Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
File: QqjNSXm8XdMbENe3GFDvEurDz7U.mft (raw, json)
Hash identifier: u+yEfOT/RM60CoLXz/CBVNlJhhYfPSYUOR2uBl5+VW0=
Subject key identifier: 3F:06:15:A9:19:53:2E:94:1B:02:78:21:52:4D:B4:21:D5:62:09:95
Authority key identifier: 42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
Certificate issuer: /CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Certificate serial: 0199FCC69B011BDDD5E00BBA24F0120DF15D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
Manifest number: 046D
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: QqjNSXm8XdMbENe3GFDvEurDz7U.crl (hash: 7W/epjJkKCPTquVur1oYbZHfxlJHqakBJVIGbdQhGho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:01:1b:dd:d5:e0:0b:ba:24:f0:12:0d:f1:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42a8cd4979bc5dd31b10d7b71850ef12eac3cfb5
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=3f0615a919532e941b027821524db421d5620995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9e:8d:bc:3c:74:4b:33:17:7f:a2:ca:e3:09:
9c:10:58:16:bf:b0:fa:a5:38:56:c0:0e:e7:de:a5:
6a:2d:51:64:1d:40:9d:24:fe:ae:ef:99:61:57:91:
65:0f:69:cf:5a:2a:0b:08:dd:fb:da:de:0c:ef:f1:
b5:b1:d6:de:21:1d:6c:94:a1:ab:fc:72:6a:c3:7f:
53:da:42:f0:28:43:44:bd:f2:44:f9:83:91:5a:85:
51:a6:41:1b:82:57:7f:7d:98:63:63:9b:68:04:61:
e5:06:8f:ec:d7:a2:67:f9:45:f4:12:78:d7:38:f6:
a8:e3:6f:e6:ac:e9:40:c8:e4:9b:7d:da:a3:99:aa:
cd:08:f0:37:31:32:03:38:0b:a2:81:5b:e5:08:e2:
f9:07:e3:71:10:ff:1f:da:7f:21:d2:f7:d7:08:8b:
30:d8:41:87:2f:af:66:cb:9b:75:78:d2:70:fb:c8:
6f:d3:ac:76:41:3d:cc:3a:88:1c:60:61:ad:97:4e:
e1:85:89:17:8e:ce:4c:f6:cd:8b:1e:2f:5c:2a:ec:
d1:06:66:eb:1b:de:b7:9e:b8:a5:84:15:c2:f5:d5:
f0:d8:9e:7a:f7:4f:a5:b8:73:ae:d5:00:ac:d5:6f:
26:40:b3:32:0f:ee:37:a8:12:bc:d5:21:fb:e7:69:
2f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:06:15:A9:19:53:2E:94:1B:02:78:21:52:4D:B4:21:D5:62:09:95
X509v3 Authority Key Identifier:
keyid:42:A8:CD:49:79:BC:5D:D3:1B:10:D7:B7:18:50:EF:12:EA:C3:CF:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QqjNSXm8XdMbENe3GFDvEurDz7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51e7f6-f4fb-4ea0-8ddf-be5a0ffb8ca5/1/QqjNSXm8XdMbENe3GFDvEurDz7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:10:d0:01:eb:78:93:34:e7:61:3f:ee:74:33:b0:c7:da:a3:
01:ef:95:ca:03:80:37:45:b1:7d:37:c0:98:70:b2:ec:ef:ec:
36:34:da:0e:96:88:cc:e6:28:a5:be:88:e9:5a:eb:95:5c:c9:
b4:94:28:66:3b:c9:66:e7:ee:78:42:6d:8f:6c:8f:a6:b1:de:
e0:be:d6:cd:17:7c:aa:a9:96:a0:d8:b2:ff:ad:ae:c3:4a:8a:
b9:82:74:a0:4d:b8:90:a1:aa:6d:9f:22:00:81:69:ee:d9:d0:
37:5b:1f:3e:0b:36:60:95:c0:33:59:1a:97:2c:9e:08:bf:0e:
81:57:f5:89:b3:b1:39:ef:3d:d2:31:8e:cb:83:de:be:03:d9:
5f:d4:27:66:27:14:63:6e:85:31:99:26:98:ba:6a:3d:b7:e9:
dc:5b:eb:89:63:f4:68:25:05:8e:0d:37:ad:19:32:f7:89:69:
9e:21:61:b5:2b:53:10:95:1d:92:4c:b9:16:a9:67:e2:e6:38:
fc:bb:22:6d:60:82:b3:34:95:87:02:04:c2:b8:a7:11:2b:32:
6f:91:28:f2:81:78:0b:28:07:fc:74:ab:ba:d5:66:f1:93:40:
fb:8d:87:d1:a8:18:ae:73:f5:cb:4b:64:f2:56:78:b7:f7:5e:
4a:37:27:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:31 2025 by rpki-client