Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
File: QFC8opwYE647EfOB8EQqoqipMb8.mft (raw, json)
Hash identifier: C71UjSGhURAi/HC4mr62Rkly07EVm3O23KUQdRKPKYU=
Subject key identifier: 8D:E9:78:84:E9:19:A5:3B:83:37:37:E1:BF:E1:D1:A6:4C:03:F5:9B
Authority key identifier: 40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
Certificate issuer: /CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Certificate serial: 019A7226084EF5DAAE4EC583A210E992C51E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
Manifest number: 1634
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: QFC8opwYE647EfOB8EQqoqipMb8.crl (hash: HbIVc+RbyvJQW0tol7ksu/LuzI4Vr/YKnjpv2hvsbsQ=)
2: xqT_w2QIz7QngYO0UjYqCZFOQm8.roa (hash: voqA9hVWd7OTxS2rJiecPACQATaq8yqLIFOOJeCGw4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:08:4e:f5:da:ae:4e:c5:83:a2:10:e9:92:c5:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4050bca29c1813ae3b11f381f0442aa2a8a931bf
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=8de97884e919a53b833737e1bfe1d1a64c03f59b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:9c:b6:de:7f:6a:a0:37:15:c7:53:a1:4b:
49:f7:dd:9f:c8:5b:bf:6d:f7:e6:45:93:2c:21:a9:
dd:fb:e4:96:6e:e6:76:a2:04:8c:d2:4a:34:40:5d:
d5:08:ca:c9:1b:32:9b:19:5d:a8:bd:74:04:2a:92:
b7:a6:97:76:1b:83:4a:15:58:38:a3:8e:c3:ee:3b:
9c:21:bc:82:c3:98:10:8d:01:f7:b7:85:52:ed:d3:
5a:ce:32:7d:8a:a5:b0:39:31:13:89:db:a9:64:f1:
83:cc:33:c1:63:94:8a:25:7a:79:34:62:4c:a1:d8:
0b:af:ed:cb:1c:1a:db:e0:41:c1:7b:a0:e1:90:0f:
c7:67:ee:42:e5:13:32:3b:1e:64:8c:66:ca:36:40:
5e:e4:36:dd:e2:1f:ce:c4:7b:5e:24:31:fc:98:71:
6a:11:28:ed:93:e7:62:19:2e:e0:0c:bf:80:d2:2f:
a3:78:ea:08:b7:aa:d8:77:52:8b:d3:6d:8e:82:22:
6e:72:82:68:8e:29:42:3d:2a:1b:1a:2f:2e:b1:3b:
91:c3:63:a8:5d:89:7b:1f:6e:07:2d:60:22:13:63:
6c:99:50:ea:43:26:33:0b:89:8c:12:0f:63:b5:47:
7a:00:0d:8f:8d:5b:93:1a:61:7a:52:63:16:33:d6:
e3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E9:78:84:E9:19:A5:3B:83:37:37:E1:BF:E1:D1:A6:4C:03:F5:9B
X509v3 Authority Key Identifier:
keyid:40:50:BC:A2:9C:18:13:AE:3B:11:F3:81:F0:44:2A:A2:A8:A9:31:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFC8opwYE647EfOB8EQqoqipMb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/46d891-249b-4a4c-a35d-7fe9ed7d647d/1/QFC8opwYE647EfOB8EQqoqipMb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e8:5e:ed:d1:a7:38:a3:e4:3a:48:b0:c5:ef:1d:11:36:c2:
8c:a5:ce:24:ef:29:c0:17:5c:09:d3:a5:02:aa:74:6a:56:71:
b7:23:15:aa:02:70:b2:b9:bd:f3:c4:52:5a:53:ec:8a:f0:e7:
f0:9f:55:b6:f6:f9:56:ff:96:c0:26:e4:e1:c4:31:8b:2e:69:
be:d6:96:0a:11:24:a2:27:75:e6:a2:f0:78:63:d6:ff:3a:6f:
68:ce:b4:cb:8b:0b:5b:13:be:9c:c3:14:99:e6:5a:68:b3:c9:
05:04:d1:dd:b8:8b:7c:2f:3e:fc:e0:f8:3d:f4:68:a2:56:67:
36:c0:99:fe:d8:66:f1:81:96:b1:08:c1:38:f1:ce:16:da:e9:
58:dd:17:64:07:ad:6d:84:c4:f7:3f:57:4e:a1:1a:95:c5:45:
fd:0d:cd:54:c4:d1:2b:4d:a5:e7:72:92:6c:20:10:ef:c9:27:
ff:be:d3:b0:f2:02:7c:1b:70:8f:30:5e:40:ef:a5:ba:05:13:
44:41:9c:76:d6:db:9d:2a:3e:99:3b:3b:30:1e:a3:86:90:42:
61:d2:39:7e:28:f6:c1:15:31:9a:e6:77:74:cc:f0:bc:34:7a:
31:04:b4:e9:35:25:1c:65:57:9c:fe:8a:44:f0:b8:9b:e7:e9:
00:c0:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:49:47 2025 by rpki-client