Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
File: QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft (raw, json)
Hash identifier: xGRRlchUcFA3VR4Rqp0sLhZbRgnkHzlXxDHHFzqukNQ=
Subject key identifier: 46:6D:03:29:3B:62:00:53:E8:F5:E1:A3:17:87:B0:C3:B4:BA:9C:1F
Authority key identifier: 41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
Certificate issuer: /CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Certificate serial: 0199FA6A28CD1C0E9987BA96F1A55ABB24B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 03:01:25 +0000
Manifest this update: Sun 19 Oct 2025 03:01:25 +0000
Manifest next update: Mon 20 Oct 2025 03:01:25 +0000
Files and hashes: 1: QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl (hash: IO5nbDicLVw1TeB+lBgIU+8CFZsqXLEMR9jWALkUH9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:28:cd:1c:0e:99:87:ba:96:f1:a5:5a:bb:24:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41c4a5644f0429521d1fdc5bbb233a041b200887
Validity
Not Before: Oct 19 03:01:25 2025 GMT
Not After : Oct 20 03:01:25 2025 GMT
Subject: CN=466d03293b620053e8f5e1a31787b0c3b4ba9c1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f3:4a:32:4c:37:bf:aa:86:ad:1e:72:6c:00:
a8:66:64:67:df:1e:87:a2:75:ff:14:a2:04:51:14:
8b:b0:a1:6d:c8:34:c7:99:4f:5f:ef:2d:72:8e:ba:
20:f2:22:01:37:87:c3:17:89:f1:22:cc:ba:e5:2c:
66:d0:eb:6c:50:5f:95:72:eb:e2:86:27:5c:71:9f:
ca:9a:48:26:0d:66:ce:be:d5:0c:28:c9:df:b1:3c:
d8:cb:16:78:26:58:aa:16:04:29:f7:8b:cf:ee:ac:
ce:21:e7:52:93:7c:75:bc:b4:0d:30:b2:a5:31:bb:
c9:89:08:fb:3a:76:c6:b4:89:49:10:fa:0f:90:65:
1c:1d:91:ac:73:85:b7:7c:06:1d:94:f4:49:0f:9d:
97:c0:1d:65:a5:2c:67:fe:f5:9b:c7:f1:0f:66:b7:
a8:ac:a4:20:3b:ba:01:0f:41:28:ae:b7:28:a9:94:
2a:c2:72:53:db:c1:95:d2:88:13:5c:a0:fd:5b:28:
62:c1:23:32:0f:3e:dd:b9:6b:0d:03:a3:d3:95:16:
ff:6d:77:e2:b3:c8:5f:3f:73:e0:cb:88:7a:8f:f9:
8d:cc:a2:f2:80:f3:68:fb:c8:4c:40:3d:f6:83:8f:
b3:24:7c:ae:5e:63:c7:f9:cc:eb:82:18:81:b5:5d:
d7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6D:03:29:3B:62:00:53:E8:F5:E1:A3:17:87:B0:C3:B4:BA:9C:1F
X509v3 Authority Key Identifier:
keyid:41:C4:A5:64:4F:04:29:52:1D:1F:DC:5B:BB:23:3A:04:1B:20:08:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QcSlZE8EKVIdH9xbuyM6BBsgCIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5cc4b7-867d-452a-8902-e87932c555f3/1/QcSlZE8EKVIdH9xbuyM6BBsgCIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:fb:3e:0b:ff:b3:00:5f:f6:40:18:04:3b:84:bb:aa:bb:60:
32:3d:e8:22:c5:8c:2e:b3:04:b1:c8:46:3e:88:3b:ff:e5:19:
bb:fb:66:dc:7f:99:df:4e:2c:7e:30:1f:c8:d7:91:81:07:6a:
ae:37:0f:61:57:ca:f1:58:f6:3b:37:e1:66:4b:10:0a:c2:82:
24:c9:00:b4:07:dc:57:1b:25:f8:3d:41:13:2e:1a:5f:f8:87:
0e:85:78:d4:81:dc:f2:96:05:48:77:c4:8b:72:fa:36:5d:ba:
8a:da:1f:2a:41:3b:6d:2c:a5:f1:ed:09:7d:ea:27:98:30:63:
1a:c2:33:d1:91:f4:b8:7b:a9:ee:45:fd:e9:25:f8:9f:6f:1b:
1a:65:dd:be:d3:cb:8b:a6:e2:68:13:2d:c1:4f:56:80:ec:b9:
db:0c:71:2a:d5:b6:22:0b:02:ec:46:58:b6:62:62:a0:dc:1b:
59:ba:0b:1a:8f:fa:ff:d3:49:85:d6:ea:f5:8f:97:13:01:d4:
db:53:2a:50:2a:82:55:0b:7e:1b:2a:c9:d6:3c:6e:95:79:e0:
fd:3b:15:4a:54:59:96:6f:8d:db:91:17:f5:4a:dd:40:4f:e3:
b6:f6:ce:66:8a:8a:8f:81:f1:b4:a0:04:e7:5c:2f:1b:71:e6:
2d:35:86:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:54 2025 by rpki-client