Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File: qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier: KIm1JunOGbAhgIIM7FKyqhK0GI8ryoIhtK4xLxkazg4=
Subject key identifier: E3:C1:D4:7E:7A:CD:45:96:29:AB:FD:F7:09:76:0C:B1:8C:E2:2A:9D
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer: /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial: 019A4EF3FC50CBF6065E45DA8D5C5B32B588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:03 +0000
Manifest this update: Tue 04 Nov 2025 13:00:03 +0000
Manifest next update: Wed 05 Nov 2025 13:00:03 +0000
Files and hashes: 1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: SF9G9zyklHpUKVBQGKShA/LKt6HWpDS6sI8IWx9eAjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f3:fc:50:cb:f6:06:5e:45:da:8d:5c:5b:32:b5:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Validity
Not Before: Nov 4 13:00:03 2025 GMT
Not After : Nov 5 13:00:03 2025 GMT
Subject: CN=e3c1d47e7acd459629abfdf709760cb18ce22a9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:45:41:91:be:36:69:cf:c4:0c:dc:80:7e:df:
32:03:d8:5f:ee:3e:68:c7:72:0e:29:9d:4a:cf:b9:
09:47:c9:d4:f8:e8:a2:48:0d:89:35:13:4a:69:41:
14:47:5a:45:a2:e7:b8:73:62:dd:23:00:cd:99:ed:
75:f1:b1:9c:ab:64:0b:57:41:aa:ef:66:f0:8e:17:
95:24:ec:b6:35:07:f1:b3:73:7b:d8:1c:08:51:72:
38:36:30:0c:74:08:91:7e:c2:56:d7:9c:0c:2a:69:
b1:d9:7f:41:4d:6f:c1:5b:75:9e:98:49:53:aa:f6:
fc:4b:17:75:79:51:24:db:bb:9f:be:d4:7f:a1:67:
61:b5:fd:c7:97:a0:14:fe:a4:d1:f5:8d:40:82:70:
69:e6:1b:50:dc:99:f0:e7:83:3b:6c:89:b5:27:a7:
da:b0:8c:3a:9c:15:52:a0:a7:6d:34:46:14:8b:6e:
70:5a:cf:2f:06:f8:a5:d4:ed:c2:35:51:9b:4c:e9:
9d:cc:af:88:ac:2a:37:12:78:62:fa:37:65:53:d3:
ab:06:e8:7d:2e:5e:7c:ab:1e:58:ce:89:38:3c:c6:
63:46:6f:0c:a6:36:50:16:d2:e5:c2:d8:09:30:48:
ac:c7:0e:36:2c:b3:1e:55:be:3e:bf:fa:71:58:54:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C1:D4:7E:7A:CD:45:96:29:AB:FD:F7:09:76:0C:B1:8C:E2:2A:9D
X509v3 Authority Key Identifier:
keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:a1:6e:d2:e8:1b:e8:c5:9c:0d:67:fd:88:7f:9b:ee:ee:
3b:7b:cf:b0:4e:d6:6e:63:29:bf:5d:b9:83:f3:f6:6d:c0:7b:
c7:3e:f5:78:05:ca:d6:c9:cf:ec:7c:8e:d9:85:68:eb:5d:4a:
62:80:58:3e:22:9c:ab:bc:e2:0f:c5:37:fc:01:08:55:ef:63:
5b:bc:43:a3:5d:f9:94:ed:47:49:34:72:dd:93:67:de:c8:95:
53:35:35:ae:fa:3d:ac:bd:06:e7:a2:30:9a:48:49:67:5d:ba:
1e:3d:ab:18:d1:c8:e0:c7:63:53:74:d7:94:74:04:fd:8d:e0:
11:7f:e9:08:f4:50:b3:01:0d:37:96:97:5f:d7:97:5b:29:28:
5e:e5:8d:da:7f:65:06:c2:e8:58:8b:34:87:87:74:68:87:b3:
a6:8d:d5:2e:bf:eb:45:f4:57:b1:8b:83:14:86:df:80:66:ce:
e0:bb:17:c4:f8:34:d5:a3:24:d5:41:2c:a7:6b:df:60:5f:11:
08:38:3e:b0:08:c4:86:0c:fc:8f:b3:a5:27:2f:ce:fa:fe:b7:
5b:e1:3e:73:49:55:7a:8c:60:c5:22:dc:8c:68:22:80:a5:bd:
27:af:1b:a3:10:f9:aa:53:25:fd:1f:3e:de:16:dc:e7:6b:40:
08:7e:71:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:39 2025 by rpki-client