Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: LDxZy46+1lmpU2jVdb1drklEkEUjPgUg/cEyTFOoCho=
Subject key identifier: F6:93:7B:09:3D:5A:AD:CB:A6:63:F8:AD:0A:A6:9D:AC:DC:1E:79:EE
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 019A71EE5C2F30983B9E43572C884D544208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 032B
Signing time: Tue 11 Nov 2025 08:00:37 +0000
Manifest this update: Tue 11 Nov 2025 08:00:37 +0000
Manifest next update: Wed 12 Nov 2025 08:00:37 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: 0jT5emW7Ru7FLJXsv9tCdxZ1NIY8eyKbkh8TQhqHgGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5c:2f:30:98:3b:9e:43:57:2c:88:4d:54:42:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Nov 11 08:00:37 2025 GMT
Not After : Nov 12 08:00:37 2025 GMT
Subject: CN=f6937b093d5aadcba663f8ad0aa69dacdc1e79ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:3e:e8:41:b2:56:75:35:79:4d:24:23:29:
f9:de:31:4d:52:fe:82:c8:16:23:93:6b:14:94:ee:
ab:7d:32:45:bd:10:ca:bf:35:36:7a:2a:22:93:98:
73:5b:b1:f3:55:4d:a8:9f:18:76:ad:2f:c9:dd:34:
5f:9a:43:63:04:f5:97:8e:4a:6a:13:81:20:d6:c4:
b1:17:f9:04:4b:08:55:b4:3c:2f:88:89:e6:2e:f3:
51:95:63:70:e2:ba:5e:40:69:ee:bb:b4:f2:01:40:
6c:d3:b2:2d:4a:87:2f:1b:2f:1c:31:8c:5c:ea:f7:
ca:c1:56:e1:7c:06:72:96:2e:db:1d:0c:0f:c0:bd:
3b:15:8b:d8:ab:40:40:9c:2d:17:0d:0b:00:b9:45:
dd:de:da:df:a6:5d:67:6b:ad:73:13:e2:7c:e5:56:
0d:62:89:3d:1d:ab:32:63:50:d8:0e:de:e7:45:3b:
21:3b:80:fe:82:08:e5:5d:c3:a8:61:ff:a9:d4:80:
08:30:bf:ee:8e:06:cd:c7:1b:1f:4b:0a:5a:15:8d:
66:96:6e:65:0a:15:17:33:2b:e1:2f:57:41:c7:54:
ef:34:99:34:3d:54:0d:6e:ab:fe:10:10:0b:9c:0e:
80:b6:4a:c0:1e:af:4c:d6:b5:07:6c:3a:65:04:98:
94:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:93:7B:09:3D:5A:AD:CB:A6:63:F8:AD:0A:A6:9D:AC:DC:1E:79:EE
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:53:45:52:41:49:fd:70:8c:ca:3e:fa:24:5a:47:01:30:1e:
39:c6:21:41:0c:80:f6:0f:31:c3:4e:65:97:8f:8b:a7:bc:fa:
ba:a5:45:43:93:bc:a8:83:47:af:c5:f2:85:21:1d:40:42:60:
0f:ab:e9:48:16:25:bd:bf:fa:f3:ed:ed:41:fa:93:db:ef:19:
3d:e9:b3:0e:8a:c7:73:fb:89:a0:40:86:10:76:3d:0d:9b:ab:
53:af:ea:42:70:d6:14:07:11:cd:31:34:dd:aa:2b:76:4d:88:
76:1a:48:58:dc:08:cf:60:b3:3b:30:12:bd:70:1c:1e:bd:bf:
7e:c9:c7:96:39:3e:89:ef:c6:f1:05:54:9a:12:b5:a4:5c:8c:
85:6c:4d:08:6a:25:40:50:52:33:b3:99:51:5a:8c:38:1c:a8:
0c:96:b0:97:8f:3b:1f:2f:96:32:20:60:00:ec:52:d4:b6:a6:
59:63:98:12:40:10:20:9c:60:52:8c:1a:4c:d0:a8:4a:87:c8:
b8:b6:66:7f:d8:75:62:74:07:a0:4b:c6:4f:b2:16:c9:b9:57:
0f:ac:9b:14:56:e2:8f:25:c5:2a:82:d1:1f:04:ef:16:be:74:
74:c4:a2:66:8a:31:b8:73:3d:e9:8b:1e:b0:45:b3:74:c9:03:
0c:f5:88:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:34:57 2025 by rpki-client