Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: CzKDiYM3IKgcN9Q0pS49sxtKDPlcAAdtIfNyODvlKLo=
Subject key identifier: ED:8D:BF:97:CA:CF:66:47:B7:F7:55:75:B3:72:5A:78:E4:E9:FC:FB
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 019A7301ABC8EA95E3536A5F9CC2DFC5D77F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 03A8
Signing time: Tue 11 Nov 2025 13:01:20 +0000
Manifest this update: Tue 11 Nov 2025 13:01:20 +0000
Manifest next update: Wed 12 Nov 2025 13:01:20 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: xJyNrDEBCu5CbGCt4ia0KZ/FVAH/e6Y11l/Gu9O3+Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:ab:c8:ea:95:e3:53:6a:5f:9c:c2:df:c5:d7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Nov 11 13:01:20 2025 GMT
Not After : Nov 12 13:01:20 2025 GMT
Subject: CN=ed8dbf97cacf6647b7f75575b3725a78e4e9fcfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ef:3a:4a:ad:9d:7f:35:8b:e3:52:15:0b:a0:
e4:ed:58:00:c4:a8:93:32:51:b0:da:16:3d:cd:9c:
e5:d7:4d:a1:f0:a2:44:11:74:f7:b0:c0:b5:2f:da:
cd:dd:e7:93:34:a4:04:79:a1:8c:a5:e3:b1:51:b7:
19:4c:e4:33:55:cb:4b:e0:e9:ad:ea:01:33:03:21:
5e:50:8c:e9:8d:89:3e:c1:70:47:bc:5b:4e:57:19:
f5:b8:08:cc:17:22:3a:d6:89:17:d1:b6:fc:45:f1:
6c:7f:04:ec:59:52:ad:6f:c2:0a:21:d2:93:df:01:
a9:33:49:50:3a:57:90:6b:2b:98:17:14:26:a5:47:
dd:b8:63:b4:73:9b:22:4f:2c:3c:4f:76:a0:a4:01:
71:37:fc:bc:3c:84:f7:3f:69:5b:03:53:ef:02:2a:
17:e0:f3:ce:89:87:d4:d6:d2:19:87:62:d3:d3:5d:
e3:58:9a:22:79:d9:86:77:28:40:84:d3:19:01:a6:
ae:89:b2:5b:3a:34:9d:07:be:07:52:bd:e3:7f:6e:
79:66:a7:40:16:9a:d6:73:1d:91:56:65:b9:05:9a:
5d:0c:48:98:82:c3:6e:a5:41:23:bf:8f:bb:8e:e9:
d6:5d:85:21:49:e5:e1:b6:8a:88:15:21:47:26:c9:
1d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8D:BF:97:CA:CF:66:47:B7:F7:55:75:B3:72:5A:78:E4:E9:FC:FB
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:0f:7e:e1:e9:50:81:a1:b8:f0:c1:f2:b2:e4:41:e8:ec:
15:99:e8:15:cd:e4:b1:d8:14:e0:87:c8:7a:74:20:eb:69:ea:
d0:24:46:f7:37:39:15:74:43:c4:1c:b8:87:e6:b3:5d:83:2f:
21:3b:50:67:47:69:c4:a1:9e:d8:f2:9d:33:81:cf:0e:dc:4f:
4c:af:54:2f:3f:37:2d:09:a4:0a:c5:91:2e:fc:e5:30:98:4e:
94:24:3f:52:c4:76:c9:0b:3c:e0:8e:e0:f7:41:55:bf:58:db:
cc:51:0e:4b:8e:96:fd:5f:98:f6:ab:c9:ef:a4:e3:b5:0e:d4:
f4:d3:b6:93:54:84:20:30:33:74:4d:33:0e:10:65:48:df:e7:
7b:3c:eb:18:f2:47:60:cc:17:cf:3c:7e:17:e6:ae:de:32:a4:
2d:30:5b:f4:47:de:59:4f:82:f7:7f:f3:93:e9:5c:05:e8:22:
ff:ad:93:94:ca:68:08:b5:f7:18:72:52:88:97:a5:68:cd:75:
a1:eb:3e:83:06:8a:26:9a:3a:c6:df:de:16:36:a7:43:8c:7b:
5a:d7:a4:a6:0a:1e:43:d8:ac:bb:21:32:2d:69:b8:2b:65:e6:
fa:ee:4a:28:fa:ec:7b:ae:2b:62:c2:c8:67:51:21:ee:b8:09:
f5:65:5d:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpzAavI6pXjU2pfnMLfxdd/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwMmRjMmZiYWFhM2Q0NzU5Njc2YTc5YjhhZmRiNGMyMjVm
YzA1NWYwHhcNMjUxMTExMTMwMTIwWhcNMjUxMTEyMTMwMTIwWjAzMTEwLwYDVQQD
EyhlZDhkYmY5N2NhY2Y2NjQ3YjdmNzU1NzViMzcyNWE3OGU0ZTlmY2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+86Sq2dfzWL41IVC6Dk7VgAxKiT
MlGw2hY9zZzl102h8KJEEXT3sMC1L9rN3eeTNKQEeaGMpeOxUbcZTOQzVctL4Omt
6gEzAyFeUIzpjYk+wXBHvFtOVxn1uAjMFyI61okX0bb8RfFsfwTsWVKtb8IKIdKT
3wGpM0lQOleQayuYFxQmpUfduGO0c5siTyw8T3agpAFxN/y8PIT3P2lbA1PvAioX
4PPOiYfU1tIZh2LT013jWJoiedmGdyhAhNMZAaauibJbOjSdB74HUr3jf255ZqdA
FprWcx2RVmW5BZpdDEiYgsNupUEjv4+7junWXYUhSeXhtoqIFSFHJskdewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2Nv5fKz2ZHt/dVdbNyWnjk6fz7MB8GA1UdIwQY
MBaAFEAtwvuqo9R1lnanm4r9tMIl/AVfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYt
M2UwMjEzMzdjZWE2LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi82YTJlOGYtNTgwMy00ZjFkLWE0NWYtM2UwMjEzMzdjZWE2
LzEvUUMzQy02cWoxSFdXZHFlYml2MjB3aVg4QlY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka0PfuHp
UIGhuPDB8rLkQejsFZnoFc3ksdgU4IfIenQg62nq0CRG9zc5FXRDxBy4h+azXYMv
ITtQZ0dpxKGe2PKdM4HPDtxPTK9ULz83LQmkCsWRLvzlMJhOlCQ/UsR2yQs84I7g
90FVv1jbzFEOS46W/V+Y9qvJ76TjtQ7U9NO2k1SEIDAzdE0zDhBlSN/nezzrGPJH
YMwXzzx+F+au3jKkLTBb9EfeWU+C93/zk+lcBegi/62TlMpoCLX3GHJSiJelaM11
oes+gwaKJpo6xt/eFjanQ4x7WtekpgoeQ9isuyEyLWm4K2Xm+u5KKPrse64rYsLI
Z1Eh7rgJ9WVdFg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:12:16 2025 by rpki-client