Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: +nYHk3n/RdkiqAaDSc9R7JFfWjBKwDDi5FHuc+JKsUw=
Subject key identifier: 65:E8:11:1B:01:09:97:F6:96:76:F5:EE:47:64:CE:6D:5C:97:62:EF
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 019A4EF5EB6E1E9BF4F42BAD4F88360A1A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 04A0
Signing time: Tue 04 Nov 2025 13:02:10 +0000
Manifest this update: Tue 04 Nov 2025 13:02:10 +0000
Manifest next update: Wed 05 Nov 2025 13:02:10 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: 9md8VHPP5MDrQV0Pa0eQMu8Pme2wxQ6K3OLYO+KbDkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:eb:6e:1e:9b:f4:f4:2b:ad:4f:88:36:0a:1a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Nov 4 13:02:10 2025 GMT
Not After : Nov 5 13:02:10 2025 GMT
Subject: CN=65e8111b010997f69676f5ee4764ce6d5c9762ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:4e:fa:4b:86:e3:88:9a:fd:d8:02:72:e7:
9b:35:cf:2d:45:b3:00:ee:e2:c0:92:77:04:82:48:
2b:3a:a1:2a:95:cf:65:f7:fc:fc:b8:bd:d2:b5:af:
0b:42:76:a7:70:55:20:77:0c:9b:ef:ff:6e:05:80:
2b:f0:7c:3c:40:40:c5:80:1e:5f:80:a3:31:09:d5:
f6:6e:de:15:d5:2a:a4:76:74:f6:01:0e:cd:01:50:
41:fb:66:68:c4:44:24:69:c4:a7:29:32:5b:a6:f6:
bd:77:10:26:d9:e3:55:93:b8:24:7a:fa:61:c9:c0:
67:d3:fd:03:41:18:43:f5:ca:34:da:ec:e6:85:ab:
0c:90:61:7e:8c:fa:a7:bc:d7:70:de:05:68:1c:09:
8b:bf:41:fc:f2:0d:3e:81:82:01:15:9f:7f:17:eb:
f2:18:ea:17:1b:75:0f:5e:1f:42:4a:58:f8:21:3f:
7f:b3:65:db:cb:ad:b4:8b:b4:06:0a:59:3b:22:f1:
1e:c6:95:2d:d5:21:e1:6c:7e:2e:7c:e8:7c:fd:9d:
af:4e:66:78:8e:93:a1:e6:51:37:a8:ca:af:40:3d:
da:3b:16:6c:9c:4d:23:6b:04:aa:71:c9:46:5b:e2:
1e:65:cc:95:9f:f9:93:c2:9b:83:31:4a:5c:8a:b2:
d8:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E8:11:1B:01:09:97:F6:96:76:F5:EE:47:64:CE:6D:5C:97:62:EF
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e8:d2:2e:74:72:12:75:03:be:5c:f8:22:0e:18:26:e5:5c:
3f:7a:cc:bc:c8:db:2d:f9:e9:f4:16:b3:2c:89:7e:34:80:2e:
07:38:8b:f1:35:52:66:1f:98:b6:4d:98:52:11:77:1c:48:f2:
db:39:21:89:7c:a2:49:51:f8:55:e5:f5:53:6f:de:9e:1b:8c:
a1:29:ef:84:c1:4c:4d:9a:43:cd:23:0f:17:7d:58:39:71:44:
84:d1:8b:40:c2:64:b6:ac:46:63:bc:73:a4:c9:15:72:b9:cc:
1c:f4:9c:b7:f0:f7:86:9b:64:e6:ec:58:31:7e:f8:2b:c1:fd:
17:4e:cd:78:b0:d9:f3:67:90:fd:64:db:b7:05:64:2c:4d:0a:
27:f0:59:d4:27:63:27:e1:f2:97:34:00:d2:1e:21:59:6a:c1:
3a:a6:a0:9b:17:65:76:44:25:fe:d3:88:1e:a4:f8:a2:78:d7:
9e:a8:a9:06:a8:3a:db:3c:1e:4c:6b:ae:57:f7:43:88:16:57:
f9:b6:ae:2f:d1:a1:24:f5:01:ef:1e:1f:f8:a0:79:97:bf:d8:
05:8c:8b:10:e2:eb:62:4b:68:1c:28:97:12:85:8d:6f:b2:12:
7a:6f:a0:0f:01:44:e4:54:ae:d9:a1:89:3d:0b:af:5b:6a:cf:
2b:ed:20:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:27:42 2025 by rpki-client