Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
File: qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft (raw, json)
Hash identifier: bkyk2via2FbaqeJLKPwarYr6bTQCOiyNHV4HRSVD3Os=
Subject key identifier: 89:A0:BC:6A:6A:38:42:1D:37:66:51:8D:C0:35:86:17:B7:E7:CA:39
Authority key identifier: AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
Certificate issuer: /CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Certificate serial: 0199FE4774B96A30397296DF5CBDE97474E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
Manifest number: 0F65
Signing time: Sun 19 Oct 2025 21:01:59 +0000
Manifest this update: Sun 19 Oct 2025 21:01:59 +0000
Manifest next update: Mon 20 Oct 2025 21:01:59 +0000
Files and hashes: 1: qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl (hash: I5md6LBqvyoZQRhNb0rAsG+/d3NjxB0TFlPPyeLKDlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:74:b9:6a:30:39:72:96:df:5c:bd:e9:74:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa2a707938ba62fe19e6474dac787df3f8cfdee4
Validity
Not Before: Oct 19 21:01:59 2025 GMT
Not After : Oct 20 21:01:59 2025 GMT
Subject: CN=89a0bc6a6a38421d3766518dc0358617b7e7ca39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:8e:0c:9e:53:8e:94:b2:88:49:0a:44:c1:
8b:a1:31:fd:84:7a:1e:79:a4:2d:f4:18:8b:91:27:
09:bb:f2:29:87:68:4a:3c:10:61:bf:c4:14:d5:97:
f8:03:d1:fe:9c:d0:c2:79:01:fe:c6:25:bc:f0:6f:
f4:04:00:f9:d7:40:7e:83:2e:eb:7f:89:f7:8c:49:
2e:8b:b2:e8:2f:d8:61:52:3b:27:2d:8e:f2:1b:4f:
ce:f8:3d:8b:c1:2a:49:e2:e1:59:e5:14:da:86:9c:
85:46:d8:27:49:4e:9e:26:e8:3c:95:e6:7d:e9:74:
f3:c2:c3:10:16:97:0f:e4:9d:7b:6e:4f:40:94:7f:
9a:f5:a8:45:2e:cb:d6:85:c1:5f:60:8c:eb:ce:7b:
bb:74:e4:13:1a:1a:67:7c:43:06:43:67:fd:03:b6:
76:0b:35:ce:c8:74:ca:f2:f4:78:63:09:6f:83:27:
52:14:3c:d7:f1:0f:97:37:3a:17:b8:25:c7:a9:f7:
77:9c:34:cb:6b:14:ed:d8:4b:55:93:7e:78:c6:a9:
6c:6c:3f:9c:2f:a9:d7:c5:fe:18:81:e0:db:cf:28:
4c:6b:7b:cf:05:59:9e:fe:ee:89:89:1f:95:2e:8b:
a3:66:64:ea:13:5e:69:29:00:5d:78:aa:6d:ee:b4:
a1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:BC:6A:6A:38:42:1D:37:66:51:8D:C0:35:86:17:B7:E7:CA:39
X509v3 Authority Key Identifier:
keyid:AA:2A:70:79:38:BA:62:FE:19:E6:47:4D:AC:78:7D:F3:F8:CF:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qipweTi6Yv4Z5kdNrHh98_jP3uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/9d42ef-74a5-4f82-8a83-d716f4068139/1/qipweTi6Yv4Z5kdNrHh98_jP3uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e4:6c:82:88:48:14:27:b2:c0:d5:12:b8:42:fd:fa:f6:0f:
