Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: WFUE63CSmgSBoIiW9H1szyPPF0dF25fUwf0eK8BggMk=
Subject key identifier: 74:91:07:95:67:15:B9:20:D4:BD:37:74:5D:37:A7:DF:EB:F9:E1:06
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 0199FF2287D04411DA41FFB4CAAD50D0ED1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 0535
Signing time: Mon 20 Oct 2025 01:01:16 +0000
Manifest this update: Mon 20 Oct 2025 01:01:16 +0000
Manifest next update: Tue 21 Oct 2025 01:01:16 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: uGRH18qiTQNE3fzskrO7x4z9wQ91ETpZzicD23ISbD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:87:d0:44:11:da:41:ff:b4:ca:ad:50:d0:ed:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Oct 20 01:01:16 2025 GMT
Not After : Oct 21 01:01:16 2025 GMT
Subject: CN=749107956715b920d4bd37745d37a7dfebf9e106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d6:bf:9f:47:ce:e5:22:cb:81:77:82:05:46:
c6:29:ec:45:bf:98:67:be:a3:4f:d6:30:d0:cf:96:
4a:bb:54:a9:ae:2e:05:cb:2f:e4:7a:8e:d7:99:c4:
c6:2b:3a:e5:d5:14:3d:6f:97:5a:25:0d:a2:7f:de:
82:0e:bf:4b:62:11:c7:50:1e:de:3e:92:76:88:97:
fe:ad:81:58:52:06:7c:07:9f:9b:4c:64:bb:f1:c9:
6e:d9:3d:15:ad:88:f9:d7:63:46:b4:10:b9:db:a8:
48:41:c8:40:c5:88:66:1c:ba:8a:4f:3e:7f:42:18:
a2:3f:16:9f:14:fb:47:e5:58:27:1a:6d:64:4c:19:
ae:51:0e:f3:ad:7e:c8:d8:0b:42:52:2b:fb:ef:c4:
10:ed:ff:94:23:80:6c:aa:b3:42:d5:c7:9e:9b:cc:
d0:fb:8a:58:67:4e:25:b1:29:a9:fa:f2:22:93:29:
e8:2a:d2:cc:3a:81:ea:bb:8a:97:fb:05:a9:b4:8c:
d2:1d:47:dc:97:fa:58:3b:18:11:1d:22:01:0b:01:
08:48:9a:cd:12:67:de:9a:96:17:9a:d5:41:d7:81:
24:40:fb:ce:31:38:e2:79:54:90:5c:62:f6:9e:91:
bb:c6:7a:55:24:74:ac:62:b7:e5:86:16:79:42:aa:
cf:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:91:07:95:67:15:B9:20:D4:BD:37:74:5D:37:A7:DF:EB:F9:E1:06
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:18:7a:3d:0a:8b:40:6f:cc:b9:68:a9:56:83:6a:72:b9:
4e:80:f7:44:50:5a:e0:9a:67:60:10:45:a3:3b:66:ba:c5:93:
c6:b8:80:10:53:43:cc:4e:70:c0:09:82:57:63:f1:e4:0f:69:
8b:9f:ad:79:7a:42:b0:25:cf:f6:c6:33:cf:93:5a:b1:92:34:
33:aa:e3:fb:1c:b6:5e:32:44:27:bf:1b:dd:ad:c8:d1:ad:15:
58:cb:2f:c5:12:6f:e3:33:a6:b4:ac:85:64:2c:6d:fa:d6:96:
55:c4:82:21:4e:4b:0f:d0:c0:cc:bf:d2:11:82:a3:ac:90:2f:
15:1f:3f:95:73:98:81:f4:26:80:db:1a:65:84:c2:1c:af:68:
77:d7:94:d1:af:1b:d8:e9:7a:28:7c:e5:90:fb:3a:3c:b2:2f:
e3:8e:ac:4d:3e:75:b5:84:97:30:17:02:f4:12:77:02:46:00:
ac:99:4e:c9:52:02:18:57:3e:24:66:a3:d4:ce:91:4c:8b:bb:
e6:43:f5:d4:fe:04:87:9c:1a:7c:e1:05:a3:6a:6e:fb:43:73:
1c:89:63:3e:a6:f0:b1:98:f2:3e:e4:5b:33:7e:d4:29:99:7b:
6e:f4:86:de:38:12:29:8a:85:d4:0d:56:8f:33:ff:88:55:a9:
cf:6b:56:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:58:50 2025 by rpki-client