Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: MYN9B83q/Kv91aQIrhT4MVxcRi5x6sKQYtt3dN92bhc=
Subject key identifier: 7C:79:CE:F9:06:51:98:62:F7:3A:A0:0E:A6:37:3C:B2:F7:78:B1:70
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 019A73382C0DECB51BA6867CDF4931BB3D3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 03E1
Signing time: Tue 11 Nov 2025 14:00:52 +0000
Manifest this update: Tue 11 Nov 2025 14:00:52 +0000
Manifest next update: Wed 12 Nov 2025 14:00:52 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: 4WMKcXKOk0bH7u2KcaKuzR5bEbGN0ULQ8CvKqdwEuCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:2c:0d:ec:b5:1b:a6:86:7c:df:49:31:bb:3d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Nov 11 14:00:52 2025 GMT
Not After : Nov 12 14:00:52 2025 GMT
Subject: CN=7c79cef906519862f73aa00ea6373cb2f778b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4c:20:57:ff:74:2b:59:aa:74:6d:bc:a7:29:
78:30:7c:9f:d8:65:94:96:06:0e:7a:62:b1:e0:83:
ca:6c:af:b5:5f:12:b5:e2:cb:a7:95:e4:7f:eb:0a:
d2:34:1b:65:97:46:ec:e0:c8:da:02:9e:01:bb:73:
d4:32:38:78:86:c7:f5:42:a8:8f:02:38:94:c8:7e:
0d:86:0a:f5:36:cf:3e:d4:1b:16:9c:6a:d4:d3:5a:
00:29:9e:bd:09:f1:01:d7:fb:d3:31:38:9f:e7:76:
40:54:2b:81:36:17:c0:9f:69:f4:a1:f6:d2:c2:4e:
0c:ea:b9:89:9a:f6:e9:f5:a4:16:6f:8f:1c:86:88:
90:91:04:03:01:d4:d9:a8:e8:68:69:b9:a0:50:2d:
dd:98:d5:d3:4e:f2:10:ae:ad:5c:7b:ea:db:38:c3:
5e:79:60:a0:59:d6:cf:d9:a4:cd:de:1c:1c:67:6c:
76:33:34:ee:e8:2d:b6:2c:0d:51:05:31:7e:5d:cb:
d8:64:78:8a:a9:55:da:49:14:0d:32:66:f0:46:d5:
27:91:4c:db:47:c8:99:0a:2f:38:ef:63:41:35:c2:
c4:f5:6c:de:27:1e:b5:24:a4:4e:00:19:59:a1:04:
2e:44:05:fb:55:61:d0:9d:25:5f:dc:a0:23:42:2d:
7e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:79:CE:F9:06:51:98:62:F7:3A:A0:0E:A6:37:3C:B2:F7:78:B1:70
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:08:e7:ba:2d:c5:17:43:96:49:ee:ec:be:47:59:4d:56:
2d:a6:5a:a8:8f:b5:fe:db:8c:ee:e9:ae:81:3e:43:49:d3:1a:
be:4f:88:cb:ef:d4:2d:ea:19:f5:fe:7b:b0:86:d9:08:88:94:
dd:3e:70:e6:26:0c:16:c7:0e:b9:11:78:b5:53:9b:b5:5c:0d:
cb:f5:02:8b:e5:b5:36:db:64:1d:28:fa:89:07:25:b1:d0:a7:
0f:24:e4:37:08:64:eb:e4:4a:8e:ef:ab:3b:90:18:40:50:8c:
97:8c:71:df:b2:2e:1b:49:da:4d:ea:f4:2f:97:61:d8:44:94:
a5:b9:e0:be:6a:61:63:99:a6:d8:a6:ea:a1:42:50:0b:ec:1b:
83:e5:21:7c:6f:33:57:cc:52:22:e6:0e:dc:a3:e7:e0:28:62:
8e:31:1f:1f:bf:af:de:ba:2f:e1:d3:4c:94:98:dd:c0:d1:c4:
3d:94:88:86:5f:9a:27:e1:92:06:cd:7e:65:b2:ed:26:5f:9d:
0e:6e:77:f0:1f:62:4f:84:89:5d:1c:b8:50:31:35:8d:3e:b3:
06:47:c5:89:5f:ea:ca:d5:73:26:bb:0b:28:50:ae:72:dc:54:
1c:d0:b4:16:7b:c1:f7:b6:32:84:5f:d4:bc:b9:46:ae:7b:94:
73:04:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:20 2025 by rpki-client