Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: 0h2xSY7Tz58wyVrPztyXj7NIB9xuRNdNrlqCNlUwLSs=
Subject key identifier: 51:D1:9D:57:E3:46:64:15:56:BF:3D:69:B2:20:D3:08:94:8B:A0:EB
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019A4F62DF8EF5691617C775D01789794649
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: InxWNDOXBhcbirhU5Uu14eAQH5/Jgvz4Cxncf0Z6D4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:df:8e:f5:69:16:17:c7:75:d0:17:89:79:46:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=51d19d57e346641556bf3d69b220d308948ba0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:82:cd:46:5a:0b:c8:1c:b2:52:a7:97:19:
d1:fa:d0:ca:61:2a:b3:40:bb:14:1d:76:06:cc:1a:
95:24:f1:c4:ac:3e:53:94:07:c4:3a:99:67:0d:2c:
4a:1b:84:b2:f6:8c:fb:b8:d6:73:7a:91:a1:e8:eb:
cd:7a:e0:05:ed:ec:f6:26:5e:97:6b:df:15:d5:cd:
44:77:7b:9d:ed:f5:a4:b1:5d:60:4c:ac:88:ca:fb:
da:2e:f4:74:d6:30:0d:55:45:79:c8:9e:4e:60:62:
ce:ca:d5:cf:c2:ea:82:c1:f3:fe:d5:65:1a:6f:7f:
a6:7a:2c:01:38:98:27:5a:74:9c:da:c1:80:b4:d7:
5a:e9:4f:0a:9c:c4:ae:bd:1d:97:41:09:cc:73:3d:
41:43:24:a2:70:f2:4e:bd:a4:11:fe:a0:a9:db:e5:
1d:15:4b:e9:19:c9:fa:87:f3:12:5c:0c:d5:ed:be:
fb:e0:7e:fe:fd:40:1b:e8:5a:74:87:ba:f9:46:0e:
b5:e1:9a:46:d8:cb:84:13:01:62:55:3c:34:68:e3:
37:e9:0f:2b:df:dd:f3:99:9a:fd:6e:fd:db:12:0f:
38:94:b3:78:79:f4:5a:a1:e2:fc:b5:6b:b1:a7:48:
30:3a:17:85:c5:5f:3f:da:c4:bc:60:a8:30:b6:da:
46:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:D1:9D:57:E3:46:64:15:56:BF:3D:69:B2:20:D3:08:94:8B:A0:EB
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f3:45:42:29:c4:c1:9f:f1:5a:85:ac:ba:c6:4a:6b:c3:0c:
f9:14:51:c8:2e:fb:04:9c:b9:35:31:04:9b:2b:12:96:85:e1:
76:21:b8:33:de:73:c9:7b:4e:a9:4a:11:99:80:c4:73:47:10:
9d:74:66:cf:67:e0:7c:4b:a4:c9:bb:a1:42:80:6e:95:a0:bb:
20:d3:d9:48:eb:d5:5a:8c:de:e4:c1:31:0d:f3:05:0c:6a:2c:
3f:0f:84:b7:1a:d6:ea:c4:83:08:d0:80:2a:89:93:03:7d:0a:
66:9f:89:d0:37:6b:74:e9:92:9e:fa:27:a1:5a:cf:34:80:f8:
60:b1:5d:b8:8b:25:0e:82:91:5a:fe:0e:47:7a:49:d8:69:7a:
06:4b:da:1f:09:84:e4:22:bc:5c:cc:84:e5:16:ca:84:ba:83:
b8:20:da:46:0a:d7:1b:a3:bb:1d:98:db:94:d4:d3:cd:e9:d7:
84:33:9f:cf:d2:92:d8:35:24:31:41:0b:c5:d4:6f:1e:af:19:
bf:e1:1c:53:25:5a:52:58:00:5d:f4:88:2a:b2:66:12:f4:47:
1b:f7:4a:0d:b4:71:44:ef:30:d3:41:28:84:f6:5e:ac:81:a0:
98:5c:7e:a5:a8:8f:88:5f:cd:6c:da:98:a6:d7:06:0d:a7:46:
0c:10:11:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYt+O9WkWF8d10BeJeUZJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNGViMWUwYzUzYTY4MGVhYTQwYjhjN2NkM2YyMWNjOTYw
NDNlOGEwHhcNMjUxMTA0MTUwMTEwWhcNMjUxMTA1MTUwMTEwWjAzMTEwLwYDVQQD
Eyg1MWQxOWQ1N2UzNDY2NDE1NTZiZjNkNjliMjIwZDMwODk0OGJhMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjyCzUZaC8gcslKnlxnR+tDKYSqz
QLsUHXYGzBqVJPHErD5TlAfEOplnDSxKG4Sy9oz7uNZzepGh6OvNeuAF7ez2Jl6X
a98V1c1Ed3ud7fWksV1gTKyIyvvaLvR01jANVUV5yJ5OYGLOytXPwuqCwfP+1WUa
b3+meiwBOJgnWnSc2sGAtNda6U8KnMSuvR2XQQnMcz1BQySicPJOvaQR/qCp2+Ud
FUvpGcn6h/MSXAzV7b774H7+/UAb6Fp0h7r5Rg614ZpG2MuEEwFiVTw0aOM36Q8r
393zmZr9bv3bEg84lLN4efRaoeL8tWuxp0gwOheFxV8/2sS8YKgwttpGAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFHRnVfjRmQVVr89abIg0wiUi6DrMB8GA1UdIwQY
MBaAFKtOseDFOmgOqkC4x80/IcyWBD6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEt
MzdjMjM0MmM1YzJmLzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy82ZTAyZTgtN2UwNS00ZmNmLThhNmEtMzdjMjM0MmM1YzJm
LzEvcTA2eDRNVTZhQTZxUUxqSHpUOGh6SllFUG9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOvNFQinE
wZ/xWoWsusZKa8MM+RRRyC77BJy5NTEEmysSloXhdiG4M95zyXtOqUoRmYDEc0cQ
nXRmz2fgfEukybuhQoBulaC7INPZSOvVWoze5MExDfMFDGosPw+EtxrW6sSDCNCA
KomTA30KZp+J0DdrdOmSnvonoVrPNID4YLFduIslDoKRWv4OR3pJ2Gl6BkvaHwmE
5CK8XMyE5RbKhLqDuCDaRgrXG6O7HZjblNTTzenXhDOfz9KS2DUkMUELxdRvHq8Z
v+EcUyVaUlgAXfSIKrJmEvRHG/dKDbRxRO8w00EohPZerIGgmFx+paiPiF/NbNqY
ptcGDadGDBARBg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:02 2025 by rpki-client