Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: eqvK2zt/KhC/cIudLcE7djSa5VUf0ysaPXoE/I0Z6P0=
Subject key identifier: A9:B6:AF:57:E4:9B:5D:7E:99:11:57:45:1D:06:7B:29:AE:19:BC:C6
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 0199FDDA66B811EA3061CFEB4278575F4CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:52 +0000
Manifest this update: Sun 19 Oct 2025 19:02:52 +0000
Manifest next update: Mon 20 Oct 2025 19:02:52 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: HEts6ng3zjhY9/fl+NYbIBphceKe41abBUESymkYGDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:66:b8:11:ea:30:61:cf:eb:42:78:57:5f:4c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Oct 19 19:02:52 2025 GMT
Not After : Oct 20 19:02:52 2025 GMT
Subject: CN=a9b6af57e49b5d7e991157451d067b29ae19bcc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ad:68:ff:f1:cc:af:ef:ad:ab:ee:a9:97:13:
c1:51:2b:73:23:5f:48:6a:f0:63:44:40:53:99:c7:
24:55:85:21:6a:3e:19:83:ff:e6:0e:88:62:08:f9:
2e:91:a9:f0:c4:5d:47:df:dd:68:28:ff:b6:82:c5:
8b:22:b1:0f:3a:84:81:56:62:c6:cd:42:2b:6d:ef:
0a:c3:52:07:ea:68:04:a7:26:44:e0:cd:b9:f4:f2:
6a:32:48:a8:cc:59:69:33:9c:4f:e7:90:56:c9:64:
00:43:5e:bd:09:2e:2a:20:32:89:2f:ba:fb:ff:c7:
8a:c3:6f:09:06:a0:c7:e3:ac:b5:f8:55:8c:fd:02:
45:1d:ec:e6:ef:50:94:7d:7b:a6:22:fd:61:2c:d0:
1d:00:c9:d2:be:cc:e4:dd:0e:2f:e3:dc:19:41:29:
fd:76:5c:c6:77:b4:d3:c7:3a:e1:1a:ec:ad:5f:e7:
c3:38:f4:d5:65:b5:eb:bc:d8:9b:0f:5d:9f:83:f3:
c5:b3:d3:b3:f1:52:e0:7b:16:ef:5f:fb:39:4c:21:
28:48:18:85:be:36:b1:de:8a:e2:14:79:93:b2:79:
03:f0:09:ec:85:6e:53:b9:be:ed:b7:c6:71:20:dd:
a8:ee:be:84:63:19:12:f5:df:76:15:71:fd:cb:60:
f4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B6:AF:57:E4:9B:5D:7E:99:11:57:45:1D:06:7B:29:AE:19:BC:C6
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:fa:a6:d5:44:76:cd:dd:1c:a6:03:d5:47:4f:f7:d3:b8:f2:
20:a3:13:6e:2d:74:07:2c:d7:02:36:b4:7d:29:62:6c:37:5c:
eb:b4:a2:dd:a5:bc:2c:df:fb:2b:a9:f4:b3:02:0a:e5:b7:cc:
47:9b:bb:79:1a:10:e1:d9:20:d2:05:15:63:c9:d5:ba:c7:ae:
06:93:8f:74:95:1f:72:44:ae:25:6e:72:eb:b6:fa:e1:90:52:
c0:53:af:6f:c2:41:3e:e4:34:a4:03:6f:21:5a:88:8b:31:ae:
1f:0a:c0:9a:a6:ef:51:55:77:69:c6:87:d5:08:df:92:c9:92:
8c:d9:52:77:96:1d:b8:d6:a2:dc:db:32:ea:b6:ae:20:37:21:
8c:19:89:81:1c:1c:8a:4c:3a:17:f8:a2:e2:25:ff:db:34:83:
71:7e:4f:5b:07:2f:35:f0:f7:67:9a:ea:c0:fe:de:81:77:e6:
5f:08:40:7f:7b:1f:3e:89:46:58:8f:e5:53:07:e4:36:0c:af:
ba:e2:f9:cb:95:8a:5a:86:9a:24:71:74:72:7e:fe:20:33:c5:
ec:5b:55:bc:c6:26:a6:57:0d:0c:24:bb:be:10:13:f3:b5:39:
bc:36:54:9f:d4:75:f9:f7:8e:cb:4a:66:83:69:41:b5:6c:e6:
f9:d3:ab:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn92ma4EeowYc/rQnhXX0y3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4NmVlNDUwZGViM2E3MDhhZWU4NWI3ODIzOGZhMzcwZjkw
NDU3ZjkwHhcNMjUxMDE5MTkwMjUyWhcNMjUxMDIwMTkwMjUyWjAzMTEwLwYDVQQD
EyhhOWI2YWY1N2U0OWI1ZDdlOTkxMTU3NDUxZDA2N2IyOWFlMTliY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAza1o//HMr++tq+6plxPBUStzI19I
avBjREBTmcckVYUhaj4Zg//mDohiCPkukanwxF1H391oKP+2gsWLIrEPOoSBVmLG
zUIrbe8Kw1IH6mgEpyZE4M259PJqMkiozFlpM5xP55BWyWQAQ169CS4qIDKJL7r7
/8eKw28JBqDH46y1+FWM/QJFHezm71CUfXumIv1hLNAdAMnSvszk3Q4v49wZQSn9
dlzGd7TTxzrhGuytX+fDOPTVZbXrvNibD12fg/PFs9Oz8VLgexbvX/s5TCEoSBiF
vjax3oriFHmTsnkD8AnshW5Tub7tt8ZxIN2o7r6EYxkS9d92FXH9y2D0RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKm2r1fkm11+mRFXRR0GeymuGbzGMB8GA1UdIwQY
MBaAFKhu5FDes6cIruhbeCOPo3D5BFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgt
YWFjNmIwZTgyNWI5LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9kMTdkNmEtNGUyZS00MTNlLWExMjgtYWFjNmIwZTgyNWI5
LzEvcUc3a1VONnpwd2l1NkZ0NEk0LWpjUGtFVl9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPqm1UR2
zd0cpgPVR0/307jyIKMTbi10ByzXAja0fSlibDdc67Si3aW8LN/7K6n0swIK5bfM
R5u7eRoQ4dkg0gUVY8nVuseuBpOPdJUfckSuJW5y67b64ZBSwFOvb8JBPuQ0pANv
IVqIizGuHwrAmqbvUVV3acaH1QjfksmSjNlSd5YduNai3Nsy6rauIDchjBmJgRwc
ikw6F/ii4iX/2zSDcX5PWwcvNfD3Z5rqwP7egXfmXwhAf3sfPolGWI/lUwfkNgyv
uuL5y5WKWoaaJHF0cn7+IDPF7FtVvMYmplcNDCS7vhAT87U5vDZUn9R1+feOy0pm
g2lBtWzm+dOrRQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:28:02 2025 by rpki-client