Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: HsN6x/KqrveSZGDSgOGkCOZob4+dZRIwgqUo03A4EBQ=
Subject key identifier: BF:6A:E9:46:F4:E0:28:A8:65:33:7A:95:C5:4D:41:CA:61:A4:ED:90
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 019A71B7E7CE39C06B51FDD6AFE0B0A09EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:09 +0000
Manifest this update: Tue 11 Nov 2025 07:01:09 +0000
Manifest next update: Wed 12 Nov 2025 07:01:09 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: qVbrczOjbbkcaTp8bTEUWipV0EKLLcR7zMs/bOK6NAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:e7:ce:39:c0:6b:51:fd:d6:af:e0:b0:a0:9e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Nov 11 07:01:09 2025 GMT
Not After : Nov 12 07:01:09 2025 GMT
Subject: CN=bf6ae946f4e028a865337a95c54d41ca61a4ed90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:96:1c:2d:fd:1f:54:05:0f:98:bd:9e:84:a8:
22:99:2d:1b:13:27:24:36:e1:f6:e1:48:0c:56:42:
86:83:bb:8d:75:69:4a:23:99:6c:0e:77:db:c4:40:
2e:91:12:06:9a:a5:1a:a0:56:c9:28:8d:3e:9b:84:
01:33:4b:1b:a0:dc:ac:65:8f:77:e4:b3:70:b3:d4:
be:38:3d:11:43:5c:3a:37:0b:03:a9:7e:41:7c:07:
0b:30:22:dd:73:a8:eb:8b:80:49:91:98:1a:98:64:
16:aa:cc:22:46:92:d1:5b:cf:5c:53:6e:5e:70:66:
59:9e:ca:dd:c3:8a:3c:ea:ac:23:01:b9:a7:e7:6d:
57:47:95:ed:3a:38:0f:02:fd:73:f0:5e:d9:d4:9e:
58:16:62:1d:63:f9:29:46:e7:1d:5d:a0:f6:a3:07:
67:af:a1:4a:3c:2c:16:35:66:7c:a3:43:79:e5:e9:
67:8e:81:04:7f:24:0e:a7:d8:27:3c:43:4f:02:88:
f5:06:b9:d9:c4:5d:9a:43:97:b8:fa:cd:d4:b0:c8:
2e:f2:a4:51:08:e6:07:d7:be:b3:94:a9:bd:bd:e9:
29:9d:1a:b0:29:93:4c:ff:44:0c:2a:2c:8e:b1:94:
99:8f:c0:78:90:5d:74:36:e3:93:e6:4b:5a:e1:28:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:E9:46:F4:E0:28:A8:65:33:7A:95:C5:4D:41:CA:61:A4:ED:90
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f9:96:a0:a3:cb:6b:f0:15:22:a3:fd:91:45:08:f1:fd:e3:
0b:6d:3b:f1:0a:4f:74:32:2c:91:56:9b:f1:85:fa:8e:66:75:
9f:df:be:ac:50:fa:4e:2d:c8:80:bd:2b:23:27:d2:68:6d:a3:
6c:3b:61:56:ea:c4:5a:e3:cd:cd:66:be:35:6a:d9:aa:8e:1f:
97:f3:29:c5:bd:3d:be:05:10:b2:c1:b6:22:f9:2c:eb:07:47:
4d:ca:fd:92:b8:da:56:fc:61:76:9c:f5:37:19:ad:6c:0d:1d:
4a:36:75:a2:3d:db:92:22:b8:30:64:07:3a:94:6a:7d:de:9a:
72:79:67:d2:ed:02:48:1c:00:42:6f:1a:2e:af:ce:9b:2d:08:
82:19:2a:fb:60:2b:2f:82:9a:f0:33:28:6a:cd:2f:86:5c:2e:
bf:44:40:d8:2e:14:72:cc:5a:b3:b2:48:db:20:b9:dc:41:4a:
e8:ec:29:da:1e:c8:eb:28:e5:5c:7f:cd:36:f0:7e:22:2d:a6:
69:dd:ad:b2:44:c7:86:27:c0:b8:45:a6:19:95:a9:f6:86:38:
8b:5c:2e:09:a1:01:81:f6:c8:e5:3f:6f:64:5a:0e:ff:26:93:
3a:fc:fb:d2:a8:88:05:e0:4b:a8:52:69:37:6a:3f:9e:04:81:
87:ff:6c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:48 2025 by rpki-client