Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: sLtHSJzTe+jm6hZCltyWF1xm4ElKEI/CN+uidv6wCcM=
Subject key identifier: 8F:FD:0E:77:B1:FC:89:95:E0:F6:1E:5D:70:FA:80:62:25:30:7F:68
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 0199FBEBE24B63DFE0615DD7DBF1F84C4F38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: z7wIbGxoRY7IhsFE1bxfZ/ARy0qWQXrPQJWEvlRgI/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e2:4b:63:df:e0:61:5d:d7:db:f1:f8:4c:4f:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=8ffd0e77b1fc8995e0f61e5d70fa806225307f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:45:2f:22:80:95:5a:ae:ae:18:c7:8a:72:79:
cb:8c:27:44:e9:7c:a8:c0:a9:91:00:2e:73:0d:2f:
80:ba:dd:da:db:08:98:5a:df:38:50:3d:29:d1:37:
5d:fd:41:cc:01:5d:d2:f6:bd:78:03:27:71:29:c9:
54:48:3d:8c:2c:91:21:16:e5:73:12:44:b4:0a:97:
bd:f7:2e:4b:8b:2d:1f:36:5d:71:86:07:ec:d6:12:
68:9c:85:d2:65:85:be:c2:9e:41:12:0f:c1:0c:65:
18:2a:c9:93:4b:fe:7b:b2:55:0e:1e:cb:3f:b4:f7:
39:3b:5b:94:9d:14:07:94:92:28:8a:56:d8:0b:a0:
ef:07:59:31:6a:1e:5f:d2:61:f9:eb:57:6f:be:0e:
a6:fa:fa:6d:0c:0e:53:cf:2a:08:99:47:38:12:27:
36:0f:3b:72:df:8c:02:ea:4e:6a:31:a8:e9:ce:f1:
31:e0:4b:9e:13:20:e9:4e:88:e0:93:09:60:91:42:
29:5b:d5:c5:4c:a1:86:58:24:b5:53:93:20:38:d7:
6f:fb:87:1c:da:d2:63:62:2c:5d:e8:8f:82:46:bd:
11:4f:1c:12:8e:49:a5:8f:84:2f:db:1e:40:cd:76:
47:60:23:97:18:7a:d7:4b:e9:72:ab:58:9c:99:c4:
e9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:FD:0E:77:B1:FC:89:95:E0:F6:1E:5D:70:FA:80:62:25:30:7F:68
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:1a:e8:e1:20:0e:6d:06:ff:13:a9:27:2c:4c:96:ca:4b:
eb:f1:7b:2a:1d:5e:d7:7d:2e:a2:da:56:35:90:56:b9:c6:0f:
cb:22:21:59:47:23:b0:62:a1:8b:9d:84:41:c5:71:80:91:3b:
09:f1:84:a0:09:b4:0b:d7:a2:93:ff:f0:ae:84:70:b0:91:8e:
60:70:6e:92:76:e4:b9:71:b8:d1:39:70:3f:26:b2:02:b5:84:
d2:55:00:5c:bf:1c:95:93:55:96:1c:d4:61:44:e0:ae:ce:be:
94:b7:0c:c8:8b:b8:4b:57:aa:92:8e:fc:f0:ad:66:fd:f7:fe:
f8:95:6a:18:db:9c:37:89:7d:dd:c7:d8:42:4d:eb:14:5a:61:
86:69:39:96:f5:ae:72:5a:dd:5f:50:35:26:84:70:47:dc:0d:
ce:17:d5:3b:0f:05:c1:83:ac:c8:e8:13:08:a2:ac:59:0c:4d:
81:bc:32:a9:f0:25:0d:8f:b3:17:ea:ff:4a:5a:42:68:03:ca:
0c:83:45:ad:7d:28:7c:f0:78:de:57:7b:83:ea:3e:9b:da:ec:
b0:4f:1e:71:28:7c:1d:a6:c6:31:b3:43:3f:29:ee:a6:32:85:
c6:fb:ff:b7:6c:02:ff:35:77:e0:1c:37:d1:6f:37:db:7c:b4:
c2:ee:f1:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:26 2025 by rpki-client