Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: 6vVOqAHKrlU92q7heBDSe1qwA2i4NlcBot8qasjdUfQ=
Subject key identifier: 32:D0:E3:48:57:15:FB:9F:B5:85:74:A7:9C:7A:1A:ED:84:8C:52:05
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 019A711379531083F9A8953F224916EF9538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 155B
Signing time: Tue 11 Nov 2025 04:01:32 +0000
Manifest this update: Tue 11 Nov 2025 04:01:32 +0000
Manifest next update: Wed 12 Nov 2025 04:01:32 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: KtQj0KIL2KzsCtNAiSoktK5+K9gqdOhR03RSCSI9gP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:79:53:10:83:f9:a8:95:3f:22:49:16:ef:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Nov 11 04:01:32 2025 GMT
Not After : Nov 12 04:01:32 2025 GMT
Subject: CN=32d0e3485715fb9fb58574a79c7a1aed848c5205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:08:8d:15:ac:8a:c7:14:5f:e4:0a:9e:51:64:
83:7d:3d:12:bd:75:19:2e:fd:43:5c:09:0d:7c:84:
40:a3:e2:e0:00:1c:06:1b:a8:b3:32:cb:e5:68:9c:
94:69:17:98:3b:42:41:c4:7b:48:6a:17:a6:7d:4d:
4e:e0:05:b0:ba:d2:fb:1c:23:b3:a6:44:5c:6f:b1:
40:05:98:62:66:df:25:b0:a8:d0:e7:21:6e:83:bb:
84:e5:c7:e9:c0:c1:96:de:07:fb:64:f4:20:1d:94:
54:ac:f9:b7:30:56:56:ff:f8:6b:31:1f:5c:62:a1:
99:3a:aa:3b:d7:bf:ed:e7:cc:3c:fc:68:b0:42:60:
ef:b8:5a:b1:b4:b3:ea:47:e1:81:38:fd:a9:4a:95:
b2:20:54:76:a3:49:e8:c3:8e:b3:97:f9:0e:4a:37:
ef:52:ed:6a:b3:39:db:d6:83:83:19:1a:a9:38:73:
18:ae:39:a4:47:ea:fc:94:b6:b6:ee:46:56:9e:0a:
59:f2:ba:cc:21:2b:b4:42:5c:47:ae:49:81:ff:44:
05:5e:8d:ec:af:60:73:46:a9:1b:e9:c2:10:b2:f4:
64:87:22:70:20:9c:0b:85:b6:25:91:38:9a:bb:c8:
2a:15:13:b6:2f:f0:91:da:e5:ab:84:e8:b7:a2:c0:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:D0:E3:48:57:15:FB:9F:B5:85:74:A7:9C:7A:1A:ED:84:8C:52:05
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3f:4c:02:74:43:59:bd:82:e9:8d:e2:c1:47:48:7d:cf:41:
bd:64:4e:8c:69:6c:c8:2b:47:d2:d0:74:2a:11:02:65:24:a0:
fd:d8:58:57:87:a3:08:b2:ba:77:47:ae:c0:ea:f3:20:2e:a2:
99:7f:f0:f4:f2:9f:90:3c:a1:28:7a:ba:e7:40:61:4e:d3:6f:
3b:ab:ab:2a:5e:2b:bd:f2:16:d9:e2:75:69:83:06:cc:c0:62:
d3:69:da:5f:79:24:79:e7:7e:71:c3:a8:c5:95:a5:95:9e:57:
d2:1e:56:ac:ce:75:29:f4:70:2b:3f:5b:de:ed:e7:ab:ff:b6:
c6:bf:5c:42:05:28:64:31:29:0a:f6:7c:cb:55:9a:e9:67:28:
8e:66:71:24:d5:a8:64:16:37:76:70:14:d9:04:f6:6b:ad:46:
20:11:72:88:0a:18:66:b1:b2:38:0c:7f:27:1f:aa:5b:8c:36:
2c:34:d4:72:fb:d2:af:b7:7e:bd:77:05:c1:61:27:40:3e:ed:
54:f4:21:37:55:27:ca:9a:2b:c2:79:2e:d4:88:2d:0b:d0:92:
1c:83:ae:d1:aa:2e:61:aa:3b:eb:8d:a9:fd:8e:bb:cd:f5:13:
c2:17:c2:b4:57:b5:8a:4c:ec:d2:e8:89:5c:a6:1b:d1:20:91:
99:be:06:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:25 2025 by rpki-client