Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
File: QpeJWSkM6bssG1thREOEQVta-tY.mft (raw, json)
Hash identifier: kU/MQIklLzzIJCrGSfvKZdzn4fMrJXw/5emS4vEUbuE=
Subject key identifier: 04:5A:68:79:09:49:39:66:C1:1F:02:DF:BE:34:32:23:A4:CE:61:41
Authority key identifier: 42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
Certificate issuer: /CN=42978959290ce9bb2c1b5b61444384415b5afad6
Certificate serial: 0199FDD9359A9E5281EC2296D2653E162D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:01:34 +0000
Manifest this update: Sun 19 Oct 2025 19:01:34 +0000
Manifest next update: Mon 20 Oct 2025 19:01:34 +0000
Files and hashes: 1: QpeJWSkM6bssG1thREOEQVta-tY.crl (hash: 8KOhKaorHNQi7pJr6LQTt1VFlBNByI3MCltxdIyMtL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:35:9a:9e:52:81:ec:22:96:d2:65:3e:16:2d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42978959290ce9bb2c1b5b61444384415b5afad6
Validity
Not Before: Oct 19 19:01:34 2025 GMT
Not After : Oct 20 19:01:34 2025 GMT
Subject: CN=045a687909493966c11f02dfbe343223a4ce6141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9a:ef:bb:43:87:59:b8:15:5f:2e:54:d8:
62:7b:dc:b3:53:40:21:6c:1e:bd:05:90:47:6c:ab:
25:68:09:30:ae:51:c8:d5:fc:c5:fa:c9:7f:8a:80:
df:9a:a9:e6:b3:3b:68:9f:60:a4:7d:0e:e5:bc:2b:
e0:ae:1b:a7:db:50:f6:b9:e4:fb:52:01:b2:8a:c9:
59:63:8b:2e:dc:25:74:3b:0e:e5:43:88:72:ef:e1:
50:2b:0d:cc:94:f2:62:05:63:43:00:cb:94:3c:43:
74:d7:37:46:ae:8a:5d:79:33:8e:42:a0:10:6c:94:
db:bf:03:1f:80:eb:59:5c:ba:28:a1:96:9e:3e:f8:
d0:8b:05:75:3d:45:b2:1c:fe:c6:8d:bf:b7:c6:57:
38:6e:0b:60:60:f4:a9:08:2a:f1:97:89:51:48:d5:
60:82:2e:25:67:9f:07:43:aa:6e:f1:7c:51:da:fb:
4f:ec:74:88:43:7e:f6:4a:d9:f9:04:92:46:74:59:
84:fe:3a:99:35:14:91:97:a2:53:25:95:0d:45:73:
2a:b9:e2:1e:48:e8:91:1f:aa:60:4c:6f:73:02:e0:
4a:78:bc:1d:98:6e:d0:bc:f8:52:55:1d:ba:75:a6:
36:b8:25:da:03:cb:3c:bb:3b:b8:89:cc:61:97:33:
fe:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:5A:68:79:09:49:39:66:C1:1F:02:DF:BE:34:32:23:A4:CE:61:41
X509v3 Authority Key Identifier:
keyid:42:97:89:59:29:0C:E9:BB:2C:1B:5B:61:44:43:84:41:5B:5A:FA:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpeJWSkM6bssG1thREOEQVta-tY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ac0b0a-2e83-469d-b89b-326808eccccc/1/QpeJWSkM6bssG1thREOEQVta-tY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:c9:41:80:ca:20:58:40:08:08:9b:46:d9:de:ef:73:06:
d2:f1:b3:f8:d2:ac:83:57:54:5e:b2:03:a0:81:55:d9:c1:19:
77:9c:2b:38:29:1b:96:59:c7:96:d1:52:c0:af:75:c8:c0:e4:
7f:ef:34:61:a9:5d:96:fa:a5:51:31:cf:ab:18:c9:bf:02:30:
c5:d0:4e:db:f3:ef:b2:eb:22:ec:3a:eb:a2:40:02:47:c4:72:
ef:aa:60:24:2c:73:28:c5:09:35:6d:1a:e9:dc:ae:6e:49:89:
bd:ca:0a:ac:1d:65:3c:85:10:59:dc:75:f0:bd:04:11:16:74:
3d:f7:b8:96:d8:9e:11:28:5f:8d:ab:3e:81:60:50:11:9b:c9:
0c:e9:fc:5f:8b:1f:59:c0:ca:7d:d2:74:21:13:e6:06:a9:a2:
45:c7:26:5b:bd:56:09:66:85:bc:86:db:8c:da:51:48:e6:bd:
e1:bb:0c:b2:b9:47:c3:70:5f:50:3b:46:3d:35:72:78:93:4b:
00:c5:2e:d1:9e:3e:60:13:f2:bb:9f:c9:db:73:7d:95:cf:2c:
94:41:31:78:0b:4f:b4:90:f3:e2:44:fe:31:06:21:c1:71:b6:
12:ec:8b:fe:08:e3:ca:ad:e6:0d:96:df:5b:bd:37:c3:d3:98:
53:d8:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:00:26 2025 by rpki-client