Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: HM2jPAkahPkxrqRWIyjTNNWnEwGUi6orxYJTz9PHh9U=
Subject key identifier: AC:D3:7A:10:78:6A:B9:DE:96:B6:74:8B:59:52:29:F3:02:1E:AF:19
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 0199FBEABAA442A7B2810A1FF0EE64A86247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: O7YMoqhHmweD6+RhUcINAbifKHxWcBjQLFju49bzZcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ba:a4:42:a7:b2:81:0a:1f:f0:ee:64:a8:62:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=acd37a10786ab9de96b6748b595229f3021eaf19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:65:9f:03:6d:4d:22:ac:32:44:3a:ba:1b:16:
9e:f0:19:ad:0d:f6:10:70:e5:bc:9e:59:fd:c9:0d:
f8:54:18:53:03:48:7f:f0:da:69:49:12:b7:99:61:
f7:ba:cd:d4:81:e4:90:76:bb:65:fa:e6:99:57:58:
99:b6:45:03:b2:8e:e9:ab:c2:3e:e5:05:d2:a9:24:
f6:91:a2:05:f1:09:45:a9:45:a3:bb:85:8a:39:a1:
5d:5b:be:f1:b9:cc:07:52:80:2a:b5:53:5f:70:9e:
c8:8b:51:49:5c:25:9c:fc:10:4a:71:e8:4f:b2:ee:
9a:4d:d4:c9:97:77:0b:89:87:fc:ac:65:d1:d0:33:
2f:b6:63:55:a5:6a:56:d6:e4:8d:ca:47:1a:ba:e0:
2c:5f:d5:b0:71:98:3b:47:93:8f:d5:26:77:6c:87:
7a:e3:33:d8:c6:7f:8d:41:14:2b:be:a7:ef:be:45:
03:cd:38:10:71:90:35:6a:6f:20:ef:52:fe:ea:e3:
84:8d:8c:e1:31:bb:53:6d:4f:45:49:80:16:44:a9:
8d:b2:a4:45:48:c1:d5:53:c1:69:32:6c:9b:d7:bd:
36:94:e0:6d:c0:0f:ff:e0:1e:2a:88:bb:33:16:2b:
d0:01:bb:6b:a7:96:73:e0:e0:11:c6:8a:dd:ae:c0:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:D3:7A:10:78:6A:B9:DE:96:B6:74:8B:59:52:29:F3:02:1E:AF:19
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:b2:95:f8:b9:2f:bd:39:49:6c:18:d3:71:bb:f6:b6:9c:35:
cd:8f:87:bd:59:82:58:55:ee:63:2f:6e:41:a6:34:25:b1:8f:
44:a4:05:b6:26:3a:d6:1c:5c:90:d1:63:8f:74:05:d8:b8:51:
28:9d:a4:6a:84:ad:2a:00:dd:07:8c:ad:99:5a:33:1b:f5:a4:
f1:f6:41:e4:7e:66:1a:3a:07:55:e2:7b:fe:07:b5:07:3b:8e:
2e:84:11:a9:c9:39:94:6a:61:c3:66:12:1d:c8:a1:22:89:3b:
44:ba:f4:a0:93:6f:a0:ea:1c:f2:19:ca:16:36:d9:75:39:61:
13:33:d2:0c:ed:21:e7:96:02:94:8e:d9:37:41:20:73:ac:53:
94:9f:ff:a0:4d:61:7a:ed:61:51:e3:e6:ed:a0:a0:75:e9:53:
77:d0:20:0f:f7:1a:46:ea:1c:78:39:a6:b7:86:d9:e9:c1:0a:
8d:b1:a0:4b:bb:ad:31:7a:b7:64:3c:43:e4:70:7c:d0:ec:88:
41:96:1e:81:ac:6d:22:42:5c:39:cc:e0:61:55:db:00:2c:b4:
8b:c1:14:e1:80:32:5c:e1:0d:d9:b8:00:b4:b7:c2:f4:f3:f4:
53:a0:6d:8a:7e:ce:35:25:d8:16:ea:78:33:20:c5:dd:1e:d9:
47:54:12:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:44 2025 by rpki-client