Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: 9iTV3lSPWcunzDtItW7aFdkhIxM9lXJPsUVS5PqBea4=
Subject key identifier: F0:50:03:D9:4D:DC:26:53:6C:74:C0:23:83:97:D9:C3:67:13:BA:B8
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019A71B8E6A80ABA95B9C739E801FE482E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1658
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: 5gJVgnxtMBvXl9OffUbe7X273NQeUUfW8zAZ7K8aohQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e6:a8:0a:ba:95:b9:c7:39:e8:01:fe:48:2e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=f05003d94ddc26536c74c0238397d9c36713bab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:db:a8:cd:b0:87:1c:82:48:e8:e8:2c:f1:53:
03:7e:11:10:56:de:ea:a0:1e:c8:62:7d:02:d4:fe:
d7:83:be:79:d1:e5:be:d1:d8:18:c3:97:9f:f4:44:
7c:9c:70:25:c6:b3:62:4b:19:13:9e:74:c3:07:c5:
bd:6b:b5:8f:c3:19:b1:d6:86:5c:a9:2d:c3:87:e6:
e6:a5:a8:28:40:f7:ca:ec:24:bb:d6:fc:b2:14:d9:
eb:e0:b5:05:a4:fc:09:0e:44:df:f4:3d:46:f6:35:
a6:0c:9c:5f:03:7d:ca:57:69:f0:7b:1a:de:0f:0d:
f2:23:1a:c1:da:ca:c3:75:e1:7b:13:5e:9e:bf:bd:
30:bf:62:c2:30:33:16:db:7f:18:03:02:b8:0d:8d:
f8:50:2b:14:47:f2:ca:c5:5a:32:c7:44:21:35:90:
9c:40:ad:f8:e8:0b:9d:16:47:1e:21:35:e9:ba:96:
bc:a1:5e:f3:ad:89:7b:8e:1f:fc:1f:6f:59:ef:17:
0b:4f:f3:e8:8f:d9:f6:f8:10:14:e7:a5:ac:be:df:
21:fe:90:d5:62:61:10:d3:13:57:6c:c1:5c:3f:f7:
bb:8a:cf:98:32:75:ab:46:2d:2c:7e:13:55:60:84:
a4:fa:77:84:f5:32:f0:0e:4b:e2:91:bd:7b:6f:99:
fa:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:03:D9:4D:DC:26:53:6C:74:C0:23:83:97:D9:C3:67:13:BA:B8
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:70:1b:62:64:e0:ca:ea:98:a7:cb:db:b5:84:e9:b5:17:45:
33:3e:52:b3:53:aa:cc:2c:d7:12:07:91:c0:ee:de:ca:4f:72:
a8:b0:5e:7d:66:64:cf:98:56:36:cc:0d:4d:78:54:72:bf:1e:
50:a7:85:59:8b:a2:c7:6a:37:7b:e1:4e:43:19:e8:f5:b9:46:
d0:10:4a:73:d7:67:ef:10:31:ee:da:ec:b6:e1:c9:13:09:f8:
1a:06:59:b6:c7:d9:ad:fd:69:87:a6:5b:85:41:39:41:b6:ba:
12:b1:14:26:d0:6d:df:2e:10:85:be:1c:a4:7d:f3:be:0a:d9:
d5:a8:d1:e7:a2:65:fb:a8:cc:d2:1f:e6:0f:2d:96:1e:a9:57:
2f:96:a1:a4:db:7c:d0:95:47:6a:04:ad:36:a8:c2:05:8a:fd:
d1:b4:5e:47:16:69:e5:87:42:98:5c:b3:44:d1:ce:7c:1d:98:
31:59:5d:de:43:28:ea:54:27:19:c2:3d:b1:89:0a:b0:f1:5e:
1f:a1:ea:94:c7:78:15:a4:53:84:de:42:53:8a:22:f4:00:0f:
10:5c:84:2f:96:58:01:9e:f5:a4:b0:d9:a6:fc:bd:12:69:16:
19:09:ec:0b:d9:96:98:52:e8:19:c8:ae:67:1a:57:cd:ef:08:
52:f3:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:26:35 2025 by rpki-client