Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: /ZNFeGjsQFuZLJvw52/vzpqniLp+5qPOTPQSO/4sTbc=
Subject key identifier: 69:B2:A9:6D:83:8D:AC:42:C6:87:EF:F3:B0:E7:21:5A:7E:40:C3:BF
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019A4D746752B99CCD1F0524C139B8865139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0B82
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: bWvOrwEoDjNGgL+o7a553DjDSvaVDhRRMqxrzASsFhs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:67:52:b9:9c:cd:1f:05:24:c1:39:b8:86:51:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=69b2a96d838dac42c687eff3b0e7215a7e40c3bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:9e:c6:d8:bb:14:1c:16:45:ef:40:31:7f:e1:
0d:90:d9:09:0e:d3:6d:b3:16:3e:0c:03:7a:b9:5c:
a5:a3:ec:2a:85:02:64:d8:3f:05:a8:28:7e:bc:6d:
1c:a6:73:d2:f7:be:0a:48:cd:fc:aa:22:61:66:94:
d7:1a:f9:75:9b:ad:12:ce:b5:b8:61:2f:a4:72:e2:
70:13:26:63:8b:ff:a1:8d:60:a4:d0:13:e3:86:93:
cc:d6:7c:ae:66:1a:b9:3f:16:b3:21:ed:7c:c3:27:
6b:37:41:97:22:69:41:d0:b6:a6:9e:7b:d3:43:50:
b8:f0:b9:3f:84:be:86:6e:18:53:d3:91:04:6a:87:
20:e3:53:f7:a0:d2:71:f6:36:e4:cd:3a:f7:4e:ae:
76:59:78:80:94:e5:a5:9c:62:f2:66:2d:4d:01:8b:
24:86:e6:b2:22:8b:6d:dc:79:71:1f:4c:ea:13:39:
b8:01:af:5f:8c:17:9f:20:9f:95:ec:0c:a7:63:f8:
db:0e:9a:4d:d1:2e:bf:c7:99:97:e8:b1:bc:99:21:
9c:99:33:56:cd:dc:50:d9:3e:b9:a6:e7:39:f5:19:
3c:78:e2:be:a1:40:07:ea:8c:15:92:75:e0:83:66:
35:cf:b9:5d:94:b6:49:01:b4:4b:25:1e:35:18:68:
b3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B2:A9:6D:83:8D:AC:42:C6:87:EF:F3:B0:E7:21:5A:7E:40:C3:BF
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:79:3f:ef:4f:e6:f5:45:f9:ac:c0:2b:59:54:a8:c3:4d:e0:
12:8c:ac:9b:08:24:9e:42:f0:86:fe:b8:a4:bc:c0:d7:a3:dd:
33:0b:1f:a2:81:be:b5:3b:55:06:79:7c:7b:1c:4d:2e:c6:20:
45:90:23:f2:11:71:f3:b6:4b:d8:ae:dd:9a:0b:76:8e:eb:b6:
90:77:cb:71:63:c0:e9:95:f3:ab:5e:45:18:fd:3f:b7:94:e8:
d7:1b:02:f1:22:dd:74:51:df:86:74:89:33:c4:45:f0:07:75:
8e:f5:54:b0:2c:49:8b:24:7b:f9:d5:d9:99:e1:ca:17:59:18:
32:66:59:28:f0:b7:08:a8:d2:43:d3:b7:73:77:0a:6c:33:49:
0f:5e:57:28:b0:9c:1a:0c:88:34:37:67:15:a0:a8:a3:43:7b:
16:54:6e:0e:97:6d:40:7a:c8:f2:c5:f3:32:45:46:1d:63:64:
9a:47:52:97:70:20:6d:fe:8f:2b:cd:80:8d:c5:11:83:6f:ad:
08:5c:f2:3e:5e:de:74:7e:80:58:20:7d:7f:c6:94:a7:08:67:
18:83:51:7e:f9:c4:bf:f7:d2:bb:7b:ef:11:81:a1:06:36:ef:
d6:8d:da:1e:08:04:ad:8f:1a:56:fd:f3:1b:76:79:05:f2:72:
73:56:51:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:35 2025 by rpki-client