Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
File: q1wa2N15IqRaLMdIHv4B3UMwBsI.mft (raw, json)
Hash identifier: v7DswpkkCxqVlTRZYtfwHOu1idcMMdUeTpUgCVkCJE0=
Subject key identifier: 84:F2:9B:C9:E7:57:55:1C:55:D3:99:5C:42:F2:FA:22:F4:8D:A1:67
Authority key identifier: AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
Certificate issuer: /CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Certificate serial: 0199FDD9E9BB1E1BFF44B0C0D2C7ACC47E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
Manifest number: 097F
Signing time: Sun 19 Oct 2025 19:02:20 +0000
Manifest this update: Sun 19 Oct 2025 19:02:20 +0000
Manifest next update: Mon 20 Oct 2025 19:02:20 +0000
Files and hashes: 1: q1wa2N15IqRaLMdIHv4B3UMwBsI.crl (hash: mGDJVb5h46IZaja0N4/+CFB/Be2oN6Me10RqiGuXSds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e9:bb:1e:1b:ff:44:b0:c0:d2:c7:ac:c4:7e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab5c1ad8dd7922a45a2cc7481efe01dd433006c2
Validity
Not Before: Oct 19 19:02:20 2025 GMT
Not After : Oct 20 19:02:20 2025 GMT
Subject: CN=84f29bc9e757551c55d3995c42f2fa22f48da167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:44:e9:bd:d6:29:dc:32:76:ac:b5:28:bb:
ee:fd:5e:4d:2f:f0:8f:fc:21:d3:54:09:08:ee:c3:
8a:2b:f2:e4:8e:9a:33:6c:ae:d8:19:08:53:d3:49:
d4:2b:3a:9e:ad:26:bd:52:d0:08:91:d1:6f:1e:45:
39:25:6f:3c:6d:3c:6a:5a:52:64:da:7e:63:07:81:
08:e6:fe:59:47:6f:ca:0b:05:66:77:b6:05:c2:02:
3b:1d:f9:67:86:b1:5f:ce:21:bf:b7:6f:b7:9e:e9:
ac:6c:90:2f:48:72:ed:b3:f2:7a:90:0b:e4:9e:4d:
72:bb:fd:5a:63:9b:99:f2:af:cc:68:56:b7:40:2e:
6a:cc:fd:d4:3b:71:ff:bc:54:4f:e1:9d:d9:d4:d0:
c7:1c:ae:95:e5:33:12:93:5d:ef:31:6b:1c:4c:d6:
c2:60:92:1b:bb:40:e1:95:fa:ea:16:32:0e:ff:40:
bf:c0:ec:a1:68:c1:e1:72:27:92:ca:50:9d:2e:5a:
9e:59:41:36:73:5e:25:c4:18:d9:8d:f6:8d:ac:93:
0b:e8:3a:65:ea:69:9d:66:ba:53:76:5d:af:e6:6c:
d6:7d:bd:41:33:3b:b3:e1:44:1c:e8:6d:06:b9:44:
60:97:c4:2e:af:1d:e0:d2:18:2c:63:72:b8:61:50:
21:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F2:9B:C9:E7:57:55:1C:55:D3:99:5C:42:F2:FA:22:F4:8D:A1:67
X509v3 Authority Key Identifier:
keyid:AB:5C:1A:D8:DD:79:22:A4:5A:2C:C7:48:1E:FE:01:DD:43:30:06:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q1wa2N15IqRaLMdIHv4B3UMwBsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9e99bf-2d89-4401-bc9f-cba8c8a5453e/1/q1wa2N15IqRaLMdIHv4B3UMwBsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:6b:03:4f:39:fb:2c:00:c5:1f:07:8f:4c:31:50:da:f3:c7:
5e:85:84:53:5c:31:f4:4f:a1:9e:2a:88:f7:b1:a0:a4:aa:ca:
47:08:cc:3b:fd:82:e3:8f:97:a1:d0:c7:0c:db:6d:20:db:a9:
07:b0:c5:c2:94:4f:51:93:fa:14:65:50:d4:62:42:a8:8e:03:
2d:57:e7:d6:b8:4a:d8:c7:40:b9:25:00:6e:f5:03:92:19:44:
92:ac:04:71:09:6c:bc:43:93:b8:71:2c:10:01:eb:66:34:dc:
9e:08:02:05:23:97:14:56:ab:e4:db:82:19:44:2b:95:da:1f:
54:c8:50:eb:5b:b2:26:3f:e1:f5:2e:62:69:eb:9e:77:78:65:
d9:f9:16:d8:3c:31:ed:b0:2a:51:f4:1f:aa:bb:ee:3b:e5:29:
b4:9e:12:31:25:45:3b:08:33:3f:e8:3a:b6:db:fe:cf:6c:bf:
64:c1:34:7d:78:ce:e0:5c:16:a8:de:06:4b:f1:93:8e:ae:49:
ee:b4:da:7b:2e:bf:45:26:93:80:b7:c1:b5:ec:19:a8:97:48:
f9:09:8c:3a:86:9a:c6:ca:9d:57:28:ab:03:02:43:47:97:34:
14:df:56:ee:39:e2:5b:fc:d8:05:13:bb:2e:be:47:0f:1b:03:
7d:70:fc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:23 2025 by rpki-client