Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
File: QAlHG9muvWlFaoNaP7CjUbBSZgI.mft (raw, json)
Hash identifier: iPK9YXrpnbEOZOKUJtuMx8yPnmbM7zUAxKKK0Fso47g=
Subject key identifier: 46:DF:BA:68:0B:D1:AC:73:98:FB:3D:F9:0B:B5:A7:F8:07:47:26:B6
Authority key identifier: 40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02
Certificate issuer: /CN=4009471bd9aebd69456a835a3fb0a351b0526602
Certificate serial: 0199FC213A2FD1F6F6D7E47F716D2793A233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
Manifest number: FE
Signing time: Sun 19 Oct 2025 11:01:00 +0000
Manifest this update: Sun 19 Oct 2025 11:01:00 +0000
Manifest next update: Mon 20 Oct 2025 11:01:00 +0000
Files and hashes: 1: QAlHG9muvWlFaoNaP7CjUbBSZgI.crl (hash: u70j5J8stmTLvYVtwzAqMG488XTzZrqLGlY4o48BBRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:3a:2f:d1:f6:f6:d7:e4:7f:71:6d:27:93:a2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4009471bd9aebd69456a835a3fb0a351b0526602
Validity
Not Before: Oct 19 11:01:00 2025 GMT
Not After : Oct 20 11:01:00 2025 GMT
Subject: CN=46dfba680bd1ac7398fb3df90bb5a7f8074726b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:23:1e:88:e1:f8:a9:29:d7:c7:47:45:b3:56:
18:fa:02:f1:06:54:1b:c1:74:39:df:07:86:4d:2c:
e4:ed:79:75:46:df:fd:ff:de:82:62:57:60:41:f1:
b1:1e:55:c2:a8:d2:25:e6:42:9d:b9:01:2d:46:b5:
14:15:af:d3:f0:6f:ec:98:02:98:12:bc:1f:1b:15:
d6:72:71:00:94:9c:41:9c:dc:27:a9:b3:98:11:9d:
df:72:0c:0b:06:ce:2d:2f:48:5d:15:1d:1c:03:53:
e8:ac:e1:1a:9d:fd:fe:31:68:56:20:1e:41:75:d4:
8e:96:3b:5b:10:17:9d:c1:1e:99:4d:00:0f:91:17:
89:83:41:a0:4a:35:d0:59:7b:82:14:73:f1:b5:7e:
28:e7:80:46:b0:91:4a:e5:a8:a4:83:b4:98:e9:76:
b9:1f:5a:9d:8b:7b:7e:4e:88:bb:bd:f0:3a:c0:d2:
20:d7:61:81:ba:c9:f4:29:1b:f2:d2:82:fb:33:8c:
c5:11:1d:b9:a6:68:52:76:37:99:be:e3:a1:b4:5e:
71:3b:6d:e1:10:f9:f6:c9:52:7b:43:a8:6f:58:86:
b3:e0:01:f4:f8:96:27:a8:93:5c:30:9f:0b:e0:4d:
38:1d:8d:03:ba:9c:c5:99:ec:0c:b5:18:91:f5:df:
4b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:BA:68:0B:D1:AC:73:98:FB:3D:F9:0B:B5:A7:F8:07:47:26:B6
X509v3 Authority Key Identifier:
keyid:40:09:47:1B:D9:AE:BD:69:45:6A:83:5A:3F:B0:A3:51:B0:52:66:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QAlHG9muvWlFaoNaP7CjUbBSZgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/2b136f-0041-4dc4-ac7b-43ecdc3f4bef/1/QAlHG9muvWlFaoNaP7CjUbBSZgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:8f:2b:97:02:1d:72:a1:43:d9:5a:46:8a:b6:7c:de:34:8a:
be:cf:83:87:39:51:0e:e2:25:b1:8f:94:4f:37:ca:01:c2:e1:
37:77:9d:ba:72:1f:71:22:83:94:7e:72:28:a4:0e:c8:75:cb:
fb:24:65:20:2f:c7:02:80:91:35:7a:1e:10:fd:94:37:17:f1:
fa:50:40:10:e7:65:53:fa:50:43:a5:b3:51:90:55:42:5a:8f:
2a:da:41:aa:b1:e8:37:9a:f1:b9:39:e8:89:43:91:e5:1b:96:
16:b6:28:0d:49:c8:18:3e:74:d7:2e:87:7f:f0:2f:64:48:c8:
44:8b:ed:b4:94:3e:f5:e4:f8:9e:00:81:a5:1f:a7:82:2f:56:
2c:5c:8f:44:d7:59:5f:57:db:59:38:df:e0:26:50:95:88:8f:
51:00:b6:e5:69:45:8c:55:f9:12:a0:56:91:1a:76:a0:77:e6:
1d:32:0d:94:23:d8:d5:e0:ab:ad:56:96:c5:5a:71:a9:a1:1c:
01:d2:26:42:d4:99:1d:11:24:43:a5:86:2a:9c:5d:40:fb:20:
ba:80:dd:c3:fb:bb:0f:46:0d:76:eb:8f:5f:70:7c:02:ca:ba:
e7:0b:46:f6:ed:38:94:16:d2:4a:77:65:ad:02:75:82:51:51:
fd:1e:85:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:06 2025 by rpki-client