Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: kjmEQiWCGGIo3BT2GfkN2tcaPvfEwMrL0oOb7f9UUoQ=
Subject key identifier: A2:37:0F:2D:15:9D:B1:C8:61:B0:0F:28:DA:6B:AB:3D:7E:2B:A1:C4
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019A52D1936C36C99096E508709BAB582D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 07:00:57 +0000
Manifest this update: Wed 05 Nov 2025 07:00:57 +0000
Manifest next update: Thu 06 Nov 2025 07:00:57 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: vhHTZpD6yHtQHV8IFkpetYly/GNjwHhxDCHUvP4wwas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:93:6c:36:c9:90:96:e5:08:70:9b:ab:58:2d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Nov 5 07:00:57 2025 GMT
Not After : Nov 6 07:00:57 2025 GMT
Subject: CN=a2370f2d159db1c861b00f28da6bab3d7e2ba1c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9f:78:fd:ff:ef:eb:3d:ca:53:42:58:01:36:
b9:48:f8:63:45:d3:79:49:11:5d:85:87:88:2c:27:
39:b5:fb:31:a2:5f:4b:7e:eb:36:92:d9:fe:cf:86:
d1:d0:17:52:cd:fb:fd:30:72:77:69:88:a3:70:34:
ec:95:05:69:b1:b3:f2:f2:c5:c3:01:55:9a:39:46:
48:5a:3d:05:01:88:b2:42:c8:b5:8f:a2:d4:90:20:
6e:e6:f2:04:84:22:aa:2a:63:6c:e2:4a:d9:6e:2a:
ae:45:4b:43:3a:00:93:fc:10:87:e3:6e:b6:c7:0a:
2c:c1:22:58:38:cc:c8:18:06:8a:c7:fe:d6:9b:d1:
a1:a5:86:66:7b:c2:8d:26:d5:75:f9:51:ca:54:c0:
b6:2e:da:d6:31:6b:a1:e0:33:2d:b3:86:10:ff:cc:
0e:3d:ff:88:cd:46:7d:84:6f:c6:79:d9:cd:e0:dc:
1f:68:bb:7c:96:58:27:aa:47:fe:24:80:06:06:ba:
2f:26:13:de:d1:71:6b:5e:84:3b:55:16:78:80:60:
8f:bd:5a:f0:f2:53:99:11:84:97:f8:60:3a:21:5a:
59:a3:60:fd:dd:14:b6:5c:b1:08:97:57:f9:2d:92:
87:d5:1d:2c:5a:e4:12:da:86:8b:6f:23:15:ea:b5:
74:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:0F:2D:15:9D:B1:C8:61:B0:0F:28:DA:6B:AB:3D:7E:2B:A1:C4
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:32:b1:f2:b6:25:da:7d:e2:5a:24:54:54:2e:74:1c:59:67:
8a:51:64:4c:59:71:0b:5d:3f:9c:dd:b1:b2:21:8b:0a:b7:68:
ad:bb:2f:f6:0c:d6:03:1b:30:2a:ca:8a:3d:00:52:a1:31:12:
d6:dd:63:4e:46:c1:73:bf:72:af:79:cf:83:55:38:bc:ec:5e:
69:d4:f4:d9:2e:0d:9c:49:78:05:0f:b1:fe:61:90:88:5a:59:
94:cd:d6:b2:fc:86:fb:24:b4:5a:51:99:68:3f:8f:fc:70:a9:
ab:cc:38:ca:6e:4f:f7:13:e3:05:47:6e:f6:5f:a7:a5:7a:31:
ab:3c:25:ce:d5:87:6c:86:85:f2:a9:68:29:ea:ee:83:1d:4b:
90:67:92:9e:3e:a2:e3:93:da:28:16:e4:4e:79:90:bf:ca:66:
6d:43:86:48:e6:41:f8:14:b9:9c:05:a0:4b:0b:f5:f3:09:93:
90:94:07:d4:7c:0c:35:26:8d:e4:04:9f:42:fc:e2:74:96:22:
d1:a5:78:d8:15:87:d6:19:c8:01:45:82:3a:4f:f0:31:6a:59:
2d:42:b4:5b:ae:06:bc:2b:02:fa:82:f4:7d:30:79:16:e8:c9:
04:98:80:db:ec:47:1b:a9:36:27:af:68:3f:08:01:14:99:81:
50:96:86:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:00:32 2025 by rpki-client