c9:22:cf:4d:f5:b4:d2:a0:c1:f9:9a:98:1a:9a:86:22:3c:c9:
2c:20:cd:79:fb:07:03:d2:6a:55:6c:81:fa:f6:3a:0e:e6:a7:
43:a5:c9:01:56:ea:4d:69:a6:77:f9:b7:78:89:78:e4:2f:7c:
0f:7d:96:5c:54:90:36:de:0e:5c:e3:78:7f:06:a0:ee:3d:d6:
cb:f8:d8:42:ef:c4:71:0b:c5:c4:0c:63:2d:8f:2b:95:e7:07:
b9:0e:c4:73:57:05:56:a3:c0:b2:b9:b8:85:1d:a3:e5:b7:67:
17:04:5c:a4:bb:b0:01:9d:17:0c:77:82:21:9e:d6:92:01:44:
b6:44:18:2e:70:34:0a:fd:52:48:12:c8:16:9c:da:3c:29:0d:
a3:ea:27:a5:c3:00:b1:e9:de:27:f0:d9:93:1c:18:91:3b:dd:
e1:06:e3:8b:59:a1:64:40:61:e2:0f:d6:ab:44:47:c1:1d:d2:
71:74:6b:89:bf:de:56:e5:40:70:5d:92:7c:56:81:04:30:ae:
1c:37:4e:57:24:a7:28:47:71:ff:6f:5d:48:80:28:83:67:64:
67:c0:bd:f8:53:36:b4:a9:e7:2c:11:45:0e:88:53:9f:02:5c:
29:1f:01:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+R3S5ajA5cpbfXL3pdHThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhMmE3MDc5MzhiYTYyZmUxOWU2NDc0ZGFjNzg3ZGYzZjhj
ZmRlZTQwHhcNMjUxMDE5MjEwMTU5WhcNMjUxMDIwMjEwMTU5WjAzMTEwLwYDVQQD
Eyg4OWEwYmM2YTZhMzg0MjFkMzc2NjUxOGRjMDM1ODYxN2I3ZTdjYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmiODJ5TjpSyiEkKRMGLoTH9hHoe
eaQt9BiLkScJu/Iph2hKPBBhv8QU1Zf4A9H+nNDCeQH+xiW88G/0BAD510B+gy7r
f4n3jEkui7LoL9hhUjsnLY7yG0/O+D2LwSpJ4uFZ5RTahpyFRtgnSU6eJug8leZ9
6XTzwsMQFpcP5J17bk9AlH+a9ahFLsvWhcFfYIzrznu7dOQTGhpnfEMGQ2f9A7Z2
CzXOyHTK8vR4YwlvgydSFDzX8Q+XNzoXuCXHqfd3nDTLaxTt2EtVk354xqlsbD+c
L6nXxf4YgeDbzyhMa3vPBVme/u6JiR+VLoujZmTqE15pKQBdeKpt7rSh8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFImgvGpqOEIdN2ZRjcA1hhe358o5MB8GA1UdIwQY
MBaAFKoqcHk4umL+GeZHTax4ffP4z97kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMt
ZDcxNmY0MDY4MTM5LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85ZDQyZWYtNzRhNS00ZjgyLThhODMtZDcxNmY0MDY4MTM5
LzEvcWlwd2VUaTZZdjRaNWtkTnJIaDk4X2pQM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX+RsgohI
FCeywNUSuEL9+vYPySLPTfW00qDB+ZqYGpqGIjzJLCDNefsHA9JqVWyB+vY6Duan
Q6XJAVbqTWmmd/m3eIl45C98D32WXFSQNt4OXON4fwag7j3Wy/jYQu/EcQvFxAxj
LY8rlecHuQ7Ec1cFVqPAsrm4hR2j5bdnFwRcpLuwAZ0XDHeCIZ7WkgFEtkQYLnA0
Cv1SSBLIFpzaPCkNo+onpcMAseneJ/DZkxwYkTvd4Qbji1mhZEBh4g/Wq0RHwR3S
cXRrib/eVuVAcF2SfFaBBDCuHDdOVySnKEdx/29dSIAog2dkZ8C9+FM2tKnnLBFF
DohTnwJcKR8B5A==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:07:27 2025 by rpki-client