Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
File: QX7UHwrf3xmnFhTjkEwPCEmXklA.mft (raw, json)
Hash identifier: jUSPwt8Jiurd927dP4NGkWBmVWERlCNLeaqMHwWGwIg=
Subject key identifier: 63:D6:17:BB:C8:E5:48:26:49:1C:9B:C7:EF:78:E8:73:28:3F:F1:BA
Authority key identifier: 41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
Certificate issuer: /CN=417ed41f0adfdf19a71614e3904c0f0849979250
Certificate serial: 0199FBEB09D9497F591B93743DBBEF6B0366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: QX7UHwrf3xmnFhTjkEwPCEmXklA.crl (hash: tv1kbsTd5hz15DFcuUEiRA6ocj3U7mr++Jx2ApKHSlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:09:d9:49:7f:59:1b:93:74:3d:bb:ef:6b:03:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ed41f0adfdf19a71614e3904c0f0849979250
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=63d617bbc8e54826491c9bc7ef78e873283ff1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:41:fd:a5:f1:9e:aa:1d:b7:c7:c7:0f:18:
54:92:0c:a3:8c:bd:d4:ec:43:80:70:ab:b0:c7:d3:
8e:aa:72:d8:27:55:30:f0:ff:1a:03:7d:00:7e:1c:
5c:1d:fa:d9:2b:42:da:8c:4d:7e:9b:21:1e:67:74:
fd:5e:f3:f1:80:67:e4:05:f1:ae:2a:16:25:be:f7:
77:f9:bf:ea:ad:0a:c8:e7:8a:9e:ed:62:18:ba:c8:
10:3f:4b:6d:4d:58:f1:92:9e:9b:aa:9d:1d:f5:3a:
14:56:f7:68:49:60:3d:56:c8:c6:24:f5:70:a6:d7:
55:3d:d9:be:83:93:b4:21:f7:1f:4d:7d:71:24:b0:
17:ff:f1:dd:7f:b3:d1:7a:ef:f7:41:2b:56:4b:5c:
c4:4f:51:ce:3f:45:30:38:ed:39:5c:5e:f3:ea:0d:
bb:97:ae:94:2c:48:72:4f:f9:9d:94:7b:42:57:96:
7c:fb:4c:b6:3d:54:92:db:8e:8a:cd:23:cf:11:9b:
ca:5d:f2:63:9f:cc:3a:88:74:86:37:26:2e:b2:ec:
69:ae:c8:51:2c:7f:89:c7:40:6c:90:23:c5:7e:a5:
0e:d0:ac:35:ca:a6:91:fa:e5:f5:42:e9:6f:8d:2d:
1c:39:c9:f2:92:c3:41:33:a5:5e:a5:34:a9:18:71:
e4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D6:17:BB:C8:E5:48:26:49:1C:9B:C7:EF:78:E8:73:28:3F:F1:BA
X509v3 Authority Key Identifier:
keyid:41:7E:D4:1F:0A:DF:DF:19:A7:16:14:E3:90:4C:0F:08:49:97:92:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7UHwrf3xmnFhTjkEwPCEmXklA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/e5cc58-ac18-4e0d-bf91-6ea891e8cfc7/1/QX7UHwrf3xmnFhTjkEwPCEmXklA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:15:11:5b:19:0a:8a:df:6d:31:48:c7:13:a1:c8:3b:ee:b2:
5b:c1:82:4d:85:12:e0:dd:50:d5:ae:8d:33:a9:ed:4b:ef:ea:
80:c4:78:2e:3c:81:40:6a:d9:e3:d0:dc:04:7d:f4:5e:7d:f9:
f9:52:2a:78:69:62:6e:cd:da:a7:9a:8b:fc:b1:73:9b:29:42:
97:1a:cc:0a:43:14:f9:c2:0c:ec:b8:f0:3a:a4:ea:35:ff:86:
3c:b8:1f:82:51:8e:1b:55:12:48:21:52:6e:25:e4:ae:16:99:
6b:5d:e3:ca:59:0a:be:f3:aa:63:31:d0:23:30:25:52:bf:55:
ff:26:73:65:07:a7:46:00:26:f1:91:cd:d5:6d:cf:ae:10:7a:
43:ac:f6:10:90:8b:ad:fe:9e:5a:ff:41:0a:27:b6:4e:c1:63:
59:b1:6c:82:39:23:0b:2b:e4:a5:2f:ae:d4:fb:f8:89:9e:b5:
b0:fc:72:3c:61:3c:9e:7c:3e:27:95:7e:ae:fe:07:92:57:39:
28:be:26:2c:4e:6b:03:cf:a6:3f:79:5c:aa:4f:14:df:c5:5c:
a6:3c:ae:f0:35:4a:76:fb:d0:80:0f:c5:7d:e3:aa:d1:d6:0c:
f8:b9:f8:c3:4a:36:94:82:08:b6:ca:c9:ab:56:d4:a8:9b:5a:
22:62:3f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:14 2025 by rpki-client