Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: JjLoVCG+EQbAlITDR2+HRZvB4S2OTZ9CghyL17qffo0=
Subject key identifier: 2B:63:AD:B2:32:4F:CE:AC:57:50:8C:75:A0:3A:AB:37:08:A3:16:F3
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 0199FCC634EF9F2A68DA77466FF6A4C5DE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: qbT1eWdaLPB2EjcF9LgMtxD31Rm2yb03rJJA7uUfVQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:34:ef:9f:2a:68:da:77:46:6f:f6:a4:c5:de:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=2b63adb2324fceac57508c75a03aab3708a316f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:b4:63:44:48:42:60:ad:83:25:bd:c3:5e:
37:b6:4c:e4:38:cb:e2:ed:76:7a:1f:1e:82:83:62:
f9:a7:72:91:fb:96:65:84:1f:2e:be:ec:ed:dd:88:
a8:e5:41:93:6f:d9:8b:a0:6e:95:c7:06:fb:8a:57:
75:6a:56:21:0a:6d:06:85:df:16:38:ba:7c:32:67:
74:44:f3:56:8e:c7:38:9d:ca:24:e2:5a:48:67:50:
22:49:02:78:53:52:42:66:56:6b:55:93:85:57:f7:
79:7c:13:f2:23:e6:20:f3:d4:b2:bd:6f:d9:c2:a1:
63:b4:07:6a:2c:aa:fe:84:5c:97:ec:70:51:66:d4:
4b:80:8c:78:55:51:26:bb:20:6a:f7:66:f0:32:84:
2c:f7:e3:ef:a2:27:e1:87:88:3f:fa:f5:73:81:d1:
06:b5:c1:c2:8c:ca:14:3f:20:35:c6:30:62:fa:04:
6d:e3:be:3c:65:0b:31:18:8f:c5:97:86:28:e0:0b:
dd:f8:01:05:45:4d:55:e9:8c:9f:e0:05:c8:86:3e:
5d:b2:85:e8:01:3c:72:db:3b:92:c9:66:03:16:54:
4b:67:b1:06:71:54:f5:e2:42:9b:f4:8e:29:5a:0c:
db:60:ed:df:04:f4:c4:b2:d0:0f:f4:95:af:c0:df:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:63:AD:B2:32:4F:CE:AC:57:50:8C:75:A0:3A:AB:37:08:A3:16:F3
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:1b:8e:9b:7c:28:81:23:99:fb:49:c2:7d:32:67:7c:98:ed:
1e:40:a0:9f:77:ba:97:09:06:56:7e:05:4b:f8:e7:2c:dd:13:
6a:d9:53:a0:95:b2:b4:f5:9d:e0:85:39:fa:64:c8:87:25:88:
af:23:89:26:44:c5:fa:2a:26:14:cd:8d:a7:04:6b:06:4b:1b:
9d:bb:39:e7:fa:1b:fe:0a:0c:44:cb:f0:f4:56:0d:71:41:76:
57:96:99:37:d5:94:4e:66:3c:9b:66:f3:67:bb:f0:73:a9:50:
34:f8:82:0c:a3:20:9e:e3:9a:db:3d:6f:72:55:48:cc:81:ad:
dd:07:be:20:9c:d0:0c:f5:b0:e6:3e:00:20:90:1b:4d:f5:05:
eb:58:0c:84:9e:a1:84:a7:b9:3f:a5:78:11:00:6d:f6:30:31:
3c:42:36:60:ca:31:8d:dc:5b:94:e2:49:e4:93:41:63:e8:38:
81:aa:6c:b3:da:be:4b:f0:b4:7a:8c:f6:c0:9a:9f:dc:11:3a:
03:35:a1:b7:33:df:11:47:05:b3:3e:76:62:d7:a0:38:a4:d2:
34:6c:b4:7c:9b:eb:eb:c1:20:44:7a:32:67:cb:84:70:af:5b:
fc:e5:bc:2a:6c:79:ac:08:2b:48:99:bc:95:11:55:b2:b8:59:
89:68:f1:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:59:18 2025 by rpki-client