Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: XQYk+ah2Sz7zoRQWE067BJs5IZuxV5HpdUIlQ66NfWU=
Subject key identifier: 4E:CB:CA:62:56:15:8A:A0:3D:EF:8B:90:10:CA:19:1E:C7:E6:84:2B
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 0199FBEB8C1A7BEECC3E0B74A0C5DCE290E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 0475
Signing time: Sun 19 Oct 2025 10:02:21 +0000
Manifest this update: Sun 19 Oct 2025 10:02:21 +0000
Manifest next update: Mon 20 Oct 2025 10:02:21 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: 2/BcMiUCZb60xBBL6ZSGxAxUE8YpL7azIfX6DULBFg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8c:1a:7b:ee:cc:3e:0b:74:a0:c5:dc:e2:90:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Oct 19 10:02:21 2025 GMT
Not After : Oct 20 10:02:21 2025 GMT
Subject: CN=4ecbca6256158aa03def8b9010ca191ec7e6842b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e8:9e:65:4f:cd:70:c3:65:55:7a:a5:41:39:
7f:fc:2a:7a:a7:c4:c1:f6:24:c7:cd:99:b7:c7:f7:
9b:6e:a3:90:b4:85:c6:65:3d:9b:85:e5:58:5b:49:
76:47:32:25:9f:4e:f0:f5:89:c7:51:36:07:16:6a:
87:7d:9e:16:a0:51:3d:01:69:6a:7f:c6:ad:0b:37:
dd:3e:f9:67:01:8f:8b:a3:15:ec:da:4a:63:c2:6d:
da:94:7e:00:dc:11:70:e6:4b:05:41:d6:a9:74:64:
4d:bf:19:a4:c3:b2:dc:ee:fd:dd:f7:3c:00:2a:50:
17:89:2b:14:7a:da:29:7f:7c:75:2d:3d:5f:df:89:
72:c0:d8:21:8f:54:d9:3c:26:78:e6:6a:78:34:b9:
b1:20:57:03:a0:45:7b:ba:18:5c:a4:90:03:d7:76:
48:53:f4:6c:e7:05:43:92:c1:9d:85:00:3b:a3:1d:
e7:df:3a:10:8a:35:87:cf:57:91:d1:eb:7c:6e:1b:
06:26:55:6d:b3:9d:15:41:a8:f0:5a:8c:52:a4:3b:
2e:83:5c:bc:43:66:e8:40:9b:38:42:54:c8:c7:04:
81:1f:5a:68:ad:26:a6:27:96:e9:78:bd:c3:a9:06:
11:b9:de:98:bb:ba:89:ef:b6:25:71:bf:83:3a:db:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CB:CA:62:56:15:8A:A0:3D:EF:8B:90:10:CA:19:1E:C7:E6:84:2B
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:0d:7c:16:f9:aa:b2:aa:ae:2d:43:7d:d1:7a:87:11:21:c5:
5b:3b:01:0e:ea:b1:b8:9e:2a:24:53:09:fc:aa:f4:39:de:77:
4f:6b:3f:6e:c2:0d:0d:8d:99:cd:1f:3d:23:3f:2b:d4:98:f7:
43:4d:e6:17:36:e6:28:be:4c:0f:07:90:ae:46:0b:82:42:5f:
a6:18:1a:f7:0f:86:6c:47:49:85:c3:1b:64:b2:95:5f:34:7d:
ed:89:a6:c8:6f:ba:b8:88:da:25:b2:17:41:03:0b:09:83:aa:
4f:38:69:f8:0a:5b:e1:38:5c:64:1b:85:86:81:cd:c9:5a:da:
33:d7:7f:c2:1b:29:ba:e9:61:23:c7:74:5a:b1:28:c3:f2:3e:
aa:1b:84:e4:c9:fc:80:98:3b:d9:17:65:14:03:21:bc:3b:15:
62:c9:1e:d1:a8:90:cf:ab:95:07:c9:0c:8a:17:0d:79:0e:ae:
f0:6a:6b:73:48:b8:3b:50:99:3e:2f:68:57:fe:58:d1:5d:5d:
df:b1:56:29:5c:52:9c:c8:7a:64:bc:6a:db:e3:a6:50:77:6d:
21:82:a8:9a:99:21:7d:32:a2:ce:0e:18:4f:d0:4e:1e:40:77:
2d:35:84:b5:c4:4b:ad:13:21:88:5a:81:5a:55:14:32:49:fd:
af:e2:71:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:32 2025 by rpki-client