Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
File: QH75-Xcjo9WiGTasNNMZl_JWHrk.mft (raw, json)
Hash identifier: /xmnIt61woZJRPAmy6ToLzZG+DjpM8x6dZJh4XmccBQ=
Subject key identifier: 2E:31:4A:CC:82:27:C9:89:60:FD:9D:ED:79:D0:E7:1F:1E:37:28:7E
Authority key identifier: 40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
Certificate issuer: /CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Certificate serial: 019A7112ACDF7044E0E6316A70F043B3903B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
Manifest number: 0DFE
Signing time: Tue 11 Nov 2025 04:00:40 +0000
Manifest this update: Tue 11 Nov 2025 04:00:40 +0000
Manifest next update: Wed 12 Nov 2025 04:00:40 +0000
Files and hashes: 1: QH75-Xcjo9WiGTasNNMZl_JWHrk.crl (hash: i/I/YDhbWRyzMyJB0ibrO6Tr8c9V+/92aLH7JOCEetM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ac:df:70:44:e0:e6:31:6a:70:f0:43:b3:90:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=407ef9f97723a3d5a21936ac34d31997f2561eb9
Validity
Not Before: Nov 11 04:00:40 2025 GMT
Not After : Nov 12 04:00:40 2025 GMT
Subject: CN=2e314acc8227c98960fd9ded79d0e71f1e37287e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:77:06:f9:d1:bc:bc:e2:e9:de:34:2b:91:
77:4b:8e:f0:c4:cd:5b:bb:10:ad:84:1a:ae:4d:e0:
35:a1:56:b8:d3:4d:31:a5:eb:61:11:cc:a6:63:2f:
37:16:14:16:15:b5:20:2d:c2:25:2b:53:4f:ca:c5:
a1:86:30:c0:5e:d3:4c:e5:e5:36:f2:58:11:ba:8c:
c3:be:f7:8f:bb:9f:6d:62:b7:ee:8f:62:62:0a:5e:
8c:4e:c5:a4:c5:a6:c7:0f:cb:21:d2:fd:74:b4:44:
6b:04:86:ab:01:e5:e5:f0:cb:83:04:02:66:df:ff:
c5:76:0d:bd:dd:c0:3b:3a:a4:59:3c:65:d9:9a:17:
1f:11:9a:ea:f3:fe:75:5a:02:bd:ab:72:17:1d:e5:
33:bf:57:30:92:c0:ee:f1:f9:e8:18:01:2e:5b:3d:
02:72:95:03:3e:42:a6:4e:72:70:6a:36:f0:36:bf:
f8:3f:25:5e:24:60:4f:ce:a6:f7:0b:39:62:de:5f:
53:c9:2b:88:b2:be:94:52:df:4c:0f:e0:8e:c4:cf:
df:f7:8e:3f:fa:53:77:03:12:60:df:2f:0c:05:f6:
a1:93:38:84:55:7d:7e:77:ed:86:23:09:34:f6:a8:
c7:a8:af:24:b3:ae:65:c0:8f:3b:f9:46:68:37:f5:
42:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:31:4A:CC:82:27:C9:89:60:FD:9D:ED:79:D0:E7:1F:1E:37:28:7E
X509v3 Authority Key Identifier:
keyid:40:7E:F9:F9:77:23:A3:D5:A2:19:36:AC:34:D3:19:97:F2:56:1E:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QH75-Xcjo9WiGTasNNMZl_JWHrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/e1ce40-24e7-404c-8e24-8d66e720421d/1/QH75-Xcjo9WiGTasNNMZl_JWHrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:bf:b0:b4:75:c6:eb:41:be:49:19:41:65:af:cd:1e:06:
36:49:8b:c4:75:9a:c2:06:96:e9:a6:fa:43:d5:0d:8c:8d:1b:
3e:10:24:a8:ae:b3:c1:a6:67:28:b3:35:9e:07:dd:27:dc:18:
9f:69:a1:50:a9:fe:96:24:9d:6f:ba:db:e9:74:ae:e3:07:7c:
73:03:b6:bb:d7:92:b0:d3:d4:6c:b8:da:8f:73:8c:f7:9c:33:
c0:0a:bc:d8:fa:05:55:1c:a8:2e:21:03:f5:27:61:9a:c2:4a:
45:11:9f:b8:7d:50:d5:34:4a:78:4b:7e:63:28:56:3c:41:02:
6e:9e:df:fa:c7:c2:55:9c:94:15:15:e6:18:e0:54:63:ed:21:
e4:b5:74:b3:63:77:7b:eb:67:fc:f1:f6:1c:5a:00:a8:24:70:
85:6f:b8:45:01:70:45:fb:6d:fd:b2:da:17:dd:1b:a8:88:53:
32:b6:7c:18:8f:02:8c:f7:cd:17:84:65:9b:89:e7:2f:e6:85:
f4:22:88:f4:2b:07:53:93:fb:0a:26:c5:70:84:36:87:fe:5e:
31:03:71:68:12:77:75:7d:26:d7:28:49:da:9a:4b:e3:71:2e:
30:4d:24:43:d0:fb:98:1b:81:86:58:3b:ff:dc:d9:e4:6a:26:
6d:be:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:55 2025 by rpki-client