Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: E5XczRXbZzyUc/4AWVcxuOzny9l5gHOzUYkf1Wpbr4E=
Subject key identifier: 25:81:41:E2:A9:B1:02:E6:F7:30:FE:B8:84:00:8F:CC:E3:36:1D:D9
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 0199FD34976FA74120F88AAE4C8CC543FD4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 11D0
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: 4dtn0V5XnJZ50jtdQ335sdZyEvWi/RUdhfFt2e4pBns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:97:6f:a7:41:20:f8:8a:ae:4c:8c:c5:43:fd:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=258141e2a9b102e6f730feb884008fcce3361dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:0a:b5:95:2b:3e:be:10:bc:38:7d:4c:1e:
e7:f7:98:65:bf:81:a5:18:87:e0:2f:10:c9:22:4b:
e0:d2:17:fb:3b:2c:83:6b:85:ad:b8:b1:68:b7:75:
d3:08:c2:f1:88:f2:74:10:3b:ea:96:65:1f:f9:05:
a6:56:c8:43:8d:ac:35:f0:4a:05:ec:05:5c:3c:45:
e9:79:f8:65:c5:40:22:c1:e3:c2:3b:d9:56:7a:07:
c1:3f:77:dd:42:c0:36:6e:7e:ef:cf:a5:1e:07:0c:
05:f2:80:99:1f:5b:c1:3e:0f:28:9a:2d:f2:a8:ac:
cd:95:c8:c9:38:07:6b:8e:35:5d:cd:a7:62:b1:19:
d7:bc:4d:56:6d:20:ba:b7:5e:33:b2:5c:6f:16:a5:
8e:95:4e:cd:8f:db:39:46:b2:fb:3e:8e:b2:56:55:
ee:76:f0:d6:5d:00:f8:50:ac:dc:5d:06:13:0c:99:
39:29:a3:22:3e:42:75:49:04:e0:55:29:cc:2b:df:
e3:a2:7c:3a:f2:46:a1:ee:63:a4:ab:59:5a:07:83:
cb:d4:45:7a:f0:9c:51:ff:7a:a8:96:d8:69:15:61:
46:c2:8c:f1:e7:30:3f:c7:53:a5:50:8a:6b:22:a5:
16:8e:99:5c:58:5b:c6:7e:db:eb:95:69:a7:70:d4:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:81:41:E2:A9:B1:02:E6:F7:30:FE:B8:84:00:8F:CC:E3:36:1D:D9
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:9a:45:0d:96:0f:c6:eb:9a:40:2e:b3:b2:2f:c1:c5:e9:c2:
03:c6:37:cc:af:3a:45:85:ef:ea:54:a4:04:cd:a9:64:e1:c6:
8a:5e:94:ba:2b:a2:fc:10:1c:7a:9d:1c:86:a8:97:f4:7c:ae:
c5:b6:11:b2:dc:d3:92:0c:eb:5a:ff:d6:19:e1:68:4f:6c:3d:
f9:51:a6:43:f3:0a:04:c8:d8:ad:a2:c1:6f:21:47:57:15:ce:
dd:a6:14:95:d3:5a:0f:f7:5a:ba:c5:ba:73:f1:1a:06:66:f7:
b1:3c:77:07:6f:fc:1e:54:2e:05:54:11:d3:eb:b9:9f:55:07:
83:7d:ab:f8:61:e0:9c:c7:af:4d:f1:7b:ee:c9:6c:fd:d8:ce:
69:7f:65:4f:ef:2c:ef:97:7e:65:18:33:19:59:eb:0b:c1:81:
82:b3:de:78:90:cf:1c:6a:15:bd:55:26:1a:17:5a:9c:1d:9c:
ed:2c:29:a2:1f:4f:81:17:f6:d6:45:82:7e:53:31:de:10:ed:
dd:a1:5e:bd:69:5f:94:e0:fd:3f:3a:ef:29:24:ef:63:6c:52:
24:96:71:a5:ea:31:95:ee:3e:64:15:49:e4:4f:33:31:51:6e:
65:d4:63:9c:08:d6:38:54:e7:5e:ad:7c:fe:0e:87:30:0d:ff:
0c:ff:46:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:40 2025 by rpki-client