Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
File: QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft (raw, json)
Hash identifier: kK5RNs/QDsB0RJleEb5yj4I3aF4vE2xVO2SE3+ovJbc=
Subject key identifier: 46:FB:02:3D:4E:01:37:93:FD:DF:16:3F:68:86:C3:05:9A:0E:65:3C
Authority key identifier: 41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
Certificate issuer: /CN=411952046770f54e8be1fd7d673132265ad70fa8
Certificate serial: 0199FC21D7A85CE29EAEB3576A833C8468BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
Manifest number: 0DA1
Signing time: Sun 19 Oct 2025 11:01:40 +0000
Manifest this update: Sun 19 Oct 2025 11:01:40 +0000
Manifest next update: Mon 20 Oct 2025 11:01:40 +0000
Files and hashes: 1: QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl (hash: c5pFlAsNale00KUVEXk1efSplFdMGb4ENUc0Npm12to=)
2: Xpf8O2DfxtSRMYLfH4Jhe7jGcr4.roa (hash: mr8J89/SuXN+JPAXQsryCuEFWqmHZudkRiHUpBMVGnw=)
3: qliDDfSLIfyZKuJ9vwyYrHItz_k.roa (hash: D8mFTN20TsuGjGw8I0yHs9/gZXV7jBDiD7YQatfWrpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:d7:a8:5c:e2:9e:ae:b3:57:6a:83:3c:84:68:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=411952046770f54e8be1fd7d673132265ad70fa8
Validity
Not Before: Oct 19 11:01:40 2025 GMT
Not After : Oct 20 11:01:40 2025 GMT
Subject: CN=46fb023d4e013793fddf163f6886c3059a0e653c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:33:f4:d2:bf:26:10:89:ab:28:b7:b6:d3:e2:
13:fc:96:45:6a:5d:53:96:31:a8:7b:8e:97:f7:1e:
cc:02:7b:91:0b:d8:f3:fd:b8:53:b7:75:0f:13:e3:
7b:e2:8e:cd:c2:cf:3f:70:1a:ae:92:82:13:cc:c1:
bd:c5:db:91:4a:49:f4:dc:c4:cd:77:00:59:e4:b9:
ee:c7:6a:9b:24:f6:c7:55:ff:28:80:8b:9e:db:5d:
9b:33:80:e5:ef:cb:93:fc:95:3d:48:8b:23:3f:67:
f0:76:13:5b:97:8d:bd:2d:5e:fb:12:45:e7:a4:75:
23:89:d1:fb:6d:a5:dd:8f:8b:94:45:ca:c1:a6:5e:
eb:dc:94:ff:87:e4:eb:b7:99:ff:d9:c5:55:ce:91:
ff:59:7c:ad:fc:66:71:de:07:16:53:b8:88:1e:fb:
7c:de:a6:dc:57:07:a9:99:0c:33:5e:12:be:d8:9a:
40:d5:7e:a9:b1:bc:94:20:fb:58:37:45:2e:af:7d:
c3:b6:44:a6:a3:b0:50:5e:dd:5e:49:53:73:be:b7:
57:a7:8c:cf:bc:99:28:52:0f:5b:dd:45:a9:f2:2a:
f0:8d:f7:c6:94:f9:1d:84:60:6d:5c:9a:28:05:b0:
5e:5b:07:0c:c7:ce:27:c7:cb:74:b1:50:59:d5:1d:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:FB:02:3D:4E:01:37:93:FD:DF:16:3F:68:86:C3:05:9A:0E:65:3C
X509v3 Authority Key Identifier:
keyid:41:19:52:04:67:70:F5:4E:8B:E1:FD:7D:67:31:32:26:5A:D7:0F:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRlSBGdw9U6L4f19ZzEyJlrXD6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3950d4-9d72-4ff0-81de-8b91bc61e7c3/1/QRlSBGdw9U6L4f19ZzEyJlrXD6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cb:12:d8:37:3b:3a:3f:4e:62:89:85:5c:36:b9:36:e8:03:
b6:fc:f5:ca:1e:dc:1e:33:67:6e:ff:54:e7:9b:a6:7d:dc:bd:
d2:22:7f:03:dd:19:2b:4a:ba:7c:65:d4:5d:11:9b:fe:6d:31:
61:36:cb:50:d2:9d:5d:76:56:46:bb:9e:45:f0:f1:e7:03:13:
dd:11:76:39:a2:99:ed:76:57:cc:e3:e9:38:ba:d9:77:f5:73:
d3:29:59:60:3a:a0:5a:57:dc:45:d0:5b:35:86:b6:e5:21:57:
1e:1b:36:d3:a0:31:73:f3:d0:97:6f:ca:0e:56:9f:fc:3c:ca:
02:1a:f3:0a:d4:83:1c:8c:bc:ab:cb:07:ac:d1:73:15:96:56:
98:a3:0a:4f:36:0d:b2:64:cb:55:ff:9a:86:bc:3b:c1:4e:18:
6e:eb:33:4c:54:bc:bf:41:dd:ba:4e:fd:72:74:4b:b1:38:74:
f7:e7:17:4a:5e:b5:31:18:2f:fa:50:74:ca:21:28:f0:a3:b6:
ad:25:ce:e8:15:df:c0:47:10:bd:13:e2:cc:5b:08:c7:e1:64:
ac:59:0b:4f:9b:05:5a:5c:27:16:c6:64:66:af:6f:4b:37:37:
bb:c2:e3:39:25:bf:58:89:b0:78:88:a0:0a:49:ea:12:b3:16:
31:f0:8e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:49:39 2025 by rpki-client