Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
File: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft (raw, json)
Hash identifier: hRGIANWFywPnwhMzN246izmYl8MK3K3gxIk7TeXtvn0=
Subject key identifier: E6:0A:CF:B6:E1:CB:32:5F:A6:32:37:2D:E6:92:2D:8F:69:18:81:AA
Authority key identifier: AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
Certificate issuer: /CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Certificate serial: 019A006C6761FC7F5F77849419C1835B877B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
Manifest number: 1654
Signing time: Mon 20 Oct 2025 07:01:35 +0000
Manifest this update: Mon 20 Oct 2025 07:01:35 +0000
Manifest next update: Tue 21 Oct 2025 07:01:35 +0000
Files and hashes: 1: qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl (hash: pPm379rw1YJ+kujERRN9xyPm5qKuaRbVhnMhXTsDNYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:67:61:fc:7f:5f:77:84:94:19:c1:83:5b:87:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab3a9d1fc99f252f2258f682ab3fc5835bd2f725
Validity
Not Before: Oct 20 07:01:35 2025 GMT
Not After : Oct 21 07:01:35 2025 GMT
Subject: CN=e60acfb6e1cb325fa632372de6922d8f691881aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:09:1e:fc:44:31:a3:d7:70:e9:f8:e7:36:16:
27:ab:55:b2:95:21:d5:90:76:d0:dc:8e:22:40:0f:
86:85:0b:31:e6:21:d8:73:0d:aa:b9:6b:b3:11:8b:
25:1b:ee:55:62:20:16:cf:71:1d:59:bf:35:63:46:
77:a6:d8:5e:67:a4:c3:a3:10:47:26:e0:e2:6a:4e:
5e:df:bf:d1:27:45:0a:6a:27:bf:12:97:44:43:95:
b1:58:78:8e:3b:b2:15:93:cf:fa:d5:e4:cb:99:be:
7a:55:ac:bd:82:3e:ca:95:ff:e0:ff:4a:3e:02:92:
17:4c:c0:e2:ab:59:33:6b:99:c9:cd:32:0b:58:02:
ac:3f:02:e7:47:7e:1c:29:3f:16:e0:a4:7d:83:39:
0c:6c:5e:da:d7:18:0d:b1:a6:ff:f6:d0:a7:18:62:
4f:51:4c:82:8b:19:83:56:6e:ae:0c:97:be:4d:44:
77:ec:2b:3c:19:9e:d8:21:60:a2:c8:e7:38:83:09:
2a:5a:43:22:81:6e:0f:10:bc:1c:75:90:3f:8b:3f:
5a:f0:60:55:c4:91:4d:9a:f8:1a:e2:3c:3d:10:ba:
05:a4:7b:85:ec:f2:da:df:3a:8c:8f:91:ef:56:9b:
69:ee:90:7a:1b:c0:7e:fe:33:b2:cd:fa:65:28:ce:
2a:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:0A:CF:B6:E1:CB:32:5F:A6:32:37:2D:E6:92:2D:8F:69:18:81:AA
X509v3 Authority Key Identifier:
keyid:AB:3A:9D:1F:C9:9F:25:2F:22:58:F6:82:AB:3F:C5:83:5B:D2:F7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/36b92f-65db-4c0a-9356-e316aa1f16b3/1/qzqdH8mfJS8iWPaCqz_Fg1vS9yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:64:59:a4:b8:2a:30:6b:e1:86:0f:39:10:e6:8a:3a:d0:38:
2b:2d:75:39:b1:5e:88:dd:24:05:8d:6d:1b:d3:e4:72:91:06:
e1:b2:17:3e:74:a8:f5:4d:b8:1e:6b:11:2a:d1:05:22:a6:bf:
9a:85:57:a9:4a:ed:64:41:fa:f3:c2:ea:da:90:15:68:57:3e:
fe:59:4b:cf:f3:45:f6:80:f7:a8:8c:b4:33:ea:a9:f0:e0:43:
ae:96:19:38:81:0f:e3:be:18:eb:03:58:1f:e4:bc:67:2f:21:
56:e9:13:34:22:62:a3:33:57:56:ac:b6:86:94:ac:2b:f5:3c:
1b:47:cc:4e:89:ff:2d:cb:70:56:d8:d7:b9:91:86:05:34:6c:
4d:13:f6:c0:65:b2:fe:b5:15:96:57:ee:07:a4:cc:19:a8:73:
76:78:b5:58:9b:fa:d4:0b:4a:1a:e4:e3:48:9d:4e:dd:db:18:
0a:df:c7:00:af:a6:e7:83:cc:0e:81:16:a3:58:4d:20:02:ab:
94:5a:72:d6:cc:7b:1d:35:f0:06:c1:8e:49:0a:bc:53:dd:e8:
9f:3a:58:61:e0:54:e3:b7:e3:84:e7:50:1c:52:fa:2a:59:05:
ae:f3:5a:db:8d:f0:51:ac:7d:62:f3:ad:7c:c8:2f:3a:cc:dd:
26:ac:9f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoAbGdh/H9fd4SUGcGDW4d7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiM2E5ZDFmYzk5ZjI1MmYyMjU4ZjY4MmFiM2ZjNTgzNWJk
MmY3MjUwHhcNMjUxMDIwMDcwMTM1WhcNMjUxMDIxMDcwMTM1WjAzMTEwLwYDVQQD
EyhlNjBhY2ZiNmUxY2IzMjVmYTYzMjM3MmRlNjkyMmQ4ZjY5MTg4MWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQke/EQxo9dw6fjnNhYnq1WylSHV
kHbQ3I4iQA+GhQsx5iHYcw2quWuzEYslG+5VYiAWz3EdWb81Y0Z3ptheZ6TDoxBH
JuDiak5e37/RJ0UKaie/EpdEQ5WxWHiOO7IVk8/61eTLmb56Vay9gj7Klf/g/0o+
ApIXTMDiq1kza5nJzTILWAKsPwLnR34cKT8W4KR9gzkMbF7a1xgNsab/9tCnGGJP
UUyCixmDVm6uDJe+TUR37Cs8GZ7YIWCiyOc4gwkqWkMigW4PELwcdZA/iz9a8GBV
xJFNmvga4jw9ELoFpHuF7PLa3zqMj5HvVptp7pB6G8B+/jOyzfplKM4qFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYKz7bhyzJfpjI3LeaSLY9pGIGqMB8GA1UdIwQY
MBaAFKs6nR/JnyUvIlj2gqs/xYNb0vclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYt
ZTMxNmFhMWYxNmIzLzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS8zNmI5MmYtNjVkYi00YzBhLTkzNTYtZTMxNmFhMWYxNmIz
LzEvcXpxZEg4bWZKUzhpV1BhQ3F6X0ZnMXZTOXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ2RZpLgq
MGvhhg85EOaKOtA4Ky11ObFeiN0kBY1tG9PkcpEG4bIXPnSo9U24HmsRKtEFIqa/
moVXqUrtZEH688Lq2pAVaFc+/llLz/NF9oD3qIy0M+qp8OBDrpYZOIEP474Y6wNY
H+S8Zy8hVukTNCJiozNXVqy2hpSsK/U8G0fMTon/LctwVtjXuZGGBTRsTRP2wGWy
/rUVllfuB6TMGahzdni1WJv61AtKGuTjSJ1O3dsYCt/HAK+m54PMDoEWo1hNIAKr
lFpy1sx7HTXwBsGOSQq8U93onzpYYeBU47fjhOdQHFL6KlkFrvNa243wUax9YvOt
fMgvOszdJqyf9w==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:20 2025 by rpki-client