Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
File: QJxwBWp431-Pxw_wA9EvYNFR15E.mft (raw, json)
Hash identifier: kPNj26SrBzAi+283guf0O192dlifIH+SwazRDgwz7XA=
Subject key identifier: 06:EB:30:FD:43:50:E1:55:2A:6D:CE:A4:78:C7:A5:70:64:65:67:CF
Authority key identifier: 40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
Certificate issuer: /CN=409c70056a78df5f8fc70ff003d12f60d151d791
Certificate serial: 0199FBEA8E50F722CAD3A76B2ECB950D8083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
Manifest number: 0661
Signing time: Sun 19 Oct 2025 10:01:17 +0000
Manifest this update: Sun 19 Oct 2025 10:01:17 +0000
Manifest next update: Mon 20 Oct 2025 10:01:17 +0000
Files and hashes: 1: QJxwBWp431-Pxw_wA9EvYNFR15E.crl (hash: Jwdm8Z62e9ljRZjUpJwFcuR6F6DgLzrof3LUHRYw4e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8e:50:f7:22:ca:d3:a7:6b:2e:cb:95:0d:80:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=409c70056a78df5f8fc70ff003d12f60d151d791
Validity
Not Before: Oct 19 10:01:17 2025 GMT
Not After : Oct 20 10:01:17 2025 GMT
Subject: CN=06eb30fd4350e1552a6dcea478c7a570646567cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:32:41:e3:3e:07:7c:f9:48:68:8f:95:c9:43:
2e:fe:c8:12:08:b6:90:4b:c8:94:43:0d:6a:73:6c:
e1:80:9b:ac:31:0c:60:6c:98:08:70:29:9b:43:bf:
30:35:8a:53:9e:d0:00:a9:5f:f2:1f:34:f5:51:57:
a5:00:7f:35:d4:bf:d0:5e:c7:ef:34:3a:c3:f3:87:
32:6c:74:46:33:42:c0:d6:19:a0:08:7c:0f:b8:8f:
33:9a:d5:8f:c8:1a:41:88:34:1a:77:ab:74:55:ed:
48:51:1f:97:1d:44:c7:61:d1:a0:ae:df:34:b5:56:
e2:3a:94:b8:e4:2e:cd:31:b5:7d:a0:5c:ed:17:aa:
49:16:c7:3d:85:27:27:70:57:b3:78:3d:53:27:a5:
77:c9:eb:92:2a:8e:2c:49:cc:22:af:4f:c4:64:57:
a8:95:49:1a:13:87:06:86:0e:9f:b2:4f:3f:c8:95:
b9:a7:5c:fa:ea:a8:51:b4:13:c3:18:4a:1a:fa:62:
8e:52:ad:27:28:81:a9:ed:66:00:b8:86:24:cb:89:
50:43:79:ad:47:1a:cb:80:e2:8e:1d:f2:88:4f:c0:
fa:e1:4e:9a:48:b0:47:87:05:22:29:07:9c:c9:0c:
b3:a3:1b:00:aa:79:56:69:ac:3f:dc:e6:06:e3:36:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:EB:30:FD:43:50:E1:55:2A:6D:CE:A4:78:C7:A5:70:64:65:67:CF
X509v3 Authority Key Identifier:
keyid:40:9C:70:05:6A:78:DF:5F:8F:C7:0F:F0:03:D1:2F:60:D1:51:D7:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QJxwBWp431-Pxw_wA9EvYNFR15E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/9cf684-87ab-4f2b-ab73-077e7dbed698/1/QJxwBWp431-Pxw_wA9EvYNFR15E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:52:18:4a:65:7b:8f:4a:d8:51:e7:7d:bf:e5:39:8b:36:f4:
