
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
File: sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft (raw, json)
Hash identifier: HfVoJdaycsALkzU3xufFlVypKQqsq3QFcQKuwJSswrk=
Subject key identifier: 34:74:5F:4A:E6:B2:61:01:DB:13:9E:A0:B3:B5:A3:1C:02:07:3B:8F
Authority key identifier: B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
Certificate issuer: /CN=b1040bc251fe02669f57fea572743a37acfbd557
Certificate serial: 0199FC8F785E995A5ECCFDC6FB5AE8D792C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
Manifest number: 0888
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl (hash: sHHAWwcnxpSAOgVNcONzHu73C1QfIpJb+QPya38l46s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:78:5e:99:5a:5e:cc:fd:c6:fb:5a:e8:d7:92:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1040bc251fe02669f57fea572743a37acfbd557
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=34745f4ae6b26101db139ea0b3b5a31c02073b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:8e:51:87:58:f0:47:f2:76:88:e2:f8:62:
77:6f:4f:b4:9a:e7:dc:79:ef:4e:ad:6d:3d:92:d0:
b6:24:33:d0:5e:a4:f3:9c:eb:bb:0a:39:14:00:f0:
6d:14:4a:34:57:11:b9:b4:3b:9d:cb:fe:19:f3:ef:
9e:c5:ba:f2:0c:10:3b:ab:66:b8:6f:27:64:dc:28:
bf:f4:06:b7:7e:77:98:38:cc:34:56:48:f9:21:07:
7c:c2:6a:33:d2:54:84:7c:5f:2c:08:b8:a9:35:59:
cd:a7:70:c8:b1:37:60:eb:57:18:f0:98:22:a3:36:
f2:15:3e:bf:40:7d:ce:2c:1c:8f:08:a8:a4:7a:59:
dd:0e:a3:2c:90:67:5c:3a:16:e4:02:73:a3:3f:fa:
98:c4:83:e9:4d:f9:d7:dd:b5:bf:b1:23:0f:67:3d:
de:9d:cf:c5:f9:dc:f4:18:43:20:e9:ab:4e:f7:61:
26:83:c6:de:44:bf:6a:c3:79:d7:3d:82:00:5d:f0:
6b:17:bb:7f:1c:59:44:7b:87:f3:d0:df:55:8a:36:
15:89:68:24:2f:58:6a:a6:ca:ed:38:23:45:ad:02:
ae:4b:a1:00:8e:5d:dd:3a:de:55:32:6e:75:cf:5f:
7f:63:8e:2e:09:97:25:4b:c5:2c:87:b0:19:e9:85:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:74:5F:4A:E6:B2:61:01:DB:13:9E:A0:B3:B5:A3:1C:02:07:3B:8F
X509v3 Authority Key Identifier:
keyid:B1:04:0B:C2:51:FE:02:66:9F:57:FE:A5:72:74:3A:37:AC:FB:D5:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQQLwlH-AmafV_6lcnQ6N6z71Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1305d7-3a16-4623-b74e-eeaf20ebf8ef/1/sQQLwlH-AmafV_6lcnQ6N6z71Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:55:3a:b2:fd:a1:ba:96:ea:c0:3b:0a:34:c5:64:e8:1d:69:
86:b1:58:6b:1c:93:18:40:db:c5:a1:7d:5c:cd:6b:a6:e7:28:
3a:99:4e:af:81:eb:54:d6:b1:e4:72:9a:f5:26:46:95:63:4c:
cd:6a:86:55:f9:b8:c7:d6:2d:ee:9b:cc:9e:d5:2c:13:03:de:
57:bb:f6:00:1f:72:41:2e:20:26:eb:61:3f:87:8c:c3:a7:d8:
99:23:cc:d6:8c:fe:6e:33:34:0a:c5:87:52:e5:0e:66:0e:18:
fc:ae:77:23:e0:b0:38:97:86:d6:7f:f9:b1:57:a5:25:7e:32:
ac:00:bd:a0:e4:74:6e:63:c8:bb:78:98:da:a1:3a:ae:9a:81:
2a:76:4e:a1:20:e2:89:b2:78:09:ef:61:5f:a7:f5:70:2a:e6:
b6:fc:14:12:a1:ef:7f:d9:a2:d9:f1:a8:e4:83:eb:db:29:75:
3f:be:59:29:b4:9b:42:98:9b:98:89:53:86:d1:86:a2:14:18:
57:ad:cc:4a:79:62:43:b4:ec:88:0c:d1:3b:6e:cc:0a:8a:93:
de:1d:44:9b:3f:fb:5d:67:9b:21:bb:a0:e3:13:3e:7b:5b:6f:
7d:1a:8c:cd:b2:99:20:eb:f1:de:1a:96:05:42:cc:e6:13:e3:
61:33:c9:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn8j3hemVpezP3G+1ro15LAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDQwYmMyNTFmZTAyNjY5ZjU3ZmVhNTcyNzQzYTM3YWNm
YmQ1NTcwHhcNMjUxMDE5MTMwMTI0WhcNMjUxMDIwMTMwMTI0WjAzMTEwLwYDVQQD
EygzNDc0NWY0YWU2YjI2MTAxZGIxMzllYTBiM2I1YTMxYzAyMDczYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoeOUYdY8Efydoji+GJ3b0+0mufc
ee9OrW09ktC2JDPQXqTznOu7CjkUAPBtFEo0VxG5tDudy/4Z8++exbryDBA7q2a4
bydk3Ci/9Aa3fneYOMw0Vkj5IQd8wmoz0lSEfF8sCLipNVnNp3DIsTdg61cY8Jgi
ozbyFT6/QH3OLByPCKikelndDqMskGdcOhbkAnOjP/qYxIPpTfnX3bW/sSMPZz3e
nc/F+dz0GEMg6atO92Emg8beRL9qw3nXPYIAXfBrF7t/HFlEe4fz0N9VijYViWgk
L1hqpsrtOCNFrQKuS6EAjl3dOt5VMm51z19/Y44uCZclS8Ush7AZ6YUnPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDR0X0rmsmEB2xOeoLO1oxwCBzuPMB8GA1UdIwQY
MBaAFLEEC8JR/gJmn1f+pXJ0Ojes+9VXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUt
ZWVhZjIwZWJmOGVmLzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi8xMzA1ZDctM2ExNi00NjIzLWI3NGUtZWVhZjIwZWJmOGVm
LzEvc1FRTHdsSC1BbWFmVl82bGNuUTZONno3MVZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIVU6sv2h
upbqwDsKNMVk6B1phrFYaxyTGEDbxaF9XM1rpucoOplOr4HrVNax5HKa9SZGlWNM
zWqGVfm4x9Yt7pvMntUsEwPeV7v2AB9yQS4gJuthP4eMw6fYmSPM1oz+bjM0CsWH
UuUOZg4Y/K53I+CwOJeG1n/5sVelJX4yrAC9oOR0bmPIu3iY2qE6rpqBKnZOoSDi
ibJ4Ce9hX6f1cCrmtvwUEqHvf9mi2fGo5IPr2yl1P75ZKbSbQpibmIlThtGGohQY
V63MSnliQ7TsiAzRO27MCoqT3h1Emz/7XWebIbug4xM+e1tvfRqMzbKZIOvx3hqW
BULM5hPjYTPJzw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:33:32 2025 by rpki-client