Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: u/NpBvVrGGbEMNN6ut05rpkYtstbqdoGKUhK5JEziQc=
Subject key identifier: B6:3A:11:35:7A:D5:03:2E:0F:4D:C8:D6:1C:35:98:BE:C2:30:A7:DA
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 0199FB7CEA231240B38ABBD8D633CA378828
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 03A3
Signing time: Sun 19 Oct 2025 08:01:31 +0000
Manifest this update: Sun 19 Oct 2025 08:01:31 +0000
Manifest next update: Mon 20 Oct 2025 08:01:31 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: mPowm9PeabY+Aib71KajaOAcqNte5XfogU44xwKvu7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ea:23:12:40:b3:8a:bb:d8:d6:33:ca:37:88:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Oct 19 08:01:31 2025 GMT
Not After : Oct 20 08:01:31 2025 GMT
Subject: CN=b63a11357ad5032e0f4dc8d61c3598bec230a7da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e9:2e:70:b3:b6:1b:65:1d:b4:1c:2d:5a:62:
85:7a:10:15:e5:1e:04:27:cd:05:74:29:4d:71:52:
a1:c2:d8:47:b4:48:b5:82:19:25:a7:11:5a:aa:4e:
f9:b8:df:5a:2e:35:f3:93:83:2d:a1:e7:73:7e:01:
05:4f:f0:39:f8:3a:ab:9c:a6:9a:46:95:8e:f9:95:
91:36:e9:aa:ef:93:05:f5:92:9d:10:af:4c:a8:64:
a5:87:31:d6:7f:89:dd:27:95:77:62:5a:c1:15:95:
d6:8c:cb:c8:6e:9f:cb:3a:91:ea:84:f2:c0:c5:d0:
21:a9:34:11:cc:d5:6a:32:88:98:45:c3:76:e2:d3:
3d:c6:9d:cd:1b:ec:5c:3b:fa:22:da:20:17:ce:78:
f6:e8:14:74:a3:6a:5c:1c:1d:4e:b2:93:fa:b6:2a:
87:a2:ff:d1:67:6c:82:9e:6c:84:50:c3:81:01:ca:
f5:36:e0:76:92:e2:46:54:8a:72:87:7f:02:70:14:
4c:4a:0b:a0:72:ed:db:db:4b:3a:b6:10:bb:6c:70:
fe:50:bc:3d:bf:ff:27:8e:ce:df:ae:31:3e:37:28:
0c:f9:81:3c:97:df:eb:8f:d2:74:84:31:b9:52:79:
71:bb:dd:58:7c:f2:17:1e:72:46:4e:9f:2e:f4:fa:
b6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3A:11:35:7A:D5:03:2E:0F:4D:C8:D6:1C:35:98:BE:C2:30:A7:DA
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:50:72:f8:0f:04:6c:0b:40:d9:1c:59:0f:14:91:c0:c8:af:
df:83:9c:5e:dc:a6:99:27:cb:cb:b4:32:33:d8:5e:b1:a0:37:
40:5b:3a:ef:b1:80:34:bc:70:69:07:d6:3d:1f:4d:4e:c0:30:
29:28:84:03:77:4a:61:20:87:52:cc:67:b2:cd:5a:f2:de:0b:
10:ac:2d:d9:dd:fa:9a:44:22:69:26:5a:9d:f7:ed:9a:50:45:
b3:68:6f:99:4a:0f:60:6c:d3:f7:85:80:8d:48:a5:6e:24:75:
55:91:11:9a:c5:f4:24:0d:36:ea:83:16:bb:b9:29:b6:c5:5b:
0f:f5:bf:d8:d7:6d:fd:61:3e:6d:29:a2:63:e8:37:19:4e:10:
98:b5:4e:13:e3:fe:fe:e2:30:47:8d:af:c2:85:e0:54:6b:97:
03:5c:a7:94:75:1a:7f:9a:ee:68:d6:ab:43:52:22:1e:0a:be:
d8:ed:c5:ed:49:7f:b1:3c:ad:90:b8:7a:f0:e4:00:b1:62:7a:
a9:67:c5:1e:a3:33:23:85:28:8b:4a:5a:0b:b2:2a:c9:86:89:
ae:18:6e:e5:20:0b:ec:90:bf:66:55:c5:10:59:19:60:58:15:
e6:5a:91:46:89:05:62:be:be:32:60:0d:02:14:d9:7b:60:60:
89:3d:48:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:46 2025 by rpki-client