d5:0f:be:05:2e:15:bb:dc:23:d1:22:79:26:e3:ab:63:f4:65:
a1:06:79:4e:25:57:a8:10:07:2c:e1:8d:bb:fc:f6:8c:b6:5b:
40:07:4e:94:58:54:a8:9f:21:12:ca:40:a8:8d:ac:24:ca:a2:
60:a5:30:74:18:51:ef:57:a5:55:dd:ea:1c:28:42:64:75:e0:
c9:ad:b2:89:f0:21:49:c1:68:2f:09:b0:ac:ab:d1:85:a1:30:
7a:0b:20:b0:86:e7:eb:83:e0:96:18:70:42:0c:d6:00:6e:e8:
55:55:19:c5:f8:1c:8f:cf:25:97:91:bb:da:b0:84:e7:2b:d0:
07:67:79:2c:68:6e:da:5b:66:17:42:ba:61:c6:c6:26:48:77:
22:72:55:12:13:f6:66:c1:9d:30:5e:30:a1:2f:a1:f7:a8:e1:
79:86:cf:96:c5:95:05:ce:53:64:68:c9:87:d8:d5:a5:31:48:
4d:1c:b1:f4:7d:42:52:2b:0f:d4:99:05:f5:67:e1:0b:a2:c0:
fc:c7:db:0c:ce:20:4a:5c:e2:d4:ed:73:e4:26:f8:63:74:77:
37:01:7e:88:4f:2b:c8:a8:0a:08:3c:cd:fa:be:c2:3b:b1:ed:
c3:a4:76:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76o5Q9yLK06drLsuVDYCDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOWM3MDA1NmE3OGRmNWY4ZmM3MGZmMDAzZDEyZjYwZDE1
MWQ3OTEwHhcNMjUxMDE5MTAwMTE3WhcNMjUxMDIwMTAwMTE3WjAzMTEwLwYDVQQD
EygwNmViMzBmZDQzNTBlMTU1MmE2ZGNlYTQ3OGM3YTU3MDY0NjU2N2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DJB4z4HfPlIaI+VyUMu/sgSCLaQ
S8iUQw1qc2zhgJusMQxgbJgIcCmbQ78wNYpTntAAqV/yHzT1UVelAH811L/QXsfv
NDrD84cybHRGM0LA1hmgCHwPuI8zmtWPyBpBiDQad6t0Ve1IUR+XHUTHYdGgrt80
tVbiOpS45C7NMbV9oFztF6pJFsc9hScncFezeD1TJ6V3yeuSKo4sScwir0/EZFeo
lUkaE4cGhg6fsk8/yJW5p1z66qhRtBPDGEoa+mKOUq0nKIGp7WYAuIYky4lQQ3mt
RxrLgOKOHfKIT8D64U6aSLBHhwUiKQecyQyzoxsAqnlWaaw/3OYG4zbFhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAbrMP1DUOFVKm3OpHjHpXBkZWfPMB8GA1UdIwQY
MBaAFECccAVqeN9fj8cP8APRL2DRUdeRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMt
MDc3ZTdkYmVkNjk4LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi85Y2Y2ODQtODdhYi00ZjJiLWFiNzMtMDc3ZTdkYmVkNjk4
LzEvUUp4d0JXcDQzMS1QeHdfd0E5RXZZTkZSMTVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1IYSmV7
j0rYUed9v+U5izb01Q++BS4Vu9wj0SJ5JuOrY/RloQZ5TiVXqBAHLOGNu/z2jLZb
QAdOlFhUqJ8hEspAqI2sJMqiYKUwdBhR71elVd3qHChCZHXgya2yifAhScFoLwmw
rKvRhaEwegsgsIbn64PglhhwQgzWAG7oVVUZxfgcj88ll5G72rCE5yvQB2d5LGhu
2ltmF0K6YcbGJkh3InJVEhP2ZsGdMF4woS+h96jheYbPlsWVBc5TZGjJh9jVpTFI
TRyx9H1CUisP1JkF9WfhC6LA/MfbDM4gSlzi1O1z5Cb4Y3R3NwF+iE8ryKgKCDzN
+r7CO7Htw6R27g==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:39 2025 by rpki-client