Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
File: QpBWwzjRbJLN_aHlXQk2givFDNI.mft (raw, json)
Hash identifier: seiMPWz4znipFNQFHYNOb6bmKLSv0jzgeO6slybR1y0=
Subject key identifier: CC:9C:F0:52:82:E2:42:59:04:88:6B:34:22:A0:7D:76:F4:47:F9:D5
Authority key identifier: 42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
Certificate issuer: /CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Certificate serial: 019A006BFCBC05F117C6E459BFC093FBAEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
Manifest number: 0579
Signing time: Mon 20 Oct 2025 07:01:08 +0000
Manifest this update: Mon 20 Oct 2025 07:01:08 +0000
Manifest next update: Tue 21 Oct 2025 07:01:08 +0000
Files and hashes: 1: QpBWwzjRbJLN_aHlXQk2givFDNI.crl (hash: AaUARvJA1/i6WgDxMe9e2jhc7huUYSYt9K3UUOvBzNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:fc:bc:05:f1:17:c6:e4:59:bf:c0:93:fb:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429056c338d16c92cdfda1e55d0936822bc50cd2
Validity
Not Before: Oct 20 07:01:08 2025 GMT
Not After : Oct 21 07:01:08 2025 GMT
Subject: CN=cc9cf05282e2425904886b3422a07d76f447f9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e6:ad:bf:62:ff:67:66:aa:66:d8:d2:79:99:
b0:d8:67:b3:62:f4:c0:fc:59:b4:1d:b3:46:2c:b3:
20:e4:08:f4:55:09:28:b9:2a:57:ee:76:4a:32:32:
18:cf:75:dc:a1:92:fe:fa:74:cd:23:fa:a8:53:55:
d3:ce:ae:c9:cf:0f:1e:42:44:b6:6e:ba:e5:35:a2:
f9:b2:4d:36:25:ff:5f:29:b1:a7:49:ce:fe:bf:77:
3d:ac:31:a3:b7:f0:b5:ac:89:f4:f5:64:d0:b5:1e:
5c:8d:c4:a7:f1:da:b4:e7:23:9c:0b:20:4a:e0:8c:
e0:2d:d7:a6:33:18:bf:a9:7c:8f:f8:c4:34:68:4c:
f1:88:fe:f8:02:4e:66:c8:67:9c:a0:d7:bb:8c:6d:
4c:d2:67:39:1d:61:00:c6:a0:30:0b:e0:fc:21:25:
28:c8:67:1c:9a:6a:61:92:30:39:7b:a0:2d:c2:f7:
14:a2:03:91:22:4a:ed:31:91:66:64:8e:f0:ef:79:
1d:3e:c7:ab:c5:6d:71:a7:2f:2e:3c:f1:e3:5e:a8:
bd:6b:5f:d9:d5:21:b6:4b:1b:d7:6c:68:f0:25:63:
34:97:cb:97:69:65:f3:13:c3:fa:64:27:16:29:52:
cd:e2:7e:cb:16:5c:30:3f:0b:4b:ab:7e:f7:0f:f6:
c6:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9C:F0:52:82:E2:42:59:04:88:6B:34:22:A0:7D:76:F4:47:F9:D5
X509v3 Authority Key Identifier:
keyid:42:90:56:C3:38:D1:6C:92:CD:FD:A1:E5:5D:09:36:82:2B:C5:0C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpBWwzjRbJLN_aHlXQk2givFDNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/513b77-9e3b-4a6c-9ed5-7f21d9befc2c/1/QpBWwzjRbJLN_aHlXQk2givFDNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:92:2c:d3:f7:25:9b:78:d7:02:04:9f:6b:58:5b:9c:46:12:
fa:5b:ae:f7:9e:dc:2f:4e:80:55:ab:af:8d:17:60:20:8a:88:
4f:3c:d5:3d:51:23:63:a8:8b:20:4c:26:e5:24:d2:c2:26:20:
84:95:95:54:45:e2:76:ec:a3:eb:9d:ec:64:07:f5:f3:ef:b8:
dc:ac:6c:d5:6f:2c:41:74:85:24:fb:ae:04:4a:04:94:51:9b:
17:77:ec:16:9e:da:0d:1e:38:19:98:73:54:66:ff:0c:3d:7b:
f4:65:a9:ea:0b:1a:6a:6d:57:48:5d:d8:c5:07:05:52:40:18:
1c:57:ed:d7:8b:f0:d0:d1:6a:b2:02:95:ec:bf:0a:3e:c5:ae:
8b:12:6e:ad:07:71:ee:37:a1:1c:93:66:a2:ec:bd:c0:05:41:
23:f7:3d:03:86:d0:da:e8:05:00:de:81:a9:7f:bd:dc:9b:29:
5a:91:b5:d4:11:62:81:d5:d0:30:5c:9c:f4:1b:d7:31:73:59:
a6:43:82:a3:dd:6b:a7:11:18:76:61:8b:42:12:4c:5c:d0:f6:
e2:ec:d9:6d:02:25:77:db:cb:a5:3c:90:f7:fb:27:df:8a:94:
94:6d:d2:8a:52:4b:6d:27:e9:97:05:f3:57:50:f9:77:e2:e9:
8f:74:d5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:02:31 2025 by rpki-client