Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
File: Qfg9IXNOBVXHoTxIVhygt3V6ago.mft (raw, json)
Hash identifier: 81KBpHIIQDexbs1sJkMtgEUyfZf2lmckcNPVpUMPp2E=
Subject key identifier: 86:9D:B6:44:79:C2:38:1D:A8:4A:22:38:7D:0A:EB:12:8A:30:31:08
Authority key identifier: 41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
Certificate issuer: /CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Certificate serial: 0199FC21663534BFC2254F7E78516777AF3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: Qfg9IXNOBVXHoTxIVhygt3V6ago.crl (hash: TZ0aA679bQkvoQo4JuTHQ80qG9vG2o1xEtV9phXVTyM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:66:35:34:bf:c2:25:4f:7e:78:51:67:77:af:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f83d21734e0555c7a13c48561ca0b7757a6a0a
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=869db64479c2381da84a22387d0aeb128a303108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a3:4f:2a:37:ac:8c:b4:d6:65:8d:50:07:58:
9f:20:22:06:41:30:3c:a6:71:60:47:c8:99:4d:69:
d9:30:ec:3b:6e:93:bc:24:aa:3d:b4:7c:12:bc:87:
3f:c3:68:ae:9f:33:6f:81:4c:12:67:65:98:a1:ee:
76:2a:77:38:63:c1:89:d0:75:0b:20:41:a4:45:5c:
4a:01:20:91:fb:7e:07:0c:a2:3d:1b:06:1b:48:bb:
63:2c:29:db:77:39:98:66:10:ab:f0:b7:84:11:67:
8e:57:55:3c:89:85:6a:5c:3b:50:6a:92:ec:73:20:
27:de:c3:46:2e:84:64:35:15:01:c9:71:5c:6d:ca:
70:5b:e0:16:ea:86:d7:1c:90:c0:4d:e2:11:98:c1:
36:5a:19:c5:e9:5e:f7:64:83:dc:05:bb:dd:04:5c:
2e:13:55:a3:40:d1:2b:d1:4a:b9:2c:6f:8c:ec:67:
81:5d:2e:8e:87:9c:11:58:2b:fa:45:74:ad:38:29:
73:e3:77:a3:d0:a8:61:cf:b5:96:70:aa:60:20:6b:
74:2d:da:f6:04:17:e2:5b:88:b1:46:0f:61:00:3f:
4e:d7:b5:92:14:50:bf:8a:85:3b:92:34:9d:32:fa:
52:dc:dc:dc:44:59:85:12:ee:8f:ec:8f:09:ce:3b:
71:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9D:B6:44:79:C2:38:1D:A8:4A:22:38:7D:0A:EB:12:8A:30:31:08
X509v3 Authority Key Identifier:
keyid:41:F8:3D:21:73:4E:05:55:C7:A1:3C:48:56:1C:A0:B7:75:7A:6A:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qfg9IXNOBVXHoTxIVhygt3V6ago.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/737469-aa66-43df-9e94-70393f9f8ae3/1/Qfg9IXNOBVXHoTxIVhygt3V6ago.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:bb:c9:c1:d7:11:b2:2f:71:ac:67:67:6a:f3:80:36:20:6b:
c3:b3:4b:ef:39:ca:1c:a6:77:5f:93:f6:23:68:40:ca:ff:a1:
b2:d6:e4:a2:83:61:6d:4d:6b:31:77:d7:ef:59:27:87:af:01:
b0:92:48:37:de:ac:dd:d8:f0:4a:e9:5e:16:0b:96:75:dc:36:
41:b9:d6:af:a2:b9:09:1f:fa:b9:80:a0:e3:ac:4d:91:e4:3c:
13:c0:b9:9f:40:f8:f8:db:a6:7d:f9:6c:59:39:c9:c9:91:ba:
d7:b0:f8:0c:7f:06:d1:ff:57:f5:98:50:9d:f7:c4:a4:ac:a0:
ca:71:99:82:85:bd:94:b7:4a:a9:ff:76:bb:9e:b6:4d:e1:ab:
f0:a9:28:36:41:cc:b3:d2:10:36:93:e1:9d:d5:f1:58:5d:9a:
64:18:61:8d:6e:12:b3:e5:cb:48:75:d1:c5:30:7b:8d:e3:23:
6e:3a:f4:88:a2:dd:10:82:93:00:a1:13:5e:aa:e1:f4:ce:c6:
33:74:e4:a6:43:6f:86:f8:1e:83:eb:12:cb:f7:ab:47:91:e4:
03:bb:cd:04:b1:7f:86:01:06:e7:8d:e9:b2:97:99:5d:80:82:
84:a4:75:72:15:81:cc:a3:d4:39:0b:8e:99:70:ac:e2:4e:7f:
d2:6f:b6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:27 2025 by rpki-client