Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
File: QL_e36qTma09VTH6RxoSs7_jfhI.mft (raw, json)
Hash identifier: a8FtDxdeSKoB42FJajI9g11W7P5/dwrKg0NZ7Cn62RM=
Subject key identifier: 27:0E:5C:3A:FD:95:83:3D:6A:B1:92:D7:1F:F0:59:6C:25:83:C9:3A
Authority key identifier: 40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
Certificate issuer: /CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Certificate serial: 0199FBEB4472D3BF217F781F19EF149EE659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
Manifest number: 0A03
Signing time: Sun 19 Oct 2025 10:02:03 +0000
Manifest this update: Sun 19 Oct 2025 10:02:03 +0000
Manifest next update: Mon 20 Oct 2025 10:02:03 +0000
Files and hashes: 1: QL_e36qTma09VTH6RxoSs7_jfhI.crl (hash: XrVYUfyTpdGWZQfgsR2KqdXcEfp3Tb1/yCTI3Dq1fHE=)
2: jSlm79fFu0VgJBsIaC81oVf4nGI.roa (hash: 8IYkRLo3mCrHlEs7aBNerIrNbkB27E7Mc7prSDZuZVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:44:72:d3:bf:21:7f:78:1f:19:ef:14:9e:e6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40bfdedfaa9399ad3d5531fa471a12b3bfe37e12
Validity
Not Before: Oct 19 10:02:03 2025 GMT
Not After : Oct 20 10:02:03 2025 GMT
Subject: CN=270e5c3afd95833d6ab192d71ff0596c2583c93a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:94:60:cc:12:92:19:41:2e:d6:ff:83:f2:
9e:c7:5d:23:54:97:cf:bf:e4:ea:e7:14:a7:2f:82:
dd:b5:bd:26:d4:8d:8b:65:16:f1:b4:36:58:f5:79:
58:91:37:62:e0:80:af:3e:bc:71:49:6b:1b:3d:12:
84:e5:fe:ee:34:b2:ea:bd:31:b2:dd:24:21:dc:e3:
69:87:ab:b4:1d:91:ad:c9:b9:05:f6:0f:bc:54:8f:
51:38:66:87:b1:4b:73:d3:80:f3:5f:34:22:47:c0:
86:1b:a0:4d:68:c7:c8:bd:e8:65:fb:67:a4:17:1b:
ba:fa:3c:01:0d:97:58:6b:d5:0c:d8:82:7b:4d:3f:
e1:22:c5:30:24:f3:1b:15:fc:1a:5f:a2:3a:57:33:
8c:e3:54:bf:69:a6:8a:50:b8:a2:ca:69:31:51:36:
79:22:b2:c6:83:3d:13:14:4e:6e:43:82:a1:b1:d8:
7f:d3:18:07:64:cf:87:46:14:5e:c3:3b:19:eb:4c:
2f:8a:55:d0:6e:06:03:28:57:a7:a5:25:1a:ba:74:
bb:08:da:a3:51:57:aa:79:5b:a6:24:6a:8a:67:aa:
60:b1:10:b0:19:05:33:8b:57:10:7f:97:e1:ee:93:
e3:f2:95:d6:8c:ea:fa:79:5b:ab:3a:29:a9:52:d8:
98:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:0E:5C:3A:FD:95:83:3D:6A:B1:92:D7:1F:F0:59:6C:25:83:C9:3A
X509v3 Authority Key Identifier:
keyid:40:BF:DE:DF:AA:93:99:AD:3D:55:31:FA:47:1A:12:B3:BF:E3:7E:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QL_e36qTma09VTH6RxoSs7_jfhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/db55ec-3577-421f-8916-8e9851b7f811/1/QL_e36qTma09VTH6RxoSs7_jfhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:98:51:12:37:21:3e:e7:58:ea:3d:5c:06:18:bb:74:5a:5d:
6e:32:c4:08:ab:d9:4f:78:16:91:64:37:8a:76:cc:48:24:2f:
bf:39:8b:0d:0c:11:7a:56:33:74:5e:90:54:ff:97:99:23:a0:
c8:f2:ba:9e:d6:2c:14:c5:56:7c:25:92:fa:99:28:7c:05:6f:
42:1f:3b:79:f4:71:c6:9d:a4:b4:b1:6e:13:89:f9:3f:6c:99:
7b:59:f9:15:d5:35:e0:13:5c:a7:63:c2:24:24:c0:d7:e6:99:
98:b5:5c:5b:e6:f2:cf:2b:34:4e:58:f9:32:e0:0d:9d:55:6a:
1e:98:bf:6d:4e:ac:2b:8b:f3:c9:8a:da:f0:4b:eb:8a:9f:0e:
38:b3:72:97:8c:f9:04:67:7c:8d:f7:b6:42:ac:c9:45:81:5d:
60:18:16:76:e5:17:60:20:cb:d9:9b:a3:db:b0:d0:42:3d:fd:
06:87:5b:ee:e3:38:88:21:06:af:bf:3d:02:60:8b:1b:f6:7f:
de:2a:64:21:b0:61:ff:17:86:a6:19:35:94:a1:a7:03:c1:f5:
67:8e:dd:a0:ea:43:26:ea:01:24:8d:c3:cb:24:82:24:f2:1c:
a2:b2:00:69:d4:16:dc:b8:72:1e:92:a8:ea:c0:7b:c0:93:d4:
77:2f:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:09:57 2025 by rpki-client