Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: kime891TYIMmLzDjTxUOsCXPfObJS5/kqGcJmHramqE=
Subject key identifier: 18:86:F5:C6:4D:9E:0C:BA:EA:DB:FC:46:FA:1E:AB:4E:99:9D:CC:3C
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 0199FCFD8A7624418D2F4E5C720049A877C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 1235
Signing time: Sun 19 Oct 2025 15:01:38 +0000
Manifest this update: Sun 19 Oct 2025 15:01:38 +0000
Manifest next update: Mon 20 Oct 2025 15:01:38 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: ApVmWvI6fC8QOVUOQtbT93yLzYMuOi6h+/xzhGV0b+w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:8a:76:24:41:8d:2f:4e:5c:72:00:49:a8:77:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Oct 19 15:01:38 2025 GMT
Not After : Oct 20 15:01:38 2025 GMT
Subject: CN=1886f5c64d9e0cbaeadbfc46fa1eab4e999dcc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:95:10:b2:2b:55:ce:4c:da:d6:d7:42:02:
ca:f1:da:21:0c:21:3c:ad:da:8e:e4:28:32:42:0b:
e7:28:a6:ab:16:55:7a:4f:c6:0d:0c:63:41:63:21:
a5:1a:6b:79:0d:1b:68:56:33:ad:00:d5:a3:f4:54:
4b:b8:87:07:9c:f8:39:2e:e7:15:f7:f0:59:33:e3:
01:a4:7f:57:bd:fe:f9:08:32:13:01:0a:36:2c:5e:
42:6b:f7:f4:e6:da:24:99:b3:61:3a:b0:ed:8c:f6:
1f:31:2c:b1:87:9c:39:c1:f6:b7:fd:17:a4:54:50:
23:5c:30:87:1c:8f:22:6d:5b:4c:c6:85:71:40:f5:
fb:01:03:2f:78:e6:58:38:44:07:18:ee:a2:b4:90:
a4:f7:a8:af:78:f7:78:39:5a:ef:45:54:89:9b:e5:
5e:42:dd:6a:66:2e:61:4d:36:93:2b:0c:5f:02:1a:
18:a9:fc:e3:c9:e8:9b:78:3f:62:8d:ef:6c:a3:7f:
7e:ce:93:dd:aa:c0:32:8f:c7:d7:fa:b3:65:f0:6a:
ac:e9:bd:42:1b:fa:21:7b:cc:bd:32:87:16:9c:f6:
94:b4:1b:9b:08:ce:4c:46:46:db:3e:96:43:29:32:
e7:79:73:de:ff:fa:25:f7:e9:8d:9e:6f:e8:1e:60:
c2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:86:F5:C6:4D:9E:0C:BA:EA:DB:FC:46:FA:1E:AB:4E:99:9D:CC:3C
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9e:0c:f3:06:18:39:e2:9c:70:0d:c1:cc:fd:a6:09:34:f2:
3f:16:9c:5a:8b:85:54:74:ec:26:6f:1e:36:fc:76:06:b2:00:
bb:d0:ec:bf:d7:bf:5f:cd:14:b5:4c:24:66:2d:1a:33:e3:d4:
5f:35:4a:78:ea:1f:0a:5a:6d:f7:20:ef:b8:31:71:15:27:62:
1a:8a:96:dc:1f:0c:ee:5f:80:d5:35:45:e9:6b:44:d4:6b:ef:
a1:52:94:44:37:fd:f3:89:a8:0e:19:1e:1d:22:09:c4:5a:3d:
59:3d:32:cf:82:00:b3:c8:26:ab:85:4d:ca:f9:e7:c3:24:e0:
cb:2f:6d:78:11:a6:ef:75:eb:8a:42:ae:cc:d2:f3:7c:ec:e7:
a6:b4:fa:eb:d7:62:21:9c:2c:ea:b1:22:58:e7:88:31:fb:61:
22:42:7e:e4:b4:fd:9e:01:a1:a7:50:d0:91:4a:cb:a2:f3:1d:
6e:bc:96:c6:b9:99:58:13:03:07:01:c5:91:77:7b:6a:bc:81:
57:43:a9:72:83:19:2d:d6:c0:e3:d8:21:f3:44:90:13:32:90:
89:a7:68:86:eb:e0:10:c7:95:65:a2:5a:d9:13:39:48:72:17:
78:e1:79:21:d1:54:ea:cd:67:d9:58:3a:d6:76:6d:7f:84:df:
58:6f:53:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:19 2025 by rpki-client