Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
File: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft (raw, json)
Hash identifier: MWFBzE4lxbQ6470v8SNVQRizY40Rcbg1ymHS80Kp7qw=
Subject key identifier: D5:F5:68:08:0B:C7:73:3A:85:7B:C9:34:FC:4A:19:CD:AB:F8:6E:14
Authority key identifier: 9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
Certificate issuer: /CN=9aa664662db37faf9cb53809f8189f64542a8f64
Certificate serial: 019A503E273B9E765B1224914AB65DE87A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 19:00:41 +0000
Manifest this update: Tue 04 Nov 2025 19:00:41 +0000
Manifest next update: Wed 05 Nov 2025 19:00:41 +0000
Files and hashes: 1: mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl (hash: 46VnqapJlXv/8upzn8uLXMLVltxHDm/uyG/AIg/CnIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:27:3b:9e:76:5b:12:24:91:4a:b6:5d:e8:7a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9aa664662db37faf9cb53809f8189f64542a8f64
Validity
Not Before: Nov 4 19:00:41 2025 GMT
Not After : Nov 5 19:00:41 2025 GMT
Subject: CN=d5f568080bc7733a857bc934fc4a19cdabf86e14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ef:1e:a0:98:41:28:09:52:dc:50:40:1d:70:
2f:91:ee:e2:42:58:fa:1f:2d:78:ae:3b:c6:b3:df:
78:82:6d:ea:af:9b:46:f8:ab:2f:4c:28:a8:62:82:
36:b6:c5:1a:0b:20:58:7e:4a:9e:6c:6a:ae:0c:89:
71:f4:bd:2a:30:d3:f5:1e:fe:1c:1f:be:d0:7d:37:
68:84:1a:2b:1b:50:d5:f8:74:3b:b2:91:6f:db:0b:
5a:03:3d:83:e6:55:f9:7c:24:76:d2:ef:6b:36:d1:
9b:a4:bd:49:31:19:d0:d2:7d:71:20:58:16:e5:fd:
fc:4c:a6:22:d0:c9:a9:30:6d:df:79:d3:ea:79:fb:
33:4f:07:a0:a0:2b:3b:61:99:90:6b:d0:0d:2a:64:
b6:c1:79:e3:06:48:7e:65:23:d0:64:7e:ad:6d:18:
60:96:78:b8:4c:2c:a6:0e:fa:86:4c:c1:7d:61:1a:
79:db:d2:c7:9f:9e:f3:ed:72:02:6f:f9:49:c1:0e:
44:53:b5:a1:19:4d:a6:6b:ff:52:53:10:de:41:91:
72:7c:31:81:63:97:ad:ab:99:16:b2:20:ec:fc:6b:
15:58:16:b7:b3:fa:fb:91:6c:17:5b:4b:ed:9b:40:
8f:b9:24:b5:b5:0d:be:50:45:cb:aa:9e:76:b7:33:
85:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F5:68:08:0B:C7:73:3A:85:7B:C9:34:FC:4A:19:CD:AB:F8:6E:14
X509v3 Authority Key Identifier:
keyid:9A:A6:64:66:2D:B3:7F:AF:9C:B5:38:09:F8:18:9F:64:54:2A:8F:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6ceb07-9a73-444b-ad0e-8e21c4d73855/1/mqZkZi2zf6-ctTgJ-BifZFQqj2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:e2:cc:a6:91:c4:32:73:1b:b3:42:cf:db:47:5c:1c:1e:
b8:ee:bd:19:20:f7:83:4d:c5:1d:9f:6c:c6:5d:04:4e:b5:60:
b2:5d:67:fe:a3:cf:35:dc:bd:80:bf:d6:37:c6:46:90:b7:e4:
02:fa:85:8d:cd:5f:a3:60:fc:79:af:29:66:e2:87:de:10:a4:
da:a2:af:59:08:b6:46:4f:9f:3c:bf:10:bf:c3:64:4b:91:e1:
3a:38:7d:d9:5c:ed:4b:35:33:a5:76:e3:ef:e3:e6:d5:81:df:
6f:88:ae:5c:32:c9:ba:3c:92:1b:f2:75:07:16:ff:d1:f8:2d:
74:0f:7f:3c:2c:c7:fb:3d:f5:f3:64:fb:44:fa:de:16:4d:22:
d1:87:fc:17:b9:28:42:c1:7f:f6:36:d5:81:22:7a:3b:6b:f4:
23:31:f4:8c:3c:56:58:a3:68:a9:e7:c7:38:54:48:27:52:8c:
ba:5c:b4:81:37:55:52:96:8e:a3:c6:aa:86:19:50:c9:97:1f:
16:cf:6c:73:f3:4c:65:5c:f6:28:3f:ed:68:07:c1:33:1c:f6:
89:ca:32:a7:78:d4:3f:fc:de:05:7c:0f:6f:75:9c:ed:9c:54:
32:56:23:a9:6b:ac:b7:0a:08:4e:8e:89:f2:fd:4f:84:b2:39:
c1:f8:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:05 2025 by rpki-client