
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: cEa0pHISLFeHbLCfEucsjqzgCV0bVkRzxzEGceWi3Rw=
Subject key identifier: A8:0E:B3:4D:6F:91:1B:8A:88:3E:A3:EB:0E:67:9C:6F:8E:A8:AA:66
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 0199FBEB82D007A4528DC3EFB4E5793ECB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 07B6
Signing time: Sun 19 Oct 2025 10:02:19 +0000
Manifest this update: Sun 19 Oct 2025 10:02:19 +0000
Manifest next update: Mon 20 Oct 2025 10:02:19 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: 43YqlAZoSJrrBVoWsvzX4+ZTsrH0Jcqw9diSBzqev0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:82:d0:07:a4:52:8d:c3:ef:b4:e5:79:3e:cb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Oct 19 10:02:19 2025 GMT
Not After : Oct 20 10:02:19 2025 GMT
Subject: CN=a80eb34d6f911b8a883ea3eb0e679c6f8ea8aa66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a2:40:51:34:2e:bd:b8:5b:18:ea:e7:94:b8:
4a:9a:0f:b4:04:4c:03:4d:6e:5f:97:64:5a:f0:e3:
17:3f:6f:07:7b:f9:cf:17:63:36:92:ef:1a:ff:bb:
15:cb:17:fe:0b:3e:5b:eb:0e:1c:27:72:a9:00:75:
6f:da:06:dc:b9:a8:2e:5d:32:5e:3b:69:2b:9f:37:
80:c0:d2:61:d7:51:7e:d9:a4:e6:39:61:8a:5f:9c:
70:69:9e:48:19:13:35:69:df:59:f6:d8:5b:1b:3d:
5a:d6:a4:b6:4d:a5:b9:56:dd:e1:13:46:e1:4e:bc:
63:b9:14:32:22:42:d8:71:1d:91:51:4d:9a:b1:aa:
f4:f5:2d:e9:b1:ed:2e:9d:e9:77:11:b4:86:6a:78:
5e:da:e2:90:de:a8:40:da:b7:c2:a0:e9:26:19:7d:
7a:2d:9b:5f:b0:25:32:2d:db:04:91:13:b0:63:ae:
a5:fe:a7:3c:9d:b7:5b:3d:35:03:01:3b:66:13:41:
cf:b6:25:6e:26:a4:30:8c:23:36:21:bf:a2:7e:26:
40:36:7a:07:ba:94:04:43:47:48:b0:cd:3f:0a:29:
90:9c:2a:02:34:2f:69:d1:63:3f:2e:82:dd:b9:54:
b7:31:ed:67:68:5a:62:66:0e:7d:9c:88:b6:1c:47:
78:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0E:B3:4D:6F:91:1B:8A:88:3E:A3:EB:0E:67:9C:6F:8E:A8:AA:66
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:64:5c:7f:4f:f8:9b:c8:60:7e:86:4d:bd:0a:c0:be:e5:76:
a2:90:76:9a:17:75:05:7d:72:7b:c6:21:e9:28:9e:e0:2e:80:
ca:a7:bd:7c:23:a6:c7:56:ca:3a:7f:c6:c3:37:07:fa:bd:6b:
96:04:15:27:e3:f2:0b:15:06:27:6f:f6:58:b2:e9:35:52:2b:
c7:4a:fe:87:7b:b8:d3:33:bc:be:e6:d8:be:6d:2d:b3:5d:13:
45:e0:14:e1:10:40:1d:82:55:70:45:e8:33:3a:6e:19:dc:3b:
42:ff:c2:7c:33:7c:5a:72:47:f2:08:33:59:39:99:52:12:7a:
bb:9a:9d:bc:8a:61:d3:5d:09:68:f2:be:6e:21:c4:f6:00:62:
7e:57:0c:ea:50:a3:35:24:3b:e9:f4:4d:9e:a1:93:1a:3d:33:
19:97:df:81:d8:ee:df:9f:0b:ee:16:c0:da:65:eb:bd:d4:8c:
e9:a9:b2:38:f7:4d:c9:97:de:38:74:50:2c:d6:9c:02:d2:78:
fb:22:79:6b:dc:da:70:45:21:72:13:1a:87:a7:e9:44:db:a4:
cf:ac:2a:5e:3a:0b:98:31:2e:88:2d:ea:e0:92:66:3c:c4:49:
dc:95:8e:fa:b7:79:b6:6d:0a:1b:78:b6:24:74:93:aa:a5:a7:
c3:a0:1e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:37 2025 by rpki-client