:d3:27:35:e1:0a:55:aa:97:e7:2a:8e:9f:00:37:57:db:
ce:48:48:02:a9:2a:4d:0b:f1:45:7b:6a:b9:97:6f:14:8a:90:
f6:e2:5a:71:f6:bd:ef:f3:93:d0:5a:ac:ba:9d:39:2e:d5:c4:
a6:d6:86:23:83:f5:a7:5d:61:1b:32:04:7a:bb:46:6a:cd:98:
80:11:dc:5b:81:c1:4a:0d:e2:44:f8:65:0b:5b:c7:62:ed:96:
28:2a:d5:30:20:d4:4e:ae:ca:e0:fd:db:b2:d4:45:98:31:a0:
97:57:eb:de:eb:a4:63:73:14:02:05:17:40:68:40:82:02:cb:
50:6a:ea:97:18:68:79:eb:1e:56:d2:4a:d2:92:50:13:2b:dd:
7d:4b:f1:74:32:61:51:87:d2:df:39:63:14:a7:7d:9b:32:3a:
81:ee:e1:e5:ab:ad:84:df:98:d9:8e:bd:11:a4:33:8a:15:7a:
cf:ec:14:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxt8Z0zyYPI1Hua8wWHDsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZTA5ZGZiOWRjZWY4YTUzMmZiMjExZDJlOGE2NTQ2Y2Vm
OWY1ODAwHhcNMjUxMTExMDcwMTAwWhcNMjUxMTEyMDcwMTAwWjAzMTEwLwYDVQQD
EyhiODliNzRlODlhYjA1NWVlMzhjZWRkZTlmZWY1NzNkMTc3ZDE0ZWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1M081Nmlu85rMe6mGwxI7PZg+AYr
jrmjmm3LIKi2snk5Fdk32f6h8j0oVXK1LVrX6wbp7Nb6Y24f043kDKiAXlCAuB9B
G7sam1uGvDOSswIkFFU4bDn9EMXaZZv63lEQ77uYCm1mzSolaxlqsjumuz24Xy9T
ehoB5l74kw7hY4P+Cn32iuswEhhMkbquuwWZHtReIkmVhCercXsP+p+XjOXZGpXj
talFh2e4wJYUXWb0iRXNaPnppMAQbsCxHHRvVjQAh7GSmqMVIMqylsHwnrIj7P4b
zwm3kfEhDL+k2R7W/1gPWlRDvgKXHEbkyJkjXcIsUVMiQT54rHX0YRU4gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLibdOiasFXuOM7d6f71c9F30U7nMB8GA1UdIwQY
MBaAFEHgnfudzvilMvshHS6KZUbO+fWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAt
MjBiZmE3OGM5YTFiLzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS8zOWQ2ZGMtMDY2NC00MzA1LThjZTAtMjBiZmE3OGM5YTFi
LzEvUWVDZC01M08tS1V5LXlFZExvcGxSczc1OVlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfmw3RpUi
ZD9+1sNRil1I/6iyuk3D4NkfF61Wq6YgYzx7UmL1feBtEr2Lqv150eZ/rpkCwxJr
CQDAdzu8d0hFVi9XMd6bpX74DC3TJzXhClWql+cqjp8AN1fbzkhIAqkqTQvxRXtq
uZdvFIqQ9uJacfa97/OT0Fqsup05LtXEptaGI4P1p11hGzIEertGas2YgBHcW4HB
Sg3iRPhlC1vHYu2WKCrVMCDUTq7K4P3bstRFmDGgl1fr3uukY3MUAgUXQGhAggLL
UGrqlxhoeeseVtJK0pJQEyvdfUvxdDJhUYfS3zljFKd9mzI6ge7h5authN+Y2Y69
EaQzihV6z+wUyg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:55 2025 by rpki-client