Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: vtwlp7YeN8Zv0H9IL167M4eTRVi3Q2tM3bwlg8HZ2es=
Subject key identifier: 41:0E:BE:46:49:EA:4C:BA:D6:37:B5:0F:B4:94:8D:1B:B6:C6:79:5C
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 019A4DE1F857B14C96FE10C417BA8EAEF736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0B19
Signing time: Tue 04 Nov 2025 08:00:46 +0000
Manifest this update: Tue 04 Nov 2025 08:00:46 +0000
Manifest next update: Wed 05 Nov 2025 08:00:46 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: h5+rImCBJ0SkdSu0epup1tVBqfHYLax2YZluv4N1q/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:f8:57:b1:4c:96:fe:10:c4:17:ba:8e:ae:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Nov 4 08:00:46 2025 GMT
Not After : Nov 5 08:00:46 2025 GMT
Subject: CN=410ebe4649ea4cbad637b50fb4948d1bb6c6795c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:13:d7:9b:fa:b7:ab:ea:37:ec:ff:35:f4:
6a:e3:38:a4:94:2a:16:f0:a3:f3:32:63:1b:19:39:
87:3e:4b:ba:0c:a3:53:6b:e3:c5:bd:a6:2a:4c:19:
19:a5:f5:53:da:37:f6:f4:8b:f4:67:38:db:6d:b9:
6b:26:cc:26:d3:53:c8:67:ca:02:f8:b1:51:7b:7d:
62:b1:b8:7a:48:85:28:96:29:8a:2f:cc:de:96:e5:
72:bd:e3:02:32:59:31:19:56:c6:e9:80:67:3c:68:
c7:ff:e6:c3:b8:0b:10:8e:ef:ba:eb:58:a2:e1:5a:
dc:7b:36:71:3f:eb:c9:cb:ee:4e:14:2e:d6:8e:16:
d2:fb:f0:67:a3:9f:10:71:ad:dd:a1:0d:96:69:86:
77:4a:82:9c:49:57:28:cf:e8:79:26:91:3f:16:5f:
c3:43:31:c3:12:31:94:e9:36:41:f4:cc:be:b7:4f:
01:be:96:af:ff:77:28:bb:4a:7a:13:19:00:f9:6c:
09:37:f8:f7:12:08:06:b4:60:df:d1:39:f4:e9:b4:
be:72:ea:22:f4:d5:a1:37:37:9c:bc:d0:93:07:d3:
10:c4:84:fe:aa:31:14:fc:53:50:4c:05:19:5a:5a:
32:d9:f1:9c:07:cf:d0:96:7b:cd:86:0f:d6:9a:15:
7b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:BE:46:49:EA:4C:BA:D6:37:B5:0F:B4:94:8D:1B:B6:C6:79:5C
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ac:35:4e:47:88:5e:3a:18:12:1d:f7:1c:cc:01:45:9d:b6:
c1:2b:64:c4:d3:85:7a:ad:6b:24:0b:a9:25:5b:d3:8c:06:f3:
74:7d:51:c6:22:04:19:fe:ed:dc:23:da:d9:9b:cf:e8:7d:37:
01:64:8a:d5:2b:34:4d:e1:69:1e:f7:3e:8e:1e:9a:38:aa:b9:
be:33:04:5b:9f:ae:b0:0f:45:08:8e:e5:2f:78:4d:f0:02:c5:
a4:03:9e:24:60:ae:cf:27:31:39:d6:5c:99:90:86:24:96:43:
10:75:7d:2a:b7:3d:8c:cb:5b:64:96:11:29:fb:6e:a8:c1:74:
c4:c9:34:ca:67:ea:b6:8b:f6:32:d7:06:a2:0e:f1:a5:98:ff:
cf:f5:cc:d0:89:76:84:f6:fa:9f:c9:9f:6c:9e:09:b8:63:4c:
20:a5:1f:de:aa:56:8f:4b:fa:7c:0d:f3:04:e4:aa:35:e8:1a:
5a:d7:05:e6:bf:51:6f:4c:49:f2:f5:9f:20:36:9b:cd:da:3c:
ca:05:47:b3:44:69:66:6b:d4:95:20:b4:d6:f4:03:a3:4a:cb:
6a:c1:df:85:55:73:d8:f1:92:72:00:c6:1f:d5:ef:bb:04:0a:
64:c6:a3:9b:89:49:26:61:f5:26:57:dc:3d:c9:89:7a:41:ed:
50:0d:ae:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:33 2025 by rpki-client