Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: YiERkirC9tU46s7sg5sH+Wsm9BHIOdrZrtrquYkkqSQ=
Subject key identifier: 63:CB:15:71:E7:45:54:BA:C5:C9:E1:80:59:A9:BA:24:2A:71:A6:77
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 0198D5BB958CFE4EDF4FD87708083C4D3837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 1486
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: eEgZae8HdFa88velVIkb8ENo256wykw0lMz+QGqNQrg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:95:8c:fe:4e:df:4f:d8:77:08:08:3c:4d:38:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=63cb1571e74554bac5c9e18059a9ba242a71a677
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:e3:cc:d9:7f:3a:d4:3a:0a:14:2e:d1:09:
68:ee:16:03:f0:6f:4d:60:3c:61:f8:85:2a:a6:50:
ef:43:7b:a2:cc:04:36:ae:71:44:13:03:4a:33:3b:
82:e0:4e:7b:6f:27:b8:5a:90:18:eb:b1:42:68:4d:
62:c6:7d:60:bd:ab:dd:c4:fa:2c:71:5c:64:68:58:
94:59:0b:e0:dd:c8:02:98:43:8c:46:e6:73:1d:d8:
74:73:45:40:5e:e1:69:c0:74:85:ed:8a:9d:62:0b:
3d:a5:36:18:e7:da:34:96:06:d7:38:47:11:b2:41:
da:cc:9f:94:2f:fd:56:74:09:c8:16:9a:ec:b3:1c:
30:eb:35:39:20:2d:c3:e5:33:40:e5:08:81:28:cf:
74:89:81:bd:c0:20:0a:d3:df:22:d6:8e:4d:dc:3c:
b7:ed:d3:34:2e:3b:c9:da:26:6f:12:91:dc:42:e1:
b6:cf:8c:a8:2b:2d:e2:0f:08:e8:69:e0:33:50:c5:
ad:f0:25:88:06:15:2a:6f:d4:3e:a3:28:02:e5:22:
ca:24:6c:62:8c:78:03:ae:30:28:5d:f4:41:c8:c8:
df:75:54:32:cd:64:1f:a9:e9:99:dc:ea:a2:68:9a:
a3:0b:86:10:52:8b:95:1e:21:e4:41:d3:7e:b2:66:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CB:15:71:E7:45:54:BA:C5:C9:E1:80:59:A9:BA:24:2A:71:A6:77
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a1:49:47:63:0f:9b:35:e0:79:2d:35:e3:ec:b6:70:fe:d8:
1f:d9:19:73:cb:ef:e2:8b:62:cf:dd:7b:c8:76:4e:fb:a7:45:
7d:9f:d6:c6:e2:0f:3c:c3:21:22:85:a7:b4:9f:a5:76:86:b0:
a2:ab:64:e9:ca:c8:01:5b:ac:94:8c:b0:f7:d4:10:c4:83:d9:
05:58:8c:8b:a8:cd:b8:67:20:94:54:88:8e:e1:33:f2:b2:d2:
9f:30:df:e9:ab:70:cb:bd:34:0b:7e:ca:d9:51:08:5b:26:f7:
f4:8f:9e:8b:13:15:93:d4:0b:9c:5a:b1:40:5d:b4:a5:e4:f8:
2b:67:a5:2a:24:9d:17:0f:42:80:2c:f4:f3:92:fe:23:3e:83:
70:fa:bc:92:02:5f:77:94:97:d6:95:d6:5b:e6:2f:29:9c:37:
f9:0f:db:a4:51:66:aa:4d:30:34:04:0c:a9:40:f1:33:ca:e5:
09:5b:07:ff:04:91:01:d8:6b:31:2c:1a:93:03:3d:6a:75:cf:
31:f2:90:55:d6:6a:ad:1d:6d:4b:58:4d:aa:63:3d:16:71:1e:
4f:c2:f5:49:21:4a:d8:23:63:1a:8f:58:66:5c:ff:cf:c1:4a:
46:13:a1:dd:db:5d:61:cd:5b:71:bc:0f:b9:5d:ed:5f:76:ef:
df:a7:14:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVu5WM/k7fT9h3CAg8TTg3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MmVhNzU4ZTQxNTU5NGE4MDM3ZmZkYjc5OGY2YmI5MThj
MTVlNjQwHhcNMjUwODIzMDcwMTM3WhcNMjUwODI0MDcwMTM3WjAzMTEwLwYDVQQD
Eyg2M2NiMTU3MWU3NDU1NGJhYzVjOWUxODA1OWE5YmEyNDJhNzFhNjc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VHjzNl/OtQ6ChQu0Qlo7hYD8G9N
YDxh+IUqplDvQ3uizAQ2rnFEEwNKMzuC4E57bye4WpAY67FCaE1ixn1gvavdxPos
cVxkaFiUWQvg3cgCmEOMRuZzHdh0c0VAXuFpwHSF7YqdYgs9pTYY59o0lgbXOEcR
skHazJ+UL/1WdAnIFprssxww6zU5IC3D5TNA5QiBKM90iYG9wCAK098i1o5N3Dy3
7dM0LjvJ2iZvEpHcQuG2z4yoKy3iDwjoaeAzUMWt8CWIBhUqb9Q+oygC5SLKJGxi
jHgDrjAoXfRByMjfdVQyzWQfqemZ3OqiaJqjC4YQUouVHiHkQdN+smb0DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPLFXHnRVS6xcnhgFmpuiQqcaZ3MB8GA1UdIwQY
MBaAFKkup1jkFVlKgDf/23mPa7kYwV5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYt
OTU4NmQ4NDAxMzRlLzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iZmE0ZDQtNzZiNy00MDlhLTg1MmYtOTU4NmQ4NDAxMzRl
LzEvcVM2bldPUVZXVXFBTl9fYmVZOXJ1UmpCWG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKFJR2MP
mzXgeS014+y2cP7YH9kZc8vv4otiz917yHZO+6dFfZ/WxuIPPMMhIoWntJ+ldoaw
oqtk6crIAVuslIyw99QQxIPZBViMi6jNuGcglFSIjuEz8rLSnzDf6atwy700C37K
2VEIWyb39I+eixMVk9QLnFqxQF20peT4K2elKiSdFw9CgCz085L+Iz6DcPq8kgJf
d5SX1pXWW+YvKZw3+Q/bpFFmqk0wNAQMqUDxM8rlCVsH/wSRAdhrMSwakwM9anXP
MfKQVdZqrR1tS1hNqmM9FnEeT8L1SSFK2CNjGo9YZlz/z8FKRhOh3dtdYc1bcbwP
uV3tX3bv36cUOA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:41:27 2025 by rpki-client