Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: oYqc3IC5YB37yMYuUNMW8+5OHEem+HZzLu76S/jcuHo=
Subject key identifier: 35:C3:95:BF:94:5B:50:F3:5E:48:64:0C:23:7E:1A:8F:AC:A9:8E:41
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019A4F62D4C6657F1D8C9F9CF618BD52122A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 065C
Signing time: Tue 04 Nov 2025 15:01:08 +0000
Manifest this update: Tue 04 Nov 2025 15:01:08 +0000
Manifest next update: Wed 05 Nov 2025 15:01:08 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: UbsRrrILc2+p8HkyH7g7rJ829+zpQvwcBj/ku0aZJFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:d4:c6:65:7f:1d:8c:9f:9c:f6:18:bd:52:12:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Nov 4 15:01:08 2025 GMT
Not After : Nov 5 15:01:08 2025 GMT
Subject: CN=35c395bf945b50f35e48640c237e1a8faca98e41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6e:fb:75:e2:dc:3e:ec:c7:02:8f:e7:9e:57:
c4:6e:0b:c2:ef:aa:e6:42:71:a2:f8:71:be:45:9d:
75:79:ec:cc:66:7b:f9:39:aa:33:71:a5:68:d3:1d:
f4:d0:c0:4f:6d:95:ed:77:e0:5e:bb:8d:23:ac:46:
97:bc:b7:a4:2c:cd:aa:ef:c7:be:8a:63:ec:7a:e2:
5b:e3:bb:9a:85:88:74:a8:87:75:e5:c4:75:9e:a0:
97:05:da:f3:99:1a:ba:59:76:79:75:92:c3:27:73:
c9:9f:e4:b4:6d:e5:f0:fd:c2:be:b6:30:4c:bb:33:
c4:45:76:4f:79:b2:46:bb:70:8e:f2:9d:50:3d:17:
d1:56:cd:95:13:0b:f6:91:06:7a:0e:bf:ab:52:e6:
6d:d5:f1:6b:f6:2b:53:5a:47:d9:41:0c:ee:2b:11:
09:7c:19:2f:0a:b8:e0:f9:8d:52:6b:18:40:37:c8:
30:15:d9:18:df:e9:dc:60:22:cd:16:24:64:0d:eb:
3f:3a:0e:4a:98:16:ea:30:d6:00:99:e9:d6:ce:13:
d9:56:ce:68:00:6a:fa:a6:91:fb:88:67:b6:44:25:
84:a3:52:55:50:25:c9:2f:90:92:6d:a2:7a:77:ed:
82:bf:b0:6a:52:31:e5:de:51:28:ab:04:33:3f:a4:
9b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:95:BF:94:5B:50:F3:5E:48:64:0C:23:7E:1A:8F:AC:A9:8E:41
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:22:66:0d:86:23:c8:d8:49:48:8e:aa:27:e3:08:f2:85:c2:
17:d7:7f:12:83:e3:a6:69:ba:16:8c:45:59:5b:f8:5d:af:1c:
cf:00:85:13:68:41:32:b4:29:8a:7c:e2:a3:35:39:c9:fe:83:
44:97:4d:41:47:9b:86:1b:0e:30:3b:48:2f:ef:92:be:7d:a2:
04:54:31:1d:92:b4:05:61:a0:97:9d:4e:36:77:14:04:77:5b:
25:41:6f:4c:72:e7:1d:29:41:06:e0:2e:c1:7e:df:dc:8d:76:
f7:02:5d:5b:74:e8:da:16:7a:b3:f5:ba:6c:85:30:f9:99:67:
4a:95:4d:66:e7:47:b6:46:9c:4b:14:77:0d:2d:70:8c:db:58:
b1:cf:c5:ff:9e:6c:fb:73:f5:b2:91:27:2a:5f:68:3f:c6:8f:
15:21:ba:ae:5d:4d:87:77:6c:7c:6b:8f:78:aa:3b:fe:f1:6b:
fc:d6:98:b3:e7:36:0d:cb:a9:fc:5c:60:d9:d4:10:95:5a:f1:
f4:2c:9f:31:0a:97:50:96:c9:9b:47:39:54:0c:53:34:40:2e:
05:34:97:c8:7f:37:04:84:f7:ca:07:d9:0c:c4:14:1d:96:d0:
12:bf:4a:7c:c8:81:36:a2:a1:dd:3f:00:7d:b4:85:93:95:89:
62:f5:ec:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPYtTGZX8djJ+c9hi9UhIqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5N2VlM2VkNDRiM2RiYThiODNkOGVhMTc5OWFjMGU1ODNk
NjQxNGMwHhcNMjUxMTA0MTUwMTA4WhcNMjUxMTA1MTUwMTA4WjAzMTEwLwYDVQQD
EygzNWMzOTViZjk0NWI1MGYzNWU0ODY0MGMyMzdlMWE4ZmFjYTk4ZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr277deLcPuzHAo/nnlfEbgvC76rm
QnGi+HG+RZ11eezMZnv5OaozcaVo0x300MBPbZXtd+Beu40jrEaXvLekLM2q78e+
imPseuJb47uahYh0qId15cR1nqCXBdrzmRq6WXZ5dZLDJ3PJn+S0beXw/cK+tjBM
uzPERXZPebJGu3CO8p1QPRfRVs2VEwv2kQZ6Dr+rUuZt1fFr9itTWkfZQQzuKxEJ
fBkvCrjg+Y1SaxhAN8gwFdkY3+ncYCLNFiRkDes/Og5KmBbqMNYAmenWzhPZVs5o
AGr6ppH7iGe2RCWEo1JVUCXJL5CSbaJ6d+2Cv7BqUjHl3lEoqwQzP6Sb5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDXDlb+UW1DzXkhkDCN+Go+sqY5BMB8GA1UdIwQY
MBaAFKl+4+1Es9uouD2OoXmawOWD1kFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMt
NzBlMzViMGYwMTViLzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82YjRjNmMtNDllZS00YzVmLTg3ZjMtNzBlMzViMGYwMTVi
LzEvcVg3ajdVU3oyNmk0UFk2aGVackE1WVBXUVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyJmDYYj
yNhJSI6qJ+MI8oXCF9d/EoPjpmm6FoxFWVv4Xa8czwCFE2hBMrQpinziozU5yf6D
RJdNQUebhhsOMDtIL++Svn2iBFQxHZK0BWGgl51ONncUBHdbJUFvTHLnHSlBBuAu
wX7f3I129wJdW3To2hZ6s/W6bIUw+ZlnSpVNZudHtkacSxR3DS1wjNtYsc/F/55s
+3P1spEnKl9oP8aPFSG6rl1Nh3dsfGuPeKo7/vFr/NaYs+c2Dcup/Fxg2dQQlVrx
9CyfMQqXUJbJm0c5VAxTNEAuBTSXyH83BIT3ygfZDMQUHZbQEr9KfMiBNqKh3T8A
fbSFk5WJYvXsRw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:26 2025 by rpki-client