Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: /BZWBrVjSrSljTR076emnZHiT5/asNlHzi76jxGLFWo=
Subject key identifier: E9:C4:28:A6:B4:C9:83:94:48:64:C4:77:B8:F9:C1:2F:8B:91:86:63
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 0199FC58B0B89B4A757599AE63AD5097454D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0631
Signing time: Sun 19 Oct 2025 12:01:34 +0000
Manifest this update: Sun 19 Oct 2025 12:01:34 +0000
Manifest next update: Mon 20 Oct 2025 12:01:34 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: SYy8XEvkiL6h0d43zlHFw0eS+L3cU8Pc5IoGCKwLfOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b0:b8:9b:4a:75:75:99:ae:63:ad:50:97:45:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Oct 19 12:01:34 2025 GMT
Not After : Oct 20 12:01:34 2025 GMT
Subject: CN=e9c428a6b4c983944864c477b8f9c12f8b918663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:18:c8:08:5d:7e:ee:d9:6e:22:4e:ec:2b:
67:58:87:89:6f:ed:d1:8c:07:e0:b3:f4:c1:53:fd:
b0:37:9d:e4:df:74:51:e7:f8:dc:a2:bc:db:c3:ed:
0a:36:79:2d:ba:f3:f4:2a:b6:c5:64:93:5b:d3:ac:
ec:6e:c2:1d:1c:4f:7a:13:d3:1b:e8:21:cc:5a:3f:
36:b5:e4:94:2f:56:36:cf:f9:4b:aa:18:88:b9:38:
55:b0:96:70:4f:ed:63:75:7e:b7:37:c4:81:6d:6c:
b4:27:e6:e3:07:45:23:c7:e2:b0:c1:65:0d:e4:16:
8b:bf:ca:1f:26:19:d3:04:ad:5c:c3:e9:38:a8:90:
1e:7c:ba:45:f8:40:5e:fd:23:f1:26:d7:bd:30:10:
fe:c8:1b:d8:62:bb:c6:b3:52:66:d0:dd:fa:a3:fa:
76:cf:54:21:1b:96:24:ea:26:20:41:33:8f:cd:e2:
6c:06:11:70:ef:b5:05:46:46:d9:4b:14:d8:8d:5c:
a2:83:42:f9:fe:48:01:00:1f:5f:dd:cd:7c:26:e0:
9f:80:26:87:22:a5:37:f6:35:45:e6:ea:dc:09:78:
ca:11:76:59:50:39:75:dc:1c:c6:64:b6:c0:99:60:
83:6a:36:ec:da:f6:cb:13:da:f2:64:64:94:cf:53:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:C4:28:A6:B4:C9:83:94:48:64:C4:77:B8:F9:C1:2F:8B:91:86:63
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:96:4b:78:e8:46:aa:8e:31:95:aa:d2:ca:06:51:2b:ad:ed:
0c:be:7b:b8:a5:e3:fa:1a:5b:f5:65:68:47:a8:d6:46:b4:50:
c4:7d:89:a1:d2:c3:78:a9:e3:e4:67:6f:64:c0:ec:2a:7e:d3:
ac:49:af:97:64:3e:24:f5:9d:11:14:82:ab:29:91:cb:f7:07:
8d:84:d6:d3:99:d6:d6:45:26:cc:8c:ae:83:e0:91:5f:e2:8a:
e0:df:5e:e1:f4:04:b8:47:73:97:6e:10:c3:89:fc:e7:9e:21:
3b:ac:37:84:23:68:30:3c:66:fb:4a:a0:b0:7f:0c:60:e4:8b:
da:da:e7:27:64:1a:7c:2d:fc:2d:d7:11:d0:21:8d:af:af:7e:
9f:a2:d4:57:e4:fa:ba:8c:ca:58:fd:bf:ef:ca:bc:b8:0d:8f:
ee:26:bc:8e:76:64:73:f0:83:00:94:2d:aa:ce:d2:c3:a0:dc:
e5:80:5a:d8:f7:c2:02:0e:e1:70:f3:27:9d:7a:85:cf:6a:7f:
7e:a5:ef:e7:f7:94:50:67:43:91:cd:04:85:2f:a5:1f:6b:0c:
6f:79:d0:1f:45:9f:80:31:bd:ce:ab:a1:14:cf:ed:9a:6e:37:
4a:97:21:7f:ea:c3:95:ab:6f:14:c5:48:ed:32:49:f7:c8:05:
60:60:17:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:36 2025 by rpki-client