Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: d+l+q+fn+zZt6inhp5tnsD4BCZSlDZ6ojuBDMYJHpwM=
Subject key identifier: 58:4B:B7:4F:22:2C:96:FE:C3:F8:BC:B8:18:C5:3E:FD:68:E6:51:03
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 0199FC5883F05520D6425D3E6DF88EFEBE74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:23 +0000
Manifest this update: Sun 19 Oct 2025 12:01:23 +0000
Manifest next update: Mon 20 Oct 2025 12:01:23 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: 335+/lUJlbBy/XI/YzyCQsyCbSZrUKb6WufAfsMo1xE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:83:f0:55:20:d6:42:5d:3e:6d:f8:8e:fe:be:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Oct 19 12:01:23 2025 GMT
Not After : Oct 20 12:01:23 2025 GMT
Subject: CN=584bb74f222c96fec3f8bcb818c53efd68e65103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ed:ab:62:07:9a:72:a2:68:44:87:03:3e:86:
7a:cf:2d:2a:06:00:fa:bd:b2:8f:84:f9:76:a7:42:
61:9e:2a:f7:f1:0e:ca:dd:20:a0:15:59:1c:30:8c:
f2:62:0d:c5:d5:a4:2a:0c:0e:e5:ba:f1:72:08:e4:
d7:e3:80:5f:85:6a:4f:92:dd:98:41:99:47:22:4b:
41:28:6f:45:50:28:fb:9e:c5:08:eb:ef:13:4b:0c:
5b:7d:05:dd:47:ef:0b:21:8d:97:13:53:61:fb:9a:
8e:96:60:49:45:f7:85:0f:5e:4f:52:34:1b:1e:2d:
74:92:19:69:bb:ec:2a:a2:9f:d5:81:41:47:ac:78:
3a:a3:92:9f:3d:e6:eb:e1:5c:6a:98:0c:89:4c:b3:
3d:cf:4a:f8:26:5d:1e:85:31:42:13:b4:6d:8f:54:
af:b6:65:fa:15:bd:25:f2:b6:36:dc:f8:22:96:61:
d4:d2:b6:e8:79:4e:fd:68:c4:83:28:9f:5a:8e:57:
02:6d:30:3d:5b:62:16:64:ab:0b:ac:f0:ef:71:f6:
c7:cb:76:9e:71:90:23:6b:2e:8d:0e:b4:7d:04:ef:
9b:cb:70:cd:04:04:2d:a8:e1:3c:40:67:0a:6e:f4:
75:f8:b8:44:03:a8:f5:57:f1:d5:99:17:59:bc:6f:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:4B:B7:4F:22:2C:96:FE:C3:F8:BC:B8:18:C5:3E:FD:68:E6:51:03
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:85:53:78:14:8a:2a:de:07:1d:7e:8a:ef:94:72:fc:43:
fb:cf:75:7c:ba:f8:1f:bf:68:87:47:0d:19:b5:87:9a:52:2c:
01:03:41:3a:88:44:5e:3d:84:22:cc:e2:2e:78:8e:b5:4a:a8:
64:fe:d8:08:a7:3f:71:7e:79:fa:01:b1:03:b3:cd:e2:14:b3:
47:28:7d:ee:db:18:9e:6f:db:50:c6:38:42:2c:23:79:3a:0c:
85:eb:de:ae:1e:87:d3:a0:82:56:4b:c9:95:42:79:1d:2c:29:
58:85:54:58:7b:81:4e:11:c1:ee:1c:81:ee:e9:45:9f:86:57:
25:db:61:5f:fb:48:be:a7:2f:4e:93:80:30:12:03:70:f4:b7:
7d:98:d7:4c:82:75:dd:b9:18:b9:ec:51:c9:1f:76:04:2a:95:
76:63:58:6b:e7:34:5e:54:33:b9:c6:48:23:bb:49:0b:9e:eb:
a7:b0:bd:74:fc:95:e2:4a:f3:20:ea:f5:b3:04:13:0c:20:03:
84:7c:07:fe:ec:cf:4d:d4:c6:b4:28:a9:cd:c3:7c:30:75:80:
5e:11:bb:0d:da:d0:5d:be:e0:01:a7:ac:d0:02:9c:f4:81:53:
47:37:49:28:53:7c:18:60:dd:5f:ed:4c:05:ca:95:6d:15:51:
71:f0:29:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:39 2025 by rpki-client