Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
File: qyt5QmiS7R2nsuYYZ3DPsErmA80.mft (raw, json)
Hash identifier: TnXEgRrpRIw1HTrtT10ujgj1bUSel4byME8+GlqpNAU=
Subject key identifier: 30:66:23:F0:EA:DC:6E:53:21:0C:27:1C:62:14:1D:62:8E:1C:77:8B
Authority key identifier: AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
Certificate issuer: /CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Certificate serial: 019A0259AE51C29514109D427A6635C916E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
Manifest number: 098B
Signing time: Mon 20 Oct 2025 16:00:23 +0000
Manifest this update: Mon 20 Oct 2025 16:00:23 +0000
Manifest next update: Tue 21 Oct 2025 16:00:23 +0000
Files and hashes: 1: qyt5QmiS7R2nsuYYZ3DPsErmA80.crl (hash: 2M3gfjbJI7hP6X6pklmBxoVY5dnM8BL/814wNYiaGR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:ae:51:c2:95:14:10:9d:42:7a:66:35:c9:16:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2b79426892ed1da7b2e6186770cfb04ae603cd
Validity
Not Before: Oct 20 16:00:23 2025 GMT
Not After : Oct 21 16:00:23 2025 GMT
Subject: CN=306623f0eadc6e53210c271c62141d628e1c778b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:83:fa:87:11:cc:bc:c1:de:54:a7:b2:2a:
77:12:14:54:3f:70:00:21:10:39:97:27:a9:26:18:
32:d7:bf:a6:0d:c7:3b:ac:8e:83:91:e3:c5:c7:9c:
11:78:80:7e:8d:e5:e9:92:16:e6:fa:bb:5e:24:d8:
82:c7:28:bf:27:64:f1:ed:86:8b:24:c9:ae:30:40:
b1:80:48:7a:45:d4:c2:8c:42:40:af:30:c7:01:5e:
4f:49:73:09:2d:d5:0a:79:08:d8:9a:fb:59:86:6e:
45:19:54:9e:13:b7:91:6e:c6:52:7e:d2:d5:5b:12:
1b:1b:66:dc:86:88:eb:93:26:c3:d6:a7:f2:c7:26:
89:e6:df:da:59:7b:14:fe:87:96:ae:38:aa:1d:6f:
ef:d3:9c:70:0b:4c:e1:14:cd:0f:6a:3a:28:ee:99:
df:6a:43:c2:a3:ae:31:7b:98:3c:f7:38:60:2d:e1:
e7:98:c5:00:b4:82:07:5f:98:74:e4:fa:31:4f:1a:
fa:62:07:43:b2:ed:ea:7a:cb:a8:9a:f6:03:a8:de:
ad:0b:ae:ea:da:5e:89:d6:7e:10:1b:25:c0:a0:38:
e5:74:e7:cf:8c:f3:f2:e4:5d:8a:e5:b1:ee:69:da:
c3:a1:7f:a4:1e:db:47:9e:4e:6d:c7:3c:32:49:f5:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:66:23:F0:EA:DC:6E:53:21:0C:27:1C:62:14:1D:62:8E:1C:77:8B
X509v3 Authority Key Identifier:
keyid:AB:2B:79:42:68:92:ED:1D:A7:B2:E6:18:67:70:CF:B0:4A:E6:03:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qyt5QmiS7R2nsuYYZ3DPsErmA80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a26050-49ec-4955-9810-e5453707a58e/1/qyt5QmiS7R2nsuYYZ3DPsErmA80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:22:69:46:ba:2d:33:1c:9b:93:6a:9f:4b:eb:67:3d:04:98:
92:41:db:f6:6b:9c:d5:86:da:f4:43:83:5d:f5:44:30:93:db:
1e:99:67:0e:ff:5b:02:30:e1:d2:e9:c4:07:ba:43:0f:f8:26:
0a:ec:5e:0c:6d:4f:aa:b4:78:d3:dc:e7:b9:4b:12:2d:77:70:
54:ce:0c:75:49:ee:76:10:e9:cd:bb:0b:c2:a4:e7:4d:aa:75:
15:ad:b9:6b:2b:9b:aa:c1:65:ba:51:88:ad:76:9f:50:52:30:
fc:30:2f:a5:38:e1:f9:10:a0:59:a6:4e:4d:7d:a1:08:4a:a6:
41:63:d7:0e:49:50:ff:b3:33:c4:a4:f8:88:f1:0e:64:db:d9:
ec:fd:28:58:ee:5f:bf:e0:77:23:62:3f:f3:a3:bf:fd:b1:ff:
4d:a2:84:71:06:f6:75:6d:2b:54:96:1f:7c:fd:a4:fc:d4:94:
9c:ef:3d:0e:b4:96:96:2c:55:e2:ee:f9:42:7b:45:ba:5c:c6:
31:b5:60:88:1d:eb:28:16:bf:8f:98:91:3f:56:2a:b4:34:17:
bf:33:f8:82:46:0e:cb:ec:f5:ad:76:55:a6:d5:22:b1:68:9f:
29:f5:8e:d3:ab:1d:09:ba:d0:29:88:b0:41:d6:89:1e:51:a4:
4d:08:66:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:18:38 2025 by rpki-client