Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: //+9ALdFthKU2+7iE/T9vTSbHkH276Ej24kAiEzJgS0=
Subject key identifier: 80:CE:47:BE:5B:09:F6:29:CC:35:35:51:B4:B0:35:F7:53:11:CE:92
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019A52D2564E341D5B6FBE6F7263F5216BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1648
Signing time: Wed 05 Nov 2025 07:01:47 +0000
Manifest this update: Wed 05 Nov 2025 07:01:47 +0000
Manifest next update: Thu 06 Nov 2025 07:01:47 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: gGITK0R00U3WVqoYQU2w80GWy+Uk3ZpfBfm/Tfc2UfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:56:4e:34:1d:5b:6f:be:6f:72:63:f5:21:6b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Nov 5 07:01:47 2025 GMT
Not After : Nov 6 07:01:47 2025 GMT
Subject: CN=80ce47be5b09f629cc353551b4b035f75311ce92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:db:f0:bc:b8:d5:8f:0d:ee:e5:b7:5d:4f:
c3:1e:49:a8:f2:cf:28:b4:1e:aa:93:9e:dc:34:89:
b2:d7:98:a3:9a:20:52:74:eb:81:ed:e8:58:0d:8f:
b5:be:8d:3d:3c:78:8f:1c:98:ac:83:ae:47:06:1e:
2d:8c:22:85:0a:de:66:00:61:f5:7c:18:72:14:5b:
77:25:90:4f:79:c9:ba:f8:30:b2:43:33:5a:2c:1d:
fc:31:2e:35:a4:ee:46:c1:30:2b:ce:63:07:d6:e7:
83:31:8f:5e:c7:b0:71:4e:e3:4c:81:db:1f:9e:30:
8d:36:fc:54:22:bd:fa:5a:db:b6:9e:36:dd:de:a3:
fb:c6:16:a8:f9:a2:fb:d5:52:8b:b8:ae:ca:9f:10:
42:d8:64:ee:25:c7:85:0c:78:9e:1e:72:8e:8b:9d:
7d:27:48:bd:5d:ae:d3:5d:8b:5a:b7:43:c1:8b:77:
7c:87:c9:c4:9b:b6:0d:c5:f2:ab:30:a6:85:d9:fb:
d5:08:c4:8b:37:3b:b4:1a:ff:82:1d:96:ef:2d:94:
b0:31:d5:ae:5d:70:26:28:b9:85:d9:36:39:f4:b9:
74:8c:ca:7f:8c:fb:62:53:8e:55:f8:08:f6:12:d3:
f6:bb:e0:eb:5a:70:67:81:28:fc:ec:2d:a6:40:16:
81:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:CE:47:BE:5B:09:F6:29:CC:35:35:51:B4:B0:35:F7:53:11:CE:92
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:db:cc:ef:dd:57:ef:cc:32:c3:9c:ca:ed:27:6c:c7:1c:aa:
58:b3:90:67:e0:cc:fc:4b:d2:ae:7c:3f:c2:fe:2f:c4:70:bb:
8a:d3:53:cc:3f:4c:2b:f3:81:6b:da:57:c5:ee:1f:3f:51:95:
ba:b1:a2:ff:47:96:30:12:a2:54:eb:c4:97:6d:ab:ac:e9:9c:
25:e7:a9:79:7d:b9:2c:32:21:5d:fe:45:ec:1f:76:bd:e5:72:
d7:fe:b9:3d:59:f7:c5:33:92:17:d0:5f:d5:f4:b5:e6:5b:91:
31:ed:7b:4a:32:ca:ea:3a:42:f0:15:87:42:e6:2f:7f:e3:77:
ae:38:3a:3d:7e:f6:99:81:8c:02:76:50:96:59:94:84:e7:3b:
e3:5e:40:ea:63:32:01:96:17:6e:d3:66:17:4c:95:5a:5f:c2:
ba:47:6c:5e:50:68:7b:a5:20:6a:3e:d3:1e:92:9a:5d:9f:ad:
bf:c6:cf:4f:d7:78:eb:b1:ba:6e:b3:5a:dc:a3:15:bd:ef:aa:
25:0c:dd:4a:ed:36:9e:b7:1c:ad:16:85:b8:67:56:bf:29:b8:
7f:da:e8:ba:50:36:77:35:d0:7e:89:39:22:e0:48:ed:99:cc:
47:ed:2c:c8:83:22:10:47:e7:7f:d1:5d:bf:11:90:34:e7:f5:
07:9a:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:10:50 2025 by rpki-client