Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
File: QxHM0r0iVEq-WFp80_lJEeoMlCo.mft (raw, json)
Hash identifier: vrIBwu2JUwlmM0DqqfTfsKPZf1T9XRteRn/GqQ3ugr0=
Subject key identifier: B4:F9:28:30:B4:97:6F:4C:A9:7C:A8:DD:F3:73:1D:C7:4E:DC:81:A4
Authority key identifier: 43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
Certificate issuer: /CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Certificate serial: 019A729346DF59DAC5F3FE47BE88A6E98887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
Manifest number: 11B6
Signing time: Tue 11 Nov 2025 11:00:45 +0000
Manifest this update: Tue 11 Nov 2025 11:00:45 +0000
Manifest next update: Wed 12 Nov 2025 11:00:45 +0000
Files and hashes: 1: QxHM0r0iVEq-WFp80_lJEeoMlCo.crl (hash: 5DL8YcIOZUzrEv8UBwK97oRihsAnLympKcqJO/wOUzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:46:df:59:da:c5:f3:fe:47:be:88:a6:e9:88:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4311ccd2bd22544abe585a7cd3f94911ea0c942a
Validity
Not Before: Nov 11 11:00:45 2025 GMT
Not After : Nov 12 11:00:45 2025 GMT
Subject: CN=b4f92830b4976f4ca97ca8ddf3731dc74edc81a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:b9:8f:f6:b6:40:ee:50:9f:4c:48:34:6f:
0e:69:89:0b:fe:b3:01:19:33:ae:40:26:b7:da:7b:
c9:af:0c:2a:07:7b:fe:04:70:1c:83:f7:ee:7d:21:
76:7e:49:f5:c8:aa:71:34:79:ee:56:1b:3b:f7:55:
d9:f2:51:fd:5a:c0:43:a5:e0:bd:91:c3:5c:09:88:
ac:41:27:6e:37:bf:86:6b:8c:5d:14:82:7e:ef:a1:
6a:0d:71:f6:8f:79:ff:ff:8c:61:c3:86:03:4b:36:
9f:fa:ab:ed:87:7d:8f:ac:b3:7e:60:91:40:eb:4a:
25:81:04:48:94:e3:fd:0c:66:b9:73:e6:ef:a6:32:
76:ac:e1:00:69:6a:e3:51:94:a1:93:70:08:fa:77:
54:23:9f:eb:22:ac:df:77:c2:07:62:d6:18:80:44:
44:26:2e:77:c4:50:0e:94:50:88:67:18:08:cd:09:
f9:c9:31:ac:4a:1c:3b:fd:f3:08:68:d2:25:d9:61:
60:31:9f:d8:e4:f4:7e:f8:44:c0:0a:57:6b:8b:68:
a2:1c:11:6b:fd:ce:f1:2d:1f:59:ba:1d:8a:21:5f:
71:8b:33:54:30:9f:2b:21:22:f2:8b:c8:e6:b9:d4:
94:90:02:1f:70:05:15:52:f8:f2:42:d8:86:f3:40:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F9:28:30:B4:97:6F:4C:A9:7C:A8:DD:F3:73:1D:C7:4E:DC:81:A4
X509v3 Authority Key Identifier:
keyid:43:11:CC:D2:BD:22:54:4A:BE:58:5A:7C:D3:F9:49:11:EA:0C:94:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxHM0r0iVEq-WFp80_lJEeoMlCo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33d648-0610-4921-bd0f-d378baf6aa92/1/QxHM0r0iVEq-WFp80_lJEeoMlCo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:2b:b7:9c:f2:58:72:0f:86:a5:aa:b1:d3:e6:4c:51:17:32:
18:ca:90:80:00:98:c9:f3:9d:33:d6:09:a1:94:f8:7e:56:84:
ac:78:3c:64:a4:cd:b5:24:c7:9f:73:75:a3:b7:7c:52:2c:f0:
8b:59:cd:70:53:db:09:34:8f:64:5e:79:04:57:44:f5:d0:2c:
47:f5:42:e3:e2:a3:5a:73:65:b7:82:67:d2:e4:52:9c:4a:44:
05:07:73:0d:a8:60:31:7f:49:74:08:98:cf:4c:da:b5:67:e8:
65:c2:db:34:0e:11:d1:2b:77:42:a3:38:3d:05:81:54:a9:63:
b0:61:11:78:dc:60:21:b1:6e:46:51:9c:5f:46:e1:a5:94:6e:
ad:a8:f9:68:6e:d7:da:a0:f9:06:f2:2b:2c:d4:83:63:da:81:
de:22:e0:48:4f:17:a0:1b:de:29:ba:da:b4:3d:56:fc:ae:f4:
b9:fb:dd:35:bc:3b:74:63:e1:97:66:43:30:e6:0a:74:af:28:
b2:0f:4c:d6:8a:c2:3f:85:b0:b8:7b:3a:9b:f4:50:9a:84:3e:
78:71:ef:6c:45:53:5f:bd:b8:89:ef:49:c0:9c:3b:5b:74:26:
d2:1f:c8:53:de:ba:d7:05:40:b5:9a:f0:18:07:3e:51:27:5a:
88:29:e3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:45 2025 by rpki-client