Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
File: QC3C-6qj1HWWdqebiv20wiX8BV8.mft (raw, json)
Hash identifier: B71hrSxeJ4Igi+rr8YHD7yZmmgSDsXPsPvIVsPXpewU=
Subject key identifier: 96:D4:D3:9D:75:A8:6F:89:23:90:04:94:1B:DE:E7:BA:51:1C:29:E8
Authority key identifier: 40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
Certificate issuer: /CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Certificate serial: 0199FD340EE06DAC560E57AB4C2A142259B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
Manifest number: 036B
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: QC3C-6qj1HWWdqebiv20wiX8BV8.crl (hash: eXVE+4VWAaYkJYWN4keb0/7FkhlrEi5NCt5R41mKhfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0e:e0:6d:ac:56:0e:57:ab:4c:2a:14:22:59:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=402dc2fbaaa3d4759676a79b8afdb4c225fc055f
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=96d4d39d75a86f89239004941bdee7ba511c29e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:12:bf:18:e6:c0:e7:2c:d2:cf:b8:43:7b:65:
6c:3b:80:50:01:0b:cb:29:4b:36:4c:95:95:be:8a:
ad:cd:5c:68:e1:74:9e:df:10:79:3c:4e:31:73:d2:
c9:67:b8:8a:55:26:31:ef:11:87:46:ae:3f:71:75:
00:ec:04:d0:dd:12:91:f8:19:53:b8:93:0f:1a:a3:
76:c3:28:f2:25:23:fd:9d:f1:92:07:7e:8f:4b:7d:
d8:01:50:ac:05:e1:5b:72:8c:2b:29:5e:58:1c:c5:
81:16:77:f8:12:f9:e2:bd:fe:b1:6f:10:e8:ff:1e:
08:cc:76:98:6e:e0:01:24:88:ad:65:ae:66:c5:54:
19:8e:ae:76:f9:67:fc:50:48:83:dd:54:56:d6:fe:
4e:0e:22:58:d5:fd:9f:aa:cd:99:59:51:33:4e:24:
32:b2:a2:f4:53:46:6f:2c:20:03:f7:33:32:5e:a8:
5a:2a:e0:be:5d:61:48:d1:d4:38:89:27:67:5d:24:
80:6c:c8:ae:d3:9f:fb:9c:82:0a:09:f8:4c:e7:de:
84:a4:7f:82:47:b5:8c:28:50:13:8a:67:c6:61:fa:
f3:45:39:ac:aa:e9:f0:c9:54:55:d2:a8:0a:60:ea:
47:54:70:fc:e3:0f:96:1c:29:87:cb:68:82:25:fb:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:D4:D3:9D:75:A8:6F:89:23:90:04:94:1B:DE:E7:BA:51:1C:29:E8
X509v3 Authority Key Identifier:
keyid:40:2D:C2:FB:AA:A3:D4:75:96:76:A7:9B:8A:FD:B4:C2:25:FC:05:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QC3C-6qj1HWWdqebiv20wiX8BV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6a2e8f-5803-4f1d-a45f-3e021337cea6/1/QC3C-6qj1HWWdqebiv20wiX8BV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8c:b0:f9:61:c0:7c:76:b3:42:5a:10:fe:5a:00:a3:99:7b:
0b:ee:e3:37:5d:ec:53:94:96:7b:2b:0d:4d:40:e5:0d:45:d8:
9a:13:26:fd:59:56:b6:ce:9c:7f:a1:53:06:24:43:80:b6:cf:
1b:4b:ce:2e:6a:54:79:6e:6c:49:84:b9:92:30:9b:1d:01:54:
e3:e5:52:9d:ac:8e:b3:dc:25:64:50:03:0f:ae:5d:67:b2:4b:
26:e8:8b:07:4e:3a:7d:36:4f:43:a1:b3:56:3c:7e:96:2a:58:
32:c0:02:89:46:e0:63:1b:ad:e6:7d:c4:09:74:88:94:1d:e6:
f6:88:2c:19:27:ff:fb:7a:c4:23:fb:2f:64:42:d4:5a:d9:c0:
14:c4:f2:5a:51:0d:96:07:50:e6:8a:67:ac:e9:2e:ff:13:7b:
20:6a:bc:30:fd:da:1d:71:7a:d1:6e:2e:3e:0c:a8:30:10:36:
2b:70:a4:72:7c:54:b9:52:ff:07:85:3a:7e:7d:5d:1f:b0:79:
99:98:b3:f1:01:82:f7:16:9e:6f:1e:c7:da:96:0f:b4:e0:0c:
d6:c1:9e:da:32:2b:0f:20:35:c6:94:43:20:96:3e:dd:88:af:
90:ce:9d:73:bf:e8:12:9d:2d:43:1a:76:3b:f1:23:bf:37:e3:
2a:b0:87:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:47 2025 by rpki-client