Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
File: QUZdOIpCMlXUiDLQc2m2vHcD6io.mft (raw, json)
Hash identifier: GOFixrPRWpdGcT1Iq8naEPGOGCjg/CcaDgLiW0tz2kk=
Subject key identifier: 9A:4C:9F:1F:B4:46:64:2F:FE:E1:6F:72:07:64:51:CD:23:E0:61:0F
Authority key identifier: 41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
Certificate issuer: /CN=41465d388a423255d48832d07369b6bc7703ea2a
Certificate serial: 019A71EEB1E32ACE5751B95BD41370ECDA93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
Manifest number: 46
Signing time: Tue 11 Nov 2025 08:00:59 +0000
Manifest this update: Tue 11 Nov 2025 08:00:59 +0000
Manifest next update: Wed 12 Nov 2025 08:00:59 +0000
Files and hashes: 1: QUZdOIpCMlXUiDLQc2m2vHcD6io.crl (hash: /JWinBNp24Qwl7EAYra0NNdTLtnCAa9PHqWPKAhiug8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:b1:e3:2a:ce:57:51:b9:5b:d4:13:70:ec:da:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41465d388a423255d48832d07369b6bc7703ea2a
Validity
Not Before: Nov 11 08:00:59 2025 GMT
Not After : Nov 12 08:00:59 2025 GMT
Subject: CN=9a4c9f1fb446642ffee16f72076451cd23e0610f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:21:4e:b2:53:52:9e:94:7a:f3:89:5a:01:
1c:e5:7d:47:44:6f:35:f9:46:36:84:15:d1:61:fa:
e5:b9:d9:74:87:22:a5:f8:1e:85:a4:05:81:06:40:
e4:3e:21:9b:5e:22:42:db:b1:73:aa:99:e2:0e:32:
a6:83:21:50:e3:b1:8d:09:c9:40:a2:03:4f:8b:50:
73:7d:8a:34:47:36:f7:1f:8a:64:a8:a5:71:95:df:
7d:3c:4b:2c:69:e5:1b:ba:80:cd:ad:10:99:44:77:
74:5b:99:5c:9d:93:ed:5b:f0:28:61:55:34:ad:29:
5f:18:6e:b0:d2:87:c0:24:cb:24:a3:25:c0:b2:0c:
2f:4d:56:34:cc:54:b7:0e:f5:83:8b:92:4a:91:c4:
29:bf:80:07:96:34:37:d4:85:18:35:a3:ca:7d:86:
49:b5:32:34:60:2b:4e:47:78:8d:1a:d5:53:6f:7d:
06:85:35:3f:20:43:e2:b2:89:e6:67:a1:c2:16:a0:
89:4f:9a:84:8c:a5:9b:c0:8d:e8:51:d5:ed:a6:16:
a4:95:a3:79:63:af:54:66:a4:c1:cc:ba:7b:70:c1:
7f:2e:9b:39:d6:c0:70:be:fb:48:3b:f1:46:90:b3:
32:9f:26:53:b0:d8:2e:e2:f3:9f:2f:7e:67:c0:c6:
eb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4C:9F:1F:B4:46:64:2F:FE:E1:6F:72:07:64:51:CD:23:E0:61:0F
X509v3 Authority Key Identifier:
keyid:41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:13:bf:01:63:e8:b0:88:f8:9b:fc:82:e3:d6:69:e4:44:
6e:01:8a:5a:b3:4e:cb:30:ee:9d:b2:a6:fb:47:67:4b:3a:4c:
9b:03:06:8a:d8:bc:e6:2f:ae:91:94:0e:2e:ee:1d:df:91:83:
d7:17:d9:a6:7e:1e:02:df:11:10:aa:f7:e0:be:73:9b:33:0d:
be:b9:d2:29:fb:42:8f:23:4a:25:e7:82:52:b8:81:1c:d9:63:
9d:1e:e7:c9:6e:db:9d:2c:e6:1d:2f:99:b6:da:62:5b:0c:75:
de:97:43:e5:b9:29:5d:3b:be:55:a2:83:15:17:77:72:af:c5:
f0:cd:04:4a:65:52:c5:5c:4c:ae:5e:43:95:40:5e:31:ff:f4:
b9:3b:52:d6:dc:67:3c:65:88:0a:a0:87:da:c9:cc:c6:ea:d5:
45:37:f3:76:c8:19:c7:a2:24:a8:9f:66:ee:d0:cd:57:ff:85:
8e:c2:3b:6b:b0:55:41:d6:68:e1:18:db:c6:db:14:00:a9:df:
cc:1a:a1:fc:35:27:8a:ca:92:1f:4d:7e:ec:d2:b0:6b:b3:12:
2b:2c:55:7f:61:e8:46:ee:ba:5f:98:b8:27:b4:08:a3:4e:2f:
c9:59:6f:1c:88:f2:52:89:02:60:8f:fe:e3:0f:5f:42:10:2f:
37:0e:ee:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpx7rHjKs5XUblb1BNw7NqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNDY1ZDM4OGE0MjMyNTVkNDg4MzJkMDczNjliNmJjNzcw
M2VhMmEwHhcNMjUxMTExMDgwMDU5WhcNMjUxMTEyMDgwMDU5WjAzMTEwLwYDVQQD
Eyg5YTRjOWYxZmI0NDY2NDJmZmVlMTZmNzIwNzY0NTFjZDIzZTA2MTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBghTrJTUp6UevOJWgEc5X1HRG81
+UY2hBXRYfrludl0hyKl+B6FpAWBBkDkPiGbXiJC27FzqpniDjKmgyFQ47GNCclA
ogNPi1BzfYo0Rzb3H4pkqKVxld99PEssaeUbuoDNrRCZRHd0W5lcnZPtW/AoYVU0
rSlfGG6w0ofAJMskoyXAsgwvTVY0zFS3DvWDi5JKkcQpv4AHljQ31IUYNaPKfYZJ
tTI0YCtOR3iNGtVTb30GhTU/IEPisonmZ6HCFqCJT5qEjKWbwI3oUdXtphaklaN5
Y69UZqTBzLp7cMF/Lps51sBwvvtIO/FGkLMynyZTsNgu4vOfL35nwMbrSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJpMnx+0RmQv/uFvcgdkUc0j4GEPMB8GA1UdIwQY
MBaAFEFGXTiKQjJV1Igy0HNptrx3A+oqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zYjBlNzItMDQzYy00ZGZiLWI2MzYt
MTVhNTMwNmMyZWZkLzEvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zYjBlNzItMDQzYy00ZGZiLWI2MzYtMTVhNTMwNmMyZWZk
LzEvUVVaZE9JcENNbFhVaURMUWMybTJ2SGNENmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUHoTvwFj
6LCI+Jv8guPWaeREbgGKWrNOyzDunbKm+0dnSzpMmwMGiti85i+ukZQOLu4d35GD
1xfZpn4eAt8REKr34L5zmzMNvrnSKftCjyNKJeeCUriBHNljnR7nyW7bnSzmHS+Z
ttpiWwx13pdD5bkpXTu+VaKDFRd3cq/F8M0ESmVSxVxMrl5DlUBeMf/0uTtS1txn
PGWICqCH2snMxurVRTfzdsgZx6IkqJ9m7tDNV/+FjsI7a7BVQdZo4RjbxtsUAKnf
zBqh/DUnisqSH01+7NKwa7MSKyxVf2HoRu66X5i4J7QIo04vyVlvHIjyUokCYI/+
4w9fQhAvNw7u8g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:56:46 2025 by rpki-client