Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: NpafQt9vdU0YrX/wuZTenfGpATFRqQvMB6KVbGiIxHw=
Subject key identifier: A9:56:B7:51:C0:2C:AE:9F:94:C2:1C:C1:FC:B0:B6:F0:B6:0E:A8:6B
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 019A7225E89E5142B32C3517D0DE4832C5A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:18 +0000
Manifest this update: Tue 11 Nov 2025 09:01:18 +0000
Manifest next update: Wed 12 Nov 2025 09:01:18 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: zoKpU8ycvqmw+1rl8FvcJsBGy/yfGwmY1mCQLcXIG40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e8:9e:51:42:b3:2c:35:17:d0:de:48:32:c5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Nov 11 09:01:18 2025 GMT
Not After : Nov 12 09:01:18 2025 GMT
Subject: CN=a956b751c02cae9f94c21cc1fcb0b6f0b60ea86b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ed:3c:ef:0c:92:4a:54:04:42:88:36:04:e9:
81:fd:ba:1b:e8:fd:c5:15:b3:44:10:8f:73:52:a0:
33:6b:68:41:89:9f:2b:3c:76:e7:bd:58:9d:75:85:
d1:a2:e9:c6:dd:9f:65:29:8f:47:94:f3:2f:5a:7d:
e0:ce:e7:27:2d:79:e5:0b:6a:7e:22:19:55:83:49:
82:bd:55:12:5c:6b:eb:1d:14:44:58:45:68:10:fc:
75:1a:1c:bb:e7:1c:29:39:12:8b:fd:a1:b5:29:02:
25:d3:d3:2f:c6:52:e4:55:62:75:f0:a9:47:aa:8d:
d1:bf:c9:71:e8:e8:c6:14:99:b0:fb:3d:8a:20:9b:
35:85:31:67:27:bd:f8:00:bb:eb:0f:13:c7:a1:0c:
7b:59:02:a0:1b:b3:70:92:14:a8:62:2f:b3:3b:5d:
c4:3b:3c:a8:fe:67:d3:ca:f0:ef:63:94:96:cd:3b:
4b:cf:82:10:7a:e1:da:a3:08:49:ae:a8:50:2a:df:
7b:93:be:95:47:1b:fa:00:23:47:7b:39:9d:17:69:
22:5e:dd:46:f8:7b:76:2c:cf:d7:81:94:02:61:70:
3e:04:fa:00:79:7a:e7:93:c4:b2:8a:91:f9:77:28:
84:e3:b9:00:a7:f0:6d:9b:6a:7b:58:b2:d8:44:3d:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:56:B7:51:C0:2C:AE:9F:94:C2:1C:C1:FC:B0:B6:F0:B6:0E:A8:6B
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:e6:12:b3:83:28:ff:33:70:be:76:41:22:59:68:74:d7:91:
96:d3:0a:98:74:a7:ab:19:96:73:61:13:65:2f:22:66:c8:09:
31:b8:89:f4:d0:d9:21:56:60:6a:60:93:5d:9a:0d:8e:50:e8:
23:bd:be:d4:f7:ed:4d:02:89:ef:e8:58:46:36:fb:bc:5c:88:
ed:1f:86:c4:35:26:74:21:3a:71:98:92:2d:2f:40:72:9e:06:
85:e3:39:c3:6c:ab:1c:73:a7:2b:23:22:4b:79:fa:2b:de:3e:
f6:31:af:60:e7:f2:ec:5f:d8:ba:86:37:51:ff:b8:ca:b5:7b:
32:58:cf:66:b5:4d:11:ea:d0:60:57:2a:36:ea:8e:ba:12:60:
7d:f1:85:49:c9:ad:28:2f:8c:33:fb:8d:32:7a:a1:7b:4c:b4:
ce:98:3d:33:4f:66:59:38:b7:7c:85:be:40:7b:74:05:70:a0:
cf:b8:59:ba:e7:d5:84:26:db:49:de:15:5e:44:b3:4b:95:06:
4b:b1:9b:89:94:89:c4:30:88:d4:19:54:58:3e:1d:21:f6:05:
d7:5b:d2:f0:29:23:dc:0b:4c:00:e7:9b:d9:09:d2:74:c9:30:
a5:3e:f2:49:a0:f3:9f:fd:e0:78:67:b1:ab:57:16:b3:34:61:
e7:f8:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:12 2025 by rpki-client