Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
File: qrHbDgCCCHbfogvsm3Gap5Wswd4.mft (raw, json)
Hash identifier: v39UlHyaDKmBiNuENEqA2+AE4tEmcDKRYcINq3CAwdw=
Subject key identifier: 59:0B:7F:DA:FA:9B:AE:F3:81:26:82:6C:69:18:10:11:42:A6:1E:53
Authority key identifier: AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
Certificate issuer: /CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Certificate serial: 019A4E8640BF165D517D70342C9295A74370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: qrHbDgCCCHbfogvsm3Gap5Wswd4.crl (hash: xl8QqJ57J3F8CLOIzFktCvv2bs3Jpq0Rre0EJ89Xdck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:40:bf:16:5d:51:7d:70:34:2c:92:95:a7:43:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aab1db0e00820876dfa20bec9b719aa795acc1de
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=590b7fdafa9baef38126826c6918101142a61e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d5:c8:85:d2:55:55:84:c7:01:e4:5a:7b:64:
49:8b:3f:91:5b:4f:33:70:77:a8:c0:fc:62:1d:79:
7f:1f:a8:3b:4d:56:8d:f5:34:8e:e7:b9:52:ab:de:
22:c4:77:59:ff:74:9b:87:cb:2c:7e:79:8d:6f:6c:
d0:e8:ca:05:52:d1:72:0a:8d:af:29:6d:ab:85:bf:
08:18:23:a6:ec:35:80:e6:38:1f:f6:2d:32:7e:b3:
33:d5:1e:ed:35:c2:24:b4:ba:ff:c9:8e:58:e6:03:
bd:e2:cb:4b:83:28:1a:4c:ea:ee:d2:f6:b7:27:bc:
7a:b3:fb:ec:4f:b4:ae:e6:93:10:03:cf:85:32:43:
04:eb:c5:86:63:50:82:9d:29:c2:2d:5b:4d:fe:78:
5b:33:82:12:3e:f5:80:f1:eb:aa:47:87:cf:1c:b6:
a1:85:1c:46:54:3f:c5:8f:95:2b:9b:6b:50:74:4a:
44:bb:37:77:7e:8e:eb:ae:8d:8b:5f:2f:35:bb:33:
78:f2:0b:37:b1:04:df:af:72:c3:e8:db:09:39:f8:
1b:d6:d7:92:ed:7f:c4:1b:17:cf:d7:fe:32:e2:92:
c2:1b:5d:ec:c4:e2:8a:b9:5f:89:44:e2:a5:68:8d:
60:2c:25:1f:19:14:d3:8b:88:ea:c0:7b:3f:f9:66:
b8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0B:7F:DA:FA:9B:AE:F3:81:26:82:6C:69:18:10:11:42:A6:1E:53
X509v3 Authority Key Identifier:
keyid:AA:B1:DB:0E:00:82:08:76:DF:A2:0B:EC:9B:71:9A:A7:95:AC:C1:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qrHbDgCCCHbfogvsm3Gap5Wswd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6add07-e6ad-4dba-9b8b-23e3813651d4/1/qrHbDgCCCHbfogvsm3Gap5Wswd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c2:e6:aa:3f:5a:c4:30:2c:04:81:aa:cb:35:b8:a8:60:31:
3d:b3:ca:f1:25:71:96:8d:09:f9:3a:8f:57:97:29:8d:9d:65:
9d:98:ba:84:27:10:ab:5e:30:0e:d8:f8:2e:fd:d7:1d:a4:ee:
1a:58:bc:ca:ba:06:73:2e:aa:9f:ce:48:7f:c9:8e:2e:41:5e:
eb:21:d4:fc:4e:19:1a:97:20:e2:6c:29:ad:80:10:26:56:d7:
bd:df:71:ca:ce:7b:33:71:93:84:2b:00:b9:ec:67:82:5c:86:
38:da:71:df:6d:93:80:0e:d2:98:f7:07:a7:1f:93:62:15:3f:
41:f8:42:da:79:8d:67:c5:5c:a8:d6:5a:74:bb:e1:13:8a:5a:
c2:7f:12:ae:bc:9a:e2:f2:e8:92:0d:ab:77:8e:e3:b3:9b:4d:
10:c6:da:e5:c7:e3:d3:ab:65:b9:fe:64:d4:79:ce:f1:00:72:
2b:b3:7a:83:0d:a3:dc:65:b9:4f:52:95:62:e8:57:a1:a9:ae:
f6:bb:72:ef:ca:97:c7:c5:1a:82:34:c0:ea:ca:3a:13:94:35:
00:1f:50:be:13:d2:78:f2:c8:0f:01:53:d3:91:9a:4b:09:7e:
f2:09:7a:36:39:c1:cd:1f:17:fe:18:3a:0e:b3:91:19:47:ec:
76:6f:ce:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:31:15 2025 by rpki-client