Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
File: q-KqqfiJDkQV40HAd9hnvuJaodE.mft (raw, json)
Hash identifier: N3uP+RIiK1bPjRPxYOg9zwWVJ5OloReWwR+jOCMYUWs=
Subject key identifier: 9F:C4:85:53:09:E8:04:40:CE:A8:1D:23:76:37:95:01:3B:1C:46:4D
Authority key identifier: AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
Certificate issuer: /CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Certificate serial: 0199FC8F31A49F88507A966A8BDCBB94E0BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
Manifest number: 0139
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: q-KqqfiJDkQV40HAd9hnvuJaodE.crl (hash: VKq0anB80cLIzeAJOdEYtUsT/YolmAz1OYCXM+BxULA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:31:a4:9f:88:50:7a:96:6a:8b:dc:bb:94:e0:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=9fc4855309e80440cea81d23763795013b1c464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3b:0b:4d:e2:8e:8f:d9:f6:cb:3c:2b:67:1d:
dc:5c:8b:ef:16:86:83:39:1e:ba:bc:98:a4:52:e9:
7d:ce:b1:4b:ec:0d:a3:e6:21:7b:75:0c:82:e7:39:
01:f9:19:8c:cc:7c:05:fb:1c:82:cc:66:85:1e:c5:
e8:12:cf:4f:21:f4:fe:e2:49:6f:b4:8e:93:bc:f2:
0b:7e:7c:92:f9:94:4b:91:f5:9a:7e:57:76:a9:80:
20:b8:cc:a0:f3:eb:62:48:4e:83:7a:e9:37:7c:8f:
af:18:81:53:61:0d:43:09:b4:4a:90:25:0b:a2:3b:
f1:26:ea:64:1a:07:e9:e8:69:6d:38:82:85:2f:de:
b7:71:a2:e7:f6:8e:33:d6:f1:53:e5:5f:4a:86:72:
03:6f:77:60:3c:1f:fe:47:7f:de:9f:3b:5d:78:f7:
d5:09:c1:05:0d:b2:25:ab:00:39:5e:cf:71:45:b3:
89:10:4d:85:b9:64:ed:20:7b:88:c2:93:14:76:36:
0e:0a:ba:30:40:fb:b9:c8:45:d5:f2:76:1b:fc:eb:
36:24:15:d0:64:2f:6d:22:99:bc:82:cd:8c:de:cf:
61:32:7f:aa:c0:1e:d8:49:be:f8:7f:a0:f1:1a:e9:
0a:0b:a9:b1:72:f3:ef:15:6c:44:bf:e6:bd:4d:15:
78:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:C4:85:53:09:E8:04:40:CE:A8:1D:23:76:37:95:01:3B:1C:46:4D
X509v3 Authority Key Identifier:
keyid:AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:8c:fb:28:fa:1e:7d:50:00:ca:6b:cf:41:96:0b:a5:9c:0c:
40:6a:2c:aa:f7:6c:fc:20:0c:da:36:8b:52:ea:77:78:c2:4d:
50:3f:13:6a:c5:da:fa:44:6c:f2:45:88:af:02:84:7d:f7:e9:
34:06:eb:ab:60:48:73:4b:66:49:86:0c:99:54:cc:68:48:83:
7e:a3:02:33:ff:8e:b0:16:05:f2:f8:0d:77:79:f1:16:65:cf:
55:b3:5b:38:8c:0a:6e:e3:cf:ba:d6:b0:34:58:12:40:b0:9b:
f3:ba:27:ed:bd:b5:7d:99:23:d4:3e:74:6c:ca:8c:44:c9:0f:
cb:7a:f7:63:90:58:f9:ac:d1:2e:13:7d:f3:68:70:89:f0:38:
ea:d7:65:dd:9f:04:56:c2:2b:83:da:74:82:2d:50:02:49:0e:
76:7a:c0:24:71:68:f2:cc:66:c8:63:36:35:4a:a2:a9:aa:4f:
46:ca:ac:55:b2:a4:d0:70:9b:4f:50:7b:29:9b:c7:10:75:f1:
24:84:4f:0f:f0:d5:c8:51:26:3c:28:f0:a8:68:24:79:d3:6e:
48:61:5c:2d:fa:2f:f0:ad:99:f2:3b:a8:c1:d2:ab:f7:91:64:
73:08:6c:72:38:fa:f9:2d:38:10:21:cc:44:cb:f7:ab:13:42:
95:df:70:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:41:32 2025 by rpki-client