Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
File: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft (raw, json)
Hash identifier: IaTUFJ8tFN1htMkL656p2fupqXI7iZcbXtW/w3D4F2I=
Subject key identifier: 15:41:5C:66:B5:53:1E:20:0F:4B:9F:92:D2:1A:C0:98:F1:5F:60:52
Authority key identifier: 44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
Certificate issuer: /CN=44b437b31b50670384fa5d20d8924d611b91633e
Certificate serial: 0199FD342E64A729FDE5F31B45F2120F38C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
Manifest number: 05DE
Signing time: Sun 19 Oct 2025 16:01:19 +0000
Manifest this update: Sun 19 Oct 2025 16:01:19 +0000
Manifest next update: Mon 20 Oct 2025 16:01:19 +0000
Files and hashes: 1: RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl (hash: uZEKOdfdBdHr352JCzOtJfikSmwdLqYRPA9k7j9j9K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:2e:64:a7:29:fd:e5:f3:1b:45:f2:12:0f:38:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b437b31b50670384fa5d20d8924d611b91633e
Validity
Not Before: Oct 19 16:01:19 2025 GMT
Not After : Oct 20 16:01:19 2025 GMT
Subject: CN=15415c66b5531e200f4b9f92d21ac098f15f6052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2a:63:88:d2:6a:9c:90:94:eb:f0:9a:c3:71:
ca:f8:c7:72:44:96:9f:94:c5:69:1e:e8:2f:8e:e0:
ef:87:b6:59:09:02:b8:02:f0:10:37:d5:3c:6d:d7:
8b:01:3e:ac:9d:8c:75:d3:f3:3e:0a:d5:fb:df:a2:
e6:0e:76:0a:d4:f6:f3:5c:09:ea:b1:86:80:33:f2:
d8:4d:51:6b:41:b9:5f:af:6e:26:c9:74:9b:49:ef:
a1:81:25:2e:11:d8:01:3b:ff:cd:a8:0e:d5:3f:3e:
d4:e6:a5:fc:79:24:7a:a5:04:8a:24:c2:9e:8c:8c:
3a:c5:bd:92:09:45:ab:23:fb:aa:46:fa:9d:da:f2:
21:84:30:e9:40:6b:83:cb:d3:20:5b:02:d1:a0:74:
2b:d7:e4:dd:10:b2:b1:27:1b:28:fd:72:ba:eb:1b:
4c:38:90:bc:93:84:08:26:7d:01:17:e7:c7:3c:a6:
10:7e:5c:e5:be:56:f4:25:25:f9:08:d2:45:ae:9a:
7a:99:e3:5a:38:27:7c:ef:69:6b:a9:5c:12:bc:7a:
a0:9d:15:3b:69:7d:4c:c8:10:c6:cc:d3:d6:cd:c5:
6d:58:c2:60:9a:da:89:c4:ec:f6:64:9f:ba:b6:3e:
f5:b1:6d:99:e7:e0:5a:2f:e9:a3:f9:c7:5f:30:67:
7f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:41:5C:66:B5:53:1E:20:0F:4B:9F:92:D2:1A:C0:98:F1:5F:60:52
X509v3 Authority Key Identifier:
keyid:44:B4:37:B3:1B:50:67:03:84:FA:5D:20:D8:92:4D:61:1B:91:63:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e2ec34-b7f3-4055-8388-de3b75473fdd/1/RLQ3sxtQZwOE-l0g2JJNYRuRYz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:c7:34:15:5d:1e:50:52:c5:72:29:0f:75:ac:f4:9f:d1:e1:
5c:6a:5b:4d:ca:17:33:ae:f5:2a:c1:2c:d7:66:a8:af:c8:f1:
c5:9c:63:54:9f:ab:3b:aa:af:07:77:67:34:c2:84:00:f8:f5:
42:f3:b5:78:80:61:a6:7d:1d:9b:de:25:92:21:39:25:30:fd:
5b:82:4e:e2:a3:8a:8d:7f:d8:7d:4b:a5:34:92:d6:c9:fd:3c:
0f:b9:e7:9b:ab:61:95:47:34:ff:8a:85:72:2d:04:15:17:75:
61:58:e1:20:3c:75:8a:b0:9f:11:28:9b:ac:c4:6c:c2:9c:c6:
c2:d8:d7:d8:eb:2f:ee:d7:72:55:d8:5a:d5:7c:c7:64:b2:be:
a9:34:70:84:08:65:59:3f:bb:e9:37:5e:26:bf:50:28:03:e0:
6c:b5:6b:ec:83:1f:cd:17:85:4f:a8:5e:bb:02:97:9d:19:79:
d0:36:0b:66:f3:ce:7e:1e:c1:d6:ee:6b:a7:cc:08:40:71:13:
39:e8:b8:cb:76:ce:c5:b3:11:21:84:82:b3:b1:2d:d0:cb:09:
22:e1:8c:fd:8d:78:a5:6b:a9:a8:83:62:5f:29:37:98:b9:31:
94:c9:ed:10:8f:da:f1:9c:1e:c0:30:c0:0b:37:ba:a2:a7:4b:
34:41:de:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:29 2025 by rpki-client