Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
File: sQBtYOzMF8WGM3oONk176YAd6fE.mft (raw, json)
Hash identifier: ynFNyj+NL8AK8eH44Wi7U4065z0Yonuxd00RbtDnWNc=
Subject key identifier: 5E:10:87:82:A5:B2:17:3D:EE:01:C8:07:AF:DC:B2:C5:5A:00:7A:21
Authority key identifier: B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
Certificate issuer: /CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Certificate serial: 0199FC58B8D591E4E0AF60DD3D7D2AE64254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
Manifest number: 1670
Signing time: Sun 19 Oct 2025 12:01:36 +0000
Manifest this update: Sun 19 Oct 2025 12:01:36 +0000
Manifest next update: Mon 20 Oct 2025 12:01:36 +0000
Files and hashes: 1: sQBtYOzMF8WGM3oONk176YAd6fE.crl (hash: dAL085vYH9wViQlQr81MipoiSES/1QkSftgVhfqUXs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b8:d5:91:e4:e0:af:60:dd:3d:7d:2a:e6:42:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1006d60eccc17c586337a0e364d7be9801de9f1
Validity
Not Before: Oct 19 12:01:36 2025 GMT
Not After : Oct 20 12:01:36 2025 GMT
Subject: CN=5e108782a5b2173dee01c807afdcb2c55a007a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f1:21:ac:49:b8:c4:6d:51:87:9e:0c:00:8f:
a1:15:c9:26:aa:34:4a:33:57:9f:d7:c9:f6:c3:18:
32:42:df:3f:39:62:37:db:c7:be:f8:83:8d:94:55:
0e:8b:6d:53:7b:80:21:62:4b:23:a6:6b:fc:bd:93:
46:3a:c5:d8:a5:db:6d:36:f3:c3:dc:6d:5e:76:18:
a6:fa:4d:a9:ae:68:fb:59:71:c4:db:b7:f5:44:22:
ba:a8:bd:46:f9:fb:f5:60:8e:f9:06:a1:46:6b:64:
a1:8e:56:76:a4:cd:d4:16:9a:7d:a6:90:67:fb:18:
18:fd:24:53:56:51:0f:e8:81:a0:b8:02:32:2e:e2:
64:3b:65:f3:56:70:d6:8d:cf:90:06:c8:dc:8c:4c:
91:0a:07:15:59:5c:48:90:ea:15:f6:ad:07:3c:95:
5a:55:22:33:47:20:ee:7a:1c:df:51:c5:cf:c1:f0:
98:af:45:7c:2d:70:13:83:69:44:e6:bf:a8:b3:6f:
ce:b8:f6:f8:0a:ab:90:5d:53:35:a5:cb:e4:3b:eb:
3c:82:67:7a:78:12:81:bf:e1:f5:01:55:51:94:52:
82:8c:b0:8e:7b:fd:9c:7c:32:45:04:ba:14:9d:99:
2a:1b:06:86:c5:52:f7:1d:48:f9:c7:93:47:cc:bd:
42:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:10:87:82:A5:B2:17:3D:EE:01:C8:07:AF:DC:B2:C5:5A:00:7A:21
X509v3 Authority Key Identifier:
keyid:B1:00:6D:60:EC:CC:17:C5:86:33:7A:0E:36:4D:7B:E9:80:1D:E9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQBtYOzMF8WGM3oONk176YAd6fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/d5d9a0-e655-45da-9442-56591571d161/1/sQBtYOzMF8WGM3oONk176YAd6fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d0:1d:b8:d5:a6:ff:18:33:a3:62:2c:c6:9b:31:9b:37:77:
a6:01:d4:71:10:93:2a:ba:7d:89:50:f6:d3:79:0f:2a:03:7c:
5f:80:cf:36:6c:bf:16:4b:bf:1b:bf:cf:4c:92:82:3b:d1:79:
bb:c7:8a:47:6e:a4:c5:23:69:91:b8:0a:54:f9:f5:30:0a:31:
41:65:95:b6:fb:13:8f:e0:24:a5:4b:f6:2c:be:ef:5d:e3:c9:
0a:19:5b:84:dd:b1:ac:ab:3e:ef:ce:d2:44:f0:36:63:d5:07:
fc:cd:ed:af:f5:99:43:23:89:b4:a4:bf:f9:30:f2:ff:c6:98:
ca:5e:b4:03:a5:81:fb:e2:01:a1:25:2e:5c:56:80:b1:9b:fb:
33:29:cf:42:0b:ce:9a:ef:ee:d0:49:04:00:ef:ea:41:39:4e:
19:fe:0d:d9:4f:c0:7f:38:b9:41:55:62:91:a0:f5:16:49:55:
e4:17:ec:25:2f:88:47:78:bb:40:63:34:8a:0d:9c:dd:50:7b:
87:29:e5:e2:26:10:ce:f8:58:68:71:2c:a3:64:00:ed:81:e9:
a4:34:da:95:11:90:cd:ab:db:69:c7:54:d0:08:91:21:6b:3b:
c9:4a:15:b6:aa:9a:7b:32:f0:19:48:ee:ea:2b:78:78:07:21:
8f:d9:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:17 2025 by rpki-client