Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: aavIMPjUTuiR07rqDC0S6v5q2AyNmmxKJcPs3fIPrzI=
Subject key identifier: E0:BC:70:49:6D:11:DC:09:19:FD:8E:8E:43:29:D0:34:95:F1:11:CA
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 0199FD3414C4577A8D8BCD5B3499B1AA3ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 151F
Signing time: Sun 19 Oct 2025 16:01:12 +0000
Manifest this update: Sun 19 Oct 2025 16:01:12 +0000
Manifest next update: Mon 20 Oct 2025 16:01:12 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: /3dWh+sZel1OrlErrgcnIlRvzm2PpkikkbN6ZkU9GnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:14:c4:57:7a:8d:8b:cd:5b:34:99:b1:aa:3e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Oct 19 16:01:12 2025 GMT
Not After : Oct 20 16:01:12 2025 GMT
Subject: CN=e0bc70496d11dc0919fd8e8e4329d03495f111ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:60:c3:63:9c:53:55:cf:91:cb:04:56:78:
61:cb:a0:a2:e5:f2:d6:d5:84:19:31:a4:28:f1:d7:
54:5c:11:42:3e:c3:fd:b5:ae:59:6f:74:60:cf:ab:
01:42:b7:2d:83:d8:43:ff:59:a1:52:77:75:61:ca:
73:b0:63:fe:33:b1:ba:e5:f5:10:38:2f:17:b9:b5:
df:30:90:b7:ba:7c:8f:5a:7b:22:ad:9f:e9:95:be:
f8:6e:c1:c1:9f:a1:0f:23:e4:6e:c1:16:6c:a8:8d:
bc:72:70:cf:bf:6a:b2:d4:09:11:e6:aa:48:40:91:
94:4b:a3:31:84:b2:d4:de:ae:fb:4d:5d:3a:06:a6:
fb:57:df:b7:4c:bb:2d:c1:96:26:f3:9c:47:ac:be:
af:e5:76:d7:fb:20:c4:12:cf:3b:d0:ed:f9:f4:dd:
f5:3b:00:1b:5f:d6:71:16:36:f8:34:21:d6:1b:2b:
ec:a7:a0:57:51:1d:b8:4c:40:ae:1c:12:85:71:22:
92:e9:da:90:d7:01:cd:72:fa:18:d7:42:f6:52:9e:
99:2b:01:45:13:c4:f9:e9:8b:88:a4:3a:36:18:0a:
69:7e:75:75:97:b2:85:9f:4a:11:00:c8:f1:79:4d:
f7:60:bb:4c:09:9d:e5:07:2d:01:1d:de:59:df:0e:
d4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:BC:70:49:6D:11:DC:09:19:FD:8E:8E:43:29:D0:34:95:F1:11:CA
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:17:d1:93:ac:f7:7d:db:a2:2e:d2:b0:32:df:6c:35:b5:bb:
df:84:cd:9b:a8:33:96:32:1c:d7:46:40:ea:07:45:b6:30:bd:
ce:77:35:98:24:59:90:07:67:5a:c9:f9:9a:54:2e:03:c9:b5:
eb:1a:80:cc:33:e9:0a:67:d1:c5:dc:16:f5:d5:46:b4:4f:69:
bd:2a:12:c1:c3:c3:18:0e:25:c5:7e:d5:c2:7a:d8:99:cd:87:
83:0f:c8:41:97:c0:49:50:56:63:d6:82:d5:9e:36:1d:ea:a7:
78:09:c0:ea:16:bb:75:92:c8:f4:b5:2d:c7:6d:97:f4:d5:e1:
e4:4a:82:f8:d2:05:e3:72:c0:9b:c0:d7:60:d2:7f:f8:c8:a4:
5a:37:77:ab:8f:f4:9e:92:78:af:dc:08:f2:90:75:7e:91:7c:
44:da:21:e1:0c:f1:78:6b:4d:c3:73:85:3a:bf:a7:7b:ea:57:
f9:9c:41:fd:3d:56:7a:0c:85:6e:3e:af:bb:dc:4c:82:b2:a4:
2f:9b:4d:11:1c:a5:a3:63:a3:21:3d:aa:63:ca:f2:3d:a0:6b:
a3:f1:b2:8e:fd:61:09:13:68:17:60:22:2e:d0:bd:a8:0f:92:
da:b9:a4:c0:06:37:ef:80:a5:6d:fc:5f:e1:26:06:83:d1:c1:
b7:fb:b5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:37 2025 by rpki-client