Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: 0KCf0N+Z/GqFNS9gYJ0JjpEKKV3T+etNZ37pxfIM4LM=
Subject key identifier: 77:C8:76:48:EA:3D:44:EE:30:83:2D:52:25:BF:B6:7E:78:62:01:B3
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 0199FBEB8814CB241C4DCA8E7DF716D512E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 161B
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: QaG+SyiRWHX8sJ8m8Jg30ZTNcLHZ/vVkFwpcq0b0zoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:88:14:cb:24:1c:4d:ca:8e:7d:f7:16:d5:12:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=77c87648ea3d44ee30832d5225bfb67e786201b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:cd:66:27:1a:96:aa:60:11:18:17:3c:bb:
bf:a4:de:02:01:5b:e7:1b:24:8c:56:e3:ae:67:d6:
3c:76:0b:f0:03:f2:a5:86:cb:bb:04:fb:29:88:e7:
f8:64:b4:1c:26:24:70:05:f3:06:e6:8e:39:97:d6:
86:01:6b:68:97:51:3c:52:ff:14:65:75:46:72:8e:
fe:9f:31:82:95:ca:e4:e0:7e:d4:dd:d4:b4:d0:1c:
5b:db:7a:bf:87:73:ec:53:da:bd:de:23:aa:0b:b8:
53:d2:e6:78:cc:ed:83:14:34:f8:97:30:de:05:3d:
92:b2:12:b4:c0:78:18:f6:12:f0:1d:99:43:af:08:
f4:54:4e:e5:ce:90:b0:b9:7b:7b:af:a4:73:9e:08:
25:19:bd:ce:fc:aa:3f:4d:35:e5:53:cb:30:80:63:
5b:83:8c:50:11:32:ea:f6:07:08:79:04:81:52:12:
8f:e4:e3:dc:81:c2:34:3d:de:cd:d1:09:38:d5:9d:
b8:f5:41:04:10:41:21:69:70:cf:a2:22:40:4f:8e:
96:95:7c:8b:10:07:4f:e0:19:66:04:a1:c0:d5:43:
4d:9a:2d:8e:5e:56:ff:39:90:b2:07:10:9a:a2:e2:
8d:9b:fe:67:6e:1a:9f:4f:1c:ef:c3:7a:73:25:4f:
ca:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C8:76:48:EA:3D:44:EE:30:83:2D:52:25:BF:B6:7E:78:62:01:B3
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:79:93:76:b9:6e:4b:ff:4b:a4:f5:0b:52:6f:82:42:7f:b3:
f8:5f:f4:9f:97:33:25:3d:60:8e:ac:15:c7:66:dd:47:17:e3:
5c:ae:c7:29:ad:a8:18:70:24:13:ae:ac:54:51:e2:fd:32:4d:
f7:8b:9a:a8:85:51:ec:1f:a8:06:95:8c:42:4d:c5:65:d2:cb:
5e:f2:e2:8c:df:b6:4c:0f:7d:79:66:7c:95:dc:df:bd:a1:e1:
37:65:95:3b:e6:26:4c:43:5f:1f:d0:23:1b:98:79:f8:63:c9:
02:2f:c4:75:8d:16:7a:94:b4:de:60:9a:41:ec:93:b4:25:a7:
f3:dd:ea:8c:73:09:bc:dc:f8:a8:b7:8c:db:b3:a4:34:5d:18:
1a:83:6f:f4:72:1d:c2:94:61:d2:cb:fa:c0:0e:60:ed:3d:cf:
10:32:c7:6c:45:0c:dd:e1:e7:4b:b3:96:63:5d:35:a2:ee:ad:
45:6b:2e:6c:6e:2a:09:ee:ec:a1:ef:93:a4:c2:40:44:0e:15:
a1:b2:16:42:93:49:34:0e:cd:2e:3c:52:99:fc:33:6b:c6:cf:
db:02:39:55:72:ea:c9:36:3b:23:80:5f:48:90:d3:54:55:c8:
cf:1f:3b:9b:41:5f:0b:f6:68:40:e4:22:d7:22:0a:9b:97:c5:
5f:3e:bc:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn764gUyyQcTcqOffcW1RLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMzI1OGQ5N2M5YmMyODRkNDg1N2JjZWUzZGYwOTA4MzZi
Y2QyMTIwHhcNMjUxMDE5MTAwMjIwWhcNMjUxMDIwMTAwMjIwWjAzMTEwLwYDVQQD
Eyg3N2M4NzY0OGVhM2Q0NGVlMzA4MzJkNTIyNWJmYjY3ZTc4NjIwMWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKHNZicalqpgERgXPLu/pN4CAVvn
GySMVuOuZ9Y8dgvwA/Klhsu7BPspiOf4ZLQcJiRwBfMG5o45l9aGAWtol1E8Uv8U
ZXVGco7+nzGClcrk4H7U3dS00Bxb23q/h3PsU9q93iOqC7hT0uZ4zO2DFDT4lzDe
BT2SshK0wHgY9hLwHZlDrwj0VE7lzpCwuXt7r6RzngglGb3O/Ko/TTXlU8swgGNb
g4xQETLq9gcIeQSBUhKP5OPcgcI0Pd7N0Qk41Z249UEEEEEhaXDPoiJAT46WlXyL
EAdP4BlmBKHA1UNNmi2OXlb/OZCyBxCaouKNm/5nbhqfTxzvw3pzJU/KJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfIdkjqPUTuMIMtUiW/tn54YgGzMB8GA1UdIwQY
MBaAFKoyWNl8m8KE1IV7zuPfCQg2vNISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2It
Zjk4ZGM1MzM4ZDJiLzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC85OGExNDEtYzQyZS00MTVlLWEzY2ItZjk4ZGM1MzM4ZDJi
LzEvcWpKWTJYeWJ3b1RVaFh2TzQ5OEpDRGE4MGhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIXmTdrlu
S/9LpPULUm+CQn+z+F/0n5czJT1gjqwVx2bdRxfjXK7HKa2oGHAkE66sVFHi/TJN
94uaqIVR7B+oBpWMQk3FZdLLXvLijN+2TA99eWZ8ldzfvaHhN2WVO+YmTENfH9Aj
G5h5+GPJAi/EdY0WepS03mCaQeyTtCWn893qjHMJvNz4qLeM27OkNF0YGoNv9HId
wpRh0sv6wA5g7T3PEDLHbEUM3eHnS7OWY101ou6tRWsubG4qCe7soe+TpMJARA4V
obIWQpNJNA7NLjxSmfwza8bP2wI5VXLqyTY7I4BfSJDTVFXIzx87m0FfC/ZoQOQi
1yIKm5fFXz68Ig==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:24 2025 by rpki-client