Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: 57c/RWlLlLVgG7O03R7qHnSQhiNVVXeOfEK12QGS0dY=
Subject key identifier: 17:42:90:DD:2B:E0:0C:42:7B:40:CC:CC:5E:BE:3E:E3:0B:9A:52:2B
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 0199FB7CBBD999D646634E32F1D1FAE20DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 08:01:19 +0000
Manifest this update: Sun 19 Oct 2025 08:01:19 +0000
Manifest next update: Mon 20 Oct 2025 08:01:19 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: fQZ5Rq+5pAolAbxeETrWoR4qPTl7nWORxtjITulJYTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bb:d9:99:d6:46:63:4e:32:f1:d1:fa:e2:0d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Oct 19 08:01:19 2025 GMT
Not After : Oct 20 08:01:19 2025 GMT
Subject: CN=174290dd2be00c427b40cccc5ebe3ee30b9a522b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:23:06:ea:96:f2:9b:59:b7:d9:7c:dd:04:1c:
db:de:d0:fa:2d:b1:13:da:00:ef:8c:65:5a:f6:48:
60:f5:42:8d:fe:96:d1:24:65:14:ab:3c:5f:39:26:
c0:42:66:4b:60:70:7f:66:6f:ee:12:45:82:47:a3:
32:38:74:92:f1:77:d1:a1:6e:f3:e2:7f:19:a0:8e:
77:20:7f:c1:4f:8a:2a:96:2f:11:a4:f2:a6:bb:b3:
51:80:2c:07:7c:7d:c0:b5:44:1a:a5:f2:6c:a4:f5:
42:06:9c:59:52:01:b5:db:fd:1e:9e:b8:7d:c2:d6:
14:44:8b:ca:df:26:ca:5f:ad:f7:23:e1:d0:d1:24:
13:7d:77:b4:4a:46:26:4c:3f:e2:32:e1:4e:f8:2d:
a4:d7:d0:62:81:72:8d:30:67:c0:a2:16:41:94:d3:
0b:65:6f:7c:35:ca:de:a0:d2:8e:b8:d7:8e:d7:e1:
a6:1b:8c:a4:89:6e:9e:cb:2e:f4:2c:4a:8e:f1:e7:
f7:67:9a:33:32:11:6f:12:be:c4:7f:e7:e7:ce:a2:
3b:e8:26:1f:8c:c4:d3:1a:6b:18:0c:ac:83:88:2a:
4c:de:67:eb:e7:b0:b3:79:5b:4a:c4:bb:6c:10:14:
70:26:92:99:77:ca:0a:00:b3:96:73:67:1b:15:b8:
79:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:42:90:DD:2B:E0:0C:42:7B:40:CC:CC:5E:BE:3E:E3:0B:9A:52:2B
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:af:af:0b:1d:07:0d:a8:a2:c7:bb:f0:b1:a5:3e:5e:c0:b8:
8d:81:90:d2:fc:55:90:93:8e:ba:40:6d:04:fb:58:e0:d9:90:
4f:6c:48:17:c5:28:a1:9f:a7:2d:c2:f6:f2:6a:d6:13:9b:d5:
a6:72:59:e8:32:17:c1:2b:52:88:87:7a:45:76:cd:34:5f:e6:
ce:a3:3f:69:31:b3:ec:99:ca:64:32:2d:de:34:6d:32:01:b7:
1d:24:58:d1:66:1d:60:07:7f:5d:11:80:3c:5b:47:a9:fc:82:
80:8c:8d:80:82:eb:b1:8d:0d:1b:ee:8f:e4:a5:c1:bc:7d:9e:
10:e1:92:16:0d:b7:f4:ab:3c:84:06:21:dd:a9:ba:c9:ab:22:
10:c0:a0:4d:c9:a7:93:c9:61:a9:91:88:73:94:29:f2:7c:8d:
cc:04:e6:37:12:82:1a:1b:39:4e:69:1d:fc:a6:dd:ee:b6:79:
6b:33:b2:af:02:9a:b6:0c:5a:77:d4:23:76:1b:7e:67:32:de:
c0:64:a8:b1:7e:61:9c:8e:c2:fe:6e:70:ad:a0:d6:25:88:28:
b8:54:25:67:1c:ef:35:5d:c5:84:d2:db:1f:9b:5a:88:45:5d:
d5:d2:aa:3c:4d:6a:e1:51:6a:1b:d0:e7:1a:ed:80:e5:10:90:
44:ce:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:15 2025 by rpki-client