Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: oF48Bx0HrLVzExA3ERoXNWTBvk2+Aoybcf+z8J7Erxg=
Subject key identifier: 2E:4C:D5:FC:7B:E7:46:2C:DE:E6:DC:C1:CA:34:A8:21:BA:CB:7A:B9
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 019A71B91084BCCC37A104C844C8B3FCC087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0A40
Signing time: Tue 11 Nov 2025 07:02:24 +0000
Manifest this update: Tue 11 Nov 2025 07:02:24 +0000
Manifest next update: Wed 12 Nov 2025 07:02:24 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: B4n1gwVdDHzX/jXzrbnDs1yYf9adGp6Dh9DX4+dgMrM=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:10:84:bc:cc:37:a1:04:c8:44:c8:b3:fc:c0:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Nov 11 07:02:24 2025 GMT
Not After : Nov 12 07:02:24 2025 GMT
Subject: CN=2e4cd5fc7be7462cdee6dcc1ca34a821bacb7ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:21:4f:6c:71:75:5d:32:c3:25:b2:96:fa:e4:
03:09:c3:e2:e0:ae:88:3c:7b:93:a6:ac:ca:66:cf:
43:67:2c:a2:c9:ed:b2:b1:f3:9a:8e:5c:be:84:d6:
cb:28:78:3f:71:da:96:fa:5b:bb:a6:a0:91:15:76:
95:b1:e3:d1:73:4d:98:5d:55:45:b6:f6:f3:b4:ba:
55:ce:69:94:10:a3:ae:26:1c:f2:ca:6b:ae:6f:e0:
94:e7:d5:1f:aa:5b:e0:2f:be:3d:aa:c6:f9:cc:0d:
5a:39:95:be:0a:38:0e:62:7e:b4:07:b8:e6:32:be:
a2:69:bb:1e:5f:cb:59:7a:b6:65:16:4c:dc:0c:86:
19:5d:75:60:00:aa:60:2b:0e:de:67:91:64:65:15:
b3:a7:11:86:82:4e:51:6d:f2:e2:5a:84:3b:96:02:
10:dd:dc:31:bf:cb:8f:d5:03:f0:38:c9:55:5a:12:
af:2f:e7:dc:5e:12:95:13:af:13:7c:21:d9:20:0a:
2e:59:52:3a:1d:9b:45:d9:de:b6:1b:db:19:1b:bf:
2c:df:4b:75:f8:11:9e:3c:a5:ff:b8:a6:6b:1e:a5:
b5:e9:ba:6e:c3:4f:34:34:c6:ee:08:44:1b:11:bb:
4f:e5:4d:94:6a:10:55:20:a5:54:78:69:2d:75:5f:
8b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4C:D5:FC:7B:E7:46:2C:DE:E6:DC:C1:CA:34:A8:21:BA:CB:7A:B9
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5b:0d:6c:f3:86:8b:2d:6d:62:7d:e6:dd:e7:bd:d3:fc:c7:
84:57:75:79:5a:fe:a0:88:79:25:e5:fa:03:80:23:9c:60:c1:
68:2d:6e:9f:9e:b3:8b:c7:7a:85:29:da:2b:3f:d2:7c:8c:19:
a9:82:47:3f:12:36:66:3e:27:c5:9f:1e:d3:cd:f8:55:73:21:
0a:67:d6:71:95:12:2f:29:7e:78:9c:59:fc:d6:8b:f9:08:dc:
eb:15:39:2f:06:3f:bc:35:c8:20:ef:e2:f5:6a:12:92:33:a8:
ff:7c:0f:40:9d:e7:98:72:58:93:00:61:75:b6:df:c0:36:6b:
da:ff:05:5d:fe:b2:69:d7:2b:cb:9f:d3:ab:93:c4:14:83:31:
51:b6:ab:5e:c9:0e:42:99:d1:39:73:76:ba:e7:a4:7b:e6:69:
1c:29:6c:c2:ae:5d:85:6a:58:9d:79:76:b5:24:f8:84:43:d6:
43:4b:c3:36:ba:29:d3:61:e5:a8:ab:c8:7f:f5:dc:53:c4:8e:
47:ad:1c:82:70:c3:1a:24:4a:20:69:6d:3b:3f:71:a7:68:e8:
ed:25:03:94:62:10:80:23:4f:c4:d5:fc:22:5d:57:b9:47:3a:
97:dc:b4:4e:d1:37:8a:d4:20:e8:c2:48:0e:0d:ed:bd:a2:56:
d0:13:f0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:38:31 2025 by rpki-client