Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: S7JdnJ1C/44YAeZCdVPBpUP8UDXiCzBZ35QOsHvNQo4=
Subject key identifier: EB:70:AA:88:11:FB:95:02:3B:A5:E3:AC:20:F6:01:27:04:3E:97:9E
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 0199FDD9D383DBE96E8DD03CEEFB7BD3BB9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:02:15 +0000
Manifest this update: Sun 19 Oct 2025 19:02:15 +0000
Manifest next update: Mon 20 Oct 2025 19:02:15 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: OJROvyXDerVx+ibGGLAQyov9iRdCUMYecDQ2bbZjsS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d3:83:db:e9:6e:8d:d0:3c:ee:fb:7b:d3:bb:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Oct 19 19:02:15 2025 GMT
Not After : Oct 20 19:02:15 2025 GMT
Subject: CN=eb70aa8811fb95023ba5e3ac20f60127043e979e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:23:21:b1:e0:3d:f5:25:3d:ca:5e:f5:5b:
7a:dd:4d:ed:12:7a:41:79:9f:43:a3:a8:bf:63:e2:
75:95:ae:25:df:6e:94:c7:b1:53:41:f1:38:08:11:
12:9a:d4:78:20:a9:38:36:0e:63:05:3f:14:ad:e5:
a3:64:43:e2:a0:66:1f:e2:b8:6b:9f:29:45:56:be:
99:e1:9a:71:b4:5c:7d:4e:c6:61:67:38:c6:5d:e2:
a1:44:95:89:01:a2:03:8c:bd:2c:3c:4f:f0:72:b0:
4e:64:ce:77:01:5b:7a:87:a2:90:e5:07:7c:fe:6b:
78:c2:0c:24:29:32:0b:eb:05:c7:01:14:3a:d0:de:
4c:ce:ad:11:9a:30:8d:83:d9:83:4c:43:1c:49:87:
57:5e:23:ef:14:32:63:fc:92:ea:ad:32:bc:3b:2e:
00:a6:bf:93:91:09:ee:42:bc:c1:eb:29:d8:ff:72:
ac:e0:8d:fd:15:b4:c1:2d:dc:e3:4b:f4:a4:d9:c7:
55:e3:7f:29:df:3d:5e:31:46:c1:d5:f7:45:32:e6:
ae:e5:d8:4e:dd:62:0e:d8:83:0f:9b:0d:82:f4:e8:
7f:0b:dc:0a:c4:13:31:a8:b8:12:c0:2f:fa:0d:85:
59:99:f9:33:f1:51:54:c6:e9:74:03:3d:2e:39:61:
9c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:70:AA:88:11:FB:95:02:3B:A5:E3:AC:20:F6:01:27:04:3E:97:9E
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:56:bf:df:65:ab:a0:17:ea:8c:29:5a:2b:ec:98:93:f1:ce:
e3:86:15:b3:c1:41:55:79:c3:6b:56:6c:0b:d1:46:0e:bd:4b:
68:4e:0c:0f:43:c4:50:8a:b7:cc:7a:3d:da:72:46:24:cf:cc:
39:fa:27:15:3d:eb:ca:b3:21:8b:e8:64:39:8b:8a:ee:9f:17:
0e:32:36:95:32:70:9d:6d:df:77:6d:48:8d:11:29:12:e5:b6:
7c:da:2d:52:7d:38:ef:6c:ad:00:49:68:d2:ff:55:35:8e:79:
70:11:20:d4:2d:00:67:35:e0:c4:f7:a9:9e:4b:2b:d9:f0:39:
3a:3d:fd:a6:b1:50:1f:c7:77:bc:99:c9:cb:22:30:0f:a9:b3:
8b:b9:82:46:d3:94:4f:fb:e7:85:2e:dd:f7:36:99:33:08:c5:
67:c5:da:69:3b:8e:fe:e4:7b:1e:a6:b7:0b:58:39:fa:22:24:
47:af:03:80:62:1e:0a:da:92:09:ab:f8:af:94:57:be:93:27:
c6:f8:18:c7:3e:13:f4:99:e4:9b:90:de:16:82:b8:42:76:3b:
2e:db:d9:3c:ba:81:c3:0f:83:5c:2e:18:b9:11:15:e0:fc:ef:
3b:d4:9e:28:10:9d:d1:40:d0:35:9e:4f:f2:a9:ab:ad:63:97:
59:07:01:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:13 2025 by rpki-client