Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
File: QJvXHM6jftmnmNWgabIWnPTU5ZI.mft (raw, json)
Hash identifier: d3dymvCSfMvCrpFR5XPy0bwdbqzF89cVqhS/pEZ6F4U=
Subject key identifier: 18:F3:07:77:EC:3F:54:EE:D2:D1:35:6D:33:48:4E:83:10:DA:BC:8C
Authority key identifier: 40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
Certificate issuer: /CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Certificate serial: 019A725CEB799D14437B0E3312D080229401
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
Manifest number: 127B
Signing time: Tue 11 Nov 2025 10:01:23 +0000
Manifest this update: Tue 11 Nov 2025 10:01:23 +0000
Manifest next update: Wed 12 Nov 2025 10:01:23 +0000
Files and hashes: 1: QJvXHM6jftmnmNWgabIWnPTU5ZI.crl (hash: qNSB1u9jJakv+vnMpSVz9ejh8vT4d2SGgbwMLFEuRZQ=)
2: lvvS-y_t3pi3cv-oXJNHuuwFX60.roa (hash: fbIaohthqLUB14sBjDthABWLRfajk00zaK8xsJAksno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:eb:79:9d:14:43:7b:0e:33:12:d0:80:22:94:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409bd71ccea37ed9a798d5a069b2169cf4d4e592
Validity
Not Before: Nov 11 10:01:23 2025 GMT
Not After : Nov 12 10:01:23 2025 GMT
Subject: CN=18f30777ec3f54eed2d1356d33484e8310dabc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0f:67:f7:62:ea:ee:c7:d2:94:9b:33:4d:29:
f0:17:00:87:93:be:8d:b8:d6:4d:1a:0c:b1:7e:50:
2e:80:d6:1b:69:01:aa:6a:35:f4:41:2a:af:0f:d8:
75:be:c8:8f:1a:e4:30:e1:14:9c:ea:71:24:1f:78:
ba:66:ec:76:93:d1:14:0b:08:c2:da:4f:71:19:ea:
2c:60:f3:cd:0b:59:89:d1:f7:35:90:fb:62:7d:39:
b5:a3:35:96:40:4c:4a:d6:02:69:4d:f3:9a:c6:6b:
42:c9:26:32:25:b1:d5:20:0b:6d:f4:56:63:3c:3a:
53:48:13:eb:24:ed:7a:32:55:36:1e:93:ce:45:dd:
3b:8c:70:30:7c:e8:c9:2f:eb:12:a1:18:7f:12:76:
e3:7c:dd:ed:90:d0:25:d0:64:34:ce:cd:2f:61:eb:
b0:cb:dc:d6:81:8d:51:2c:dc:ce:3b:ca:76:38:61:
d4:02:d0:28:e4:d7:2f:98:86:13:6a:ea:6a:87:68:
c4:73:a5:d0:c8:8c:49:ba:dd:4a:ce:e3:fa:15:77:
c1:43:4b:d1:58:07:45:85:86:21:e5:27:c7:a0:e5:
bc:c0:9a:56:36:9b:9f:f9:ef:51:3d:54:ba:a0:52:
e5:2e:25:69:cb:02:da:d3:52:f1:a6:34:61:76:69:
a5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F3:07:77:EC:3F:54:EE:D2:D1:35:6D:33:48:4E:83:10:DA:BC:8C
X509v3 Authority Key Identifier:
keyid:40:9B:D7:1C:CE:A3:7E:D9:A7:98:D5:A0:69:B2:16:9C:F4:D4:E5:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJvXHM6jftmnmNWgabIWnPTU5ZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/222399-ecf0-4360-ad34-2bf874a671e8/1/QJvXHM6jftmnmNWgabIWnPTU5ZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:3e:77:e4:8e:26:1b:a1:6b:41:7b:20:c8:68:1b:3a:7b:
47:bd:ce:11:61:3b:77:83:cb:9d:96:c8:e7:da:78:95:64:a5:
2e:17:e7:4a:c0:b9:d6:29:1a:36:ee:8f:01:a9:9f:36:a8:11:
99:4c:2f:c1:c0:12:c4:63:02:e1:be:02:ea:11:87:bb:40:98:
95:f1:6c:34:07:eb:b8:dc:02:85:bb:f4:cd:e1:20:ed:22:95:
27:61:ce:28:6f:bc:ba:d6:04:13:5e:d3:04:2a:c0:d9:89:ca:
d3:0a:2f:a9:9b:0a:e8:53:09:e4:24:7b:65:92:c0:15:a5:51:
15:1d:b7:f4:5c:55:50:71:0e:00:c0:89:4a:26:17:52:10:85:
2c:5a:e2:07:80:d9:ab:8f:b5:78:58:16:20:fe:d9:83:4c:a5:
a5:ba:cc:a6:c9:0e:48:4e:8b:78:e5:bf:8b:a3:a5:71:2b:30:
52:f0:c8:92:f9:87:4d:5b:cb:88:e0:76:2b:e5:c6:2a:d1:47:
44:20:22:69:31:4d:b2:2c:6e:a3:4c:b0:00:0a:31:f8:e9:c4:
76:8a:21:d9:0a:3f:ec:0d:8f:ff:02:ab:f4:51:aa:4d:3e:d4:
06:b2:2e:cb:b8:b7:84:96:1e:ec:04:7c:36:f2:c2:1c:3e:ba:
79:0f:fd:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:36 2025 by rpki-client