Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: OTU7nrjXYnyfNMZZ3PVzOMIdlR/DA8lis/hBPu39quU=
Subject key identifier: 33:20:1A:A9:69:EB:96:A7:1F:01:17:0C:1C:D5:DC:0D:54:35:B4:97
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 0199FBEAEA832CA3C5281EF168B657E51F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 0FC9
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: 3idoIxi0TfUlzwhkW6TwUUCTjo1HZrQX9dZZJQzUH4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:ea:83:2c:a3:c5:28:1e:f1:68:b6:57:e5:1f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=33201aa969eb96a71f01170c1cd5dc0d5435b497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:08:ec:d9:67:59:08:54:ea:da:0a:b7:d1:82:
1b:1a:a5:71:64:9f:85:1b:61:7c:78:e2:b7:e6:6c:
c8:2f:8a:5d:6e:ef:36:01:0b:91:65:de:8a:e7:c0:
f4:e9:f8:11:ee:8f:12:0e:5f:2b:07:ae:be:99:68:
05:18:4a:91:27:fd:62:51:84:1b:52:1f:87:0e:83:
7e:d7:91:d1:1c:10:73:16:dd:2e:51:92:ae:b2:5c:
51:57:aa:b9:06:83:49:26:c5:13:4c:f1:fb:4d:84:
5d:ed:2d:7a:d9:36:c9:6a:19:88:2f:65:6b:8c:83:
59:2f:21:c1:dd:e7:3e:ec:97:10:97:26:58:07:03:
43:b2:15:1d:be:58:a4:43:f4:80:ec:48:d4:34:fc:
19:ad:4d:1a:22:6f:20:ae:d9:15:94:8a:e6:4f:ee:
bf:d3:33:e3:82:e4:b6:89:e0:f4:d0:8c:d2:35:28:
0d:5a:5d:b6:37:0c:a3:d5:88:50:b6:34:85:da:16:
8d:c6:43:79:fe:5b:f1:4d:50:af:a6:77:ae:ef:78:
db:84:2a:1d:aa:f8:fe:3b:2b:42:08:83:79:b4:f2:
49:84:6f:c1:fe:6c:ed:68:56:c2:7a:69:d2:e7:95:
64:20:5c:3f:59:40:79:45:26:e7:cb:fd:99:ca:1a:
16:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:1A:A9:69:EB:96:A7:1F:01:17:0C:1C:D5:DC:0D:54:35:B4:97
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d4:0f:1d:97:d6:75:68:1e:0c:bd:ad:cd:11:86:6f:39:fa:
02:c5:3c:04:5f:9e:f2:d6:5e:8d:bb:b8:97:07:a2:4e:42:0c:
18:a4:64:59:93:28:0f:04:85:bf:31:9f:03:d2:ea:e0:34:60:
f3:91:43:d7:4f:37:ac:c6:4a:4d:06:8c:04:25:d7:3a:9a:56:
67:a4:50:c0:1a:e7:60:dd:bb:a0:ff:6c:5c:db:ab:d7:59:61:
a9:f3:b9:cd:fa:ba:0f:77:dc:97:25:6c:86:af:02:e5:8d:29:
be:b6:6a:d7:91:f0:42:6f:73:d9:b7:e7:0f:3a:af:ea:80:7a:
b0:53:7a:7b:47:b5:41:3e:ae:fb:58:a7:2a:69:39:a6:aa:96:
e5:3c:3e:24:cc:43:c1:18:9a:cb:54:a7:8a:a2:8d:ed:09:fb:
14:34:af:d1:ed:05:e2:9d:21:2f:63:30:94:7e:05:07:a5:31:
ac:b9:0a:b1:94:a5:69:31:24:df:11:d7:79:97:cb:1e:0f:ff:
d4:c6:ae:97:d9:7a:19:16:ef:08:89:bc:e9:e3:55:16:97:2f:
c7:e6:2e:e7:fa:97:53:52:cb:12:eb:06:e7:e6:2a:f1:80:9b:
13:c7:6a:c5:36:ab:31:c9:e3:d4:a7:d8:9d:35:c3:4d:91:d3:
ed:ef:69:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:14 2025 by rpki-client