Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
File: qdM_4RuZSVFsHx3YFOJOR0U6npY.mft (raw, json)
Hash identifier: R6RyL0aBBZ6mqIxGrB/9I/WzcA5vgCxLjjP/SKvNeA0=
Subject key identifier: 46:CE:42:1F:93:8A:F6:3C:26:B1:7E:F6:87:85:2A:FD:FB:DC:9F:57
Authority key identifier: A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
Certificate issuer: /CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Certificate serial: 0199FC21A479D607B47019522ABBEF6BA752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
Manifest number: 02EE
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: qdM_4RuZSVFsHx3YFOJOR0U6npY.crl (hash: hmh8OD9h2/wxNit1hTQgEvFzK1wtjVt+9VfeR+FlEos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a4:79:d6:07:b4:70:19:52:2a:bb:ef:6b:a7:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d33fe11b9949516c1f1dd814e24e47453a9e96
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=46ce421f938af63c26b17ef687852afdfbdc9f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:4a:17:3c:c0:b7:99:55:24:1a:db:06:c2:
23:91:39:a6:85:7c:d0:94:81:66:58:45:1a:da:52:
b1:ee:48:54:1e:ac:88:5b:df:8e:58:12:65:cb:1a:
9e:4c:59:74:5d:35:ff:da:d6:cc:5e:29:a6:28:07:
37:b4:6b:ab:c7:a8:b1:b8:6d:91:70:d1:63:1f:50:
52:2e:dd:31:14:de:ec:99:22:d8:29:e6:4b:7a:cf:
96:de:63:07:6b:6b:eb:01:90:e2:9c:25:ac:03:df:
18:cd:e4:c4:ad:43:8f:3c:3e:05:42:e0:f6:5c:80:
f6:5b:76:9d:66:06:a6:d5:a0:fc:a1:aa:13:8d:67:
1e:fd:7a:fd:a0:9c:1f:22:20:b2:0c:62:4e:a9:c9:
39:fd:e1:ea:5e:3b:77:8c:34:22:68:63:32:09:d9:
65:3d:bd:3d:03:83:b3:4a:9c:f2:19:92:6f:b1:63:
6a:04:de:49:58:30:39:97:03:b1:e5:3c:1b:66:a5:
ca:50:e0:c7:5e:d5:dd:85:6d:73:df:ac:74:ed:df:
ba:e6:63:8d:df:95:72:98:a2:57:d4:c4:df:36:0f:
8b:c8:65:35:29:72:d9:6c:69:67:e8:6f:e3:d0:9a:
66:bf:be:36:26:cd:40:f8:35:a0:bb:28:fb:dc:52:
e9:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CE:42:1F:93:8A:F6:3C:26:B1:7E:F6:87:85:2A:FD:FB:DC:9F:57
X509v3 Authority Key Identifier:
keyid:A9:D3:3F:E1:1B:99:49:51:6C:1F:1D:D8:14:E2:4E:47:45:3A:9E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdM_4RuZSVFsHx3YFOJOR0U6npY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/56cf38-d7ab-40c3-9f09-6802083de211/1/qdM_4RuZSVFsHx3YFOJOR0U6npY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5e:5d:5c:f7:92:68:2d:9f:d8:55:b7:03:34:b4:bc:09:3a:
34:6e:89:ea:57:71:77:08:a3:91:89:59:2c:b3:5e:d8:08:8b:
8d:0d:db:c4:0a:dd:30:56:bd:f8:75:e4:2a:b0:98:49:d2:1f:
80:3d:84:af:b4:4e:4e:32:95:b6:42:24:b1:21:78:b1:b5:d0:
05:3f:74:3c:35:6e:98:de:da:16:59:a0:9e:c4:f4:d7:62:27:
cb:31:90:07:0a:f3:0e:fb:9e:98:46:3d:43:27:86:5a:47:01:
a5:dc:29:f2:ac:41:e2:2e:46:b1:2b:7e:62:bd:87:74:09:ef:
a4:36:ec:d8:58:f9:de:0b:ff:42:8c:01:3a:60:47:1d:59:27:
7b:39:71:5c:f9:c4:f7:e0:2c:c0:03:e2:74:9c:52:30:81:dc:
bf:e7:d1:59:7e:90:06:4f:f6:d1:88:de:7d:b5:08:c7:1c:25:
05:af:19:c4:52:0c:16:be:5f:26:51:4f:a6:81:49:9e:f2:20:
69:d2:f2:5f:b2:57:b1:76:4a:28:99:75:21:ea:b6:db:b0:19:
00:7c:b8:0f:25:70:64:11:7d:d4:7e:ac:8b:1b:79:cf:80:c7:
4a:00:66:81:bd:fd:8b:00:4a:00:48:7f:87:eb:4a:54:ec:02:
3c:ea:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:51 2025 by rpki-client