Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
File: qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft (raw, json)
Hash identifier: RYtBNyKQbbZ+S3+3qQ70lW8thzYmS7yMAUPx0fyEoCM=
Subject key identifier: AB:83:30:C5:9E:C8:39:19:32:86:6A:76:22:03:31:A5:4F:6E:0B:1B
Authority key identifier: AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
Certificate issuer: /CN=ab19000781c183366cba55416fd75b57dba0e4bb
Certificate serial: 019A722606B2166D5686A565B15C60F8C757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
Manifest number: 03EE
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl (hash: CM+JytkHB4ON458QfmuEZMixSqIuVAK2vXf8N3MklKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:06:b2:16:6d:56:86:a5:65:b1:5c:60:f8:c7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab19000781c183366cba55416fd75b57dba0e4bb
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=ab8330c59ec8391932866a76220331a54f6e0b1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:2a:df:b9:ca:d3:6d:69:df:ab:30:3b:c0:
a5:3f:4e:e2:3b:09:49:60:d8:f7:24:c1:4d:81:2b:
2b:58:ed:0a:15:8c:08:2f:db:0c:81:6e:b3:b0:c6:
f6:f6:69:77:15:77:6a:06:ef:2c:ba:a1:1c:a1:1b:
1b:13:d1:34:6b:72:ad:75:f7:ce:2c:91:27:2f:a5:
84:1d:03:f9:5b:13:28:0e:c5:a4:cc:b4:c0:3b:14:
64:0f:50:c4:37:07:e1:0b:56:e7:00:27:51:20:11:
c1:66:fd:fb:39:17:e9:c3:29:56:0f:44:2b:94:7d:
fe:a1:2e:33:3b:89:b2:16:f4:8b:ac:d0:7b:22:28:
01:31:dc:d8:1b:b1:9b:97:30:09:29:9a:83:bb:8c:
14:4c:e4:9d:ce:e5:f4:e2:20:bf:49:ac:49:54:d8:
97:90:f7:a9:a7:2b:b1:25:08:9c:ef:c8:71:7d:14:
70:2f:6a:d2:b1:09:0a:72:16:d9:67:c9:bd:69:87:
4e:1e:9a:63:17:aa:23:37:35:8e:62:71:b1:ab:90:
0c:c8:99:4c:59:6e:0c:81:e7:b4:53:b0:44:a2:48:
46:d8:f4:94:cd:19:7a:d5:8e:bc:47:b8:d7:03:a3:
15:96:1f:9f:5a:60:24:48:67:79:89:84:5a:c3:24:
fb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:30:C5:9E:C8:39:19:32:86:6A:76:22:03:31:A5:4F:6E:0B:1B
X509v3 Authority Key Identifier:
keyid:AB:19:00:07:81:C1:83:36:6C:BA:55:41:6F:D7:5B:57:DB:A0:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxkAB4HBgzZsulVBb9dbV9ug5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56b53f-90c0-4a35-bf23-ff2dfd62d376/1/qxkAB4HBgzZsulVBb9dbV9ug5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7e:5b:82:6a:8b:81:0d:88:77:f3:b5:0e:06:c1:8d:9b:89:
e0:4d:d6:9f:bf:ec:04:38:f8:1f:90:4a:3a:93:dd:91:53:92:
83:56:6a:ee:fb:11:d4:94:4f:eb:f3:8e:0f:af:92:86:fc:e2:
e3:ce:4e:df:c0:75:b0:e8:3a:64:33:07:47:92:5e:73:06:1b:
5b:45:56:a9:10:e9:7f:5a:b5:f1:8c:1f:5c:2c:65:4f:03:5c:
19:2a:de:06:49:18:64:02:fc:4c:27:16:cf:81:ba:ca:cf:11:
fa:fc:56:f3:ca:88:01:b0:37:7b:b4:6b:80:98:8d:c1:b2:00:
50:68:bd:05:63:2b:20:90:47:49:7f:8c:5f:5c:af:d2:a5:a2:
88:32:56:9a:08:ed:5c:45:7d:4b:59:e0:87:78:f3:70:8b:d9:
84:0d:a4:48:f3:42:f8:a7:d2:01:f5:99:5f:6a:29:be:d0:bb:
c1:84:10:b0:e7:8f:1b:e5:04:e0:02:63:ba:ff:76:d5:eb:84:
82:4b:b6:69:b2:38:37:df:26:1e:fa:dc:04:cf:f2:e5:58:63:
bf:6e:3a:2b:4b:1a:f8:27:bd:19:58:e0:6a:31:46:9a:51:35:
ac:a8:f5:b2:fe:57:f4:90:6e:b7:96:6b:ef:c6:e5:ac:82:40:
bb:7a:d7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:14 2025 by rpki-client