Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: 3xhH55DMxXcRLbXRn1xbJMvFsJp2hfb3Yy6LsXrZjdg=
Subject key identifier: 48:B0:71:37:B1:45:09:95:25:DF:FF:0C:03:AA:22:80:7D:4F:D1:8D
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 0199FBEB1083E563808B5D3E8C346D7D629C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 10DD
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: 4jhKEJFVyn+0S9Sjurk/AJJ4hEzEDZBRZjfbEAW7ZLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:10:83:e5:63:80:8b:5d:3e:8c:34:6d:7d:62:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=48b07137b145099525dfff0c03aa22807d4fd18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e5:df:ca:ba:f4:98:1a:72:5f:01:cd:a9:92:
b3:70:1e:03:bd:02:b0:26:77:bf:2b:6e:46:e9:e7:
69:5a:9c:9e:bd:0e:5b:bd:b3:0f:3e:41:32:b1:3d:
bd:fc:3a:6d:71:66:28:8f:4b:d0:ca:c8:bc:2e:a8:
0e:bd:dd:93:48:90:8d:b4:28:ca:1e:af:4c:cb:5d:
35:f9:7a:8f:a6:5e:76:29:27:b0:31:15:1b:62:9d:
6b:23:b3:89:45:3b:0f:0a:0c:0d:49:92:d3:bf:08:
94:66:21:3d:e3:00:1b:d3:9a:83:78:3f:e9:7e:eb:
66:e4:3a:84:10:71:54:0f:23:89:fe:87:10:ca:27:
1f:fd:ca:41:08:32:7e:64:88:b5:eb:25:83:75:8b:
36:23:b5:d4:ce:29:e3:bb:62:d3:7a:fd:bb:54:0d:
75:fc:7e:a8:a0:e3:aa:79:b9:02:b6:cf:ac:e0:dd:
8a:1a:17:72:7b:25:77:40:56:48:d1:5e:46:9b:4b:
f6:95:25:96:20:63:05:8a:8b:03:28:a3:78:33:8f:
4d:14:27:86:9c:cf:83:2e:64:8a:7b:ec:50:21:6f:
02:f8:99:ce:1c:b3:d8:4d:79:8e:c9:1d:0e:76:02:
ba:5e:0c:dc:3d:5b:a9:1e:41:21:c4:de:82:f4:07:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:71:37:B1:45:09:95:25:DF:FF:0C:03:AA:22:80:7D:4F:D1:8D
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:b8:bc:bd:75:70:d2:09:8f:6e:97:79:b6:38:d3:7c:df:13:
fb:7c:f4:07:4f:23:48:53:62:49:01:03:bf:54:a5:f7:33:00:
7d:fa:cc:29:50:74:5f:8f:33:2b:52:c6:79:b3:2e:53:5c:bb:
26:9d:35:a3:36:d6:68:42:83:03:c8:32:9c:9b:d3:b9:8a:4b:
f6:cc:36:12:3a:a5:bf:67:59:5f:3d:c8:16:54:df:8a:3c:7b:
46:2f:ec:63:78:79:b8:91:42:85:86:72:76:3a:4a:ce:b4:f1:
f4:e2:82:70:b9:c4:b5:85:c8:f7:81:22:fa:fc:42:01:4d:39:
b2:bc:2d:3b:97:cf:82:0c:4d:ea:ab:0e:e8:e9:f2:a8:b6:25:
9c:56:eb:3f:4a:ad:33:31:e8:b7:a3:bf:94:b4:74:30:25:9c:
be:a9:31:83:7d:6b:a5:a4:c7:57:63:e2:e0:79:cc:82:e6:34:
d8:fc:6e:5f:07:9e:c0:3f:4c:76:88:8d:17:60:82:5f:ff:8b:
8f:22:0c:18:b4:b9:9a:57:33:3e:b6:ef:70:45:c9:4a:13:ee:
86:15:45:ed:b0:eb:e3:8c:1e:91:23:60:8b:27:fb:cf:77:89:
2e:1e:53:0a:df:30:d5:64:5e:4d:e5:dd:e8:ea:c2:d3:ce:d2:
58:e6:b6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:23 2025 by rpki-client