Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: d6VTWDUIDWicVslfgoDZLwJd23dt1cArXzPvKybhEVc=
Subject key identifier: 88:B3:D0:6A:8C:9A:C9:E0:2B:1F:C0:15:50:47:A1:78:58:E6:B0:39
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019A73A697AF1023E3F443A289F6C6959922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 16B0
Signing time: Tue 11 Nov 2025 16:01:28 +0000
Manifest this update: Tue 11 Nov 2025 16:01:28 +0000
Manifest next update: Wed 12 Nov 2025 16:01:28 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: YKOvfY64EEXKMn+qxZW06qt8fO6lqA5Wki6j/Fxo1po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a6:97:af:10:23:e3:f4:43:a2:89:f6:c6:95:99:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Nov 11 16:01:28 2025 GMT
Not After : Nov 12 16:01:28 2025 GMT
Subject: CN=88b3d06a8c9ac9e02b1fc0155047a17858e6b039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:ae:92:de:a1:79:78:e0:e7:c5:12:f2:ed:
c6:c5:c0:28:b5:a9:a4:20:a2:51:a4:f8:e9:59:8b:
e5:a4:f6:f1:ab:f7:38:7f:e1:0b:9a:b1:1d:64:fc:
1c:27:3b:bb:85:4d:c8:cc:ca:08:32:bc:fd:7e:b6:
c6:f9:80:d2:d1:8f:f9:17:15:45:1f:f5:1e:74:c8:
8b:db:30:a4:ff:93:e3:8e:f4:15:50:a9:88:54:8b:
86:00:36:63:b6:e5:34:bb:3b:fb:a3:75:1a:66:d1:
60:47:83:36:28:e3:bf:56:d4:31:de:2f:48:da:9c:
5b:49:75:76:51:09:3f:a3:69:b9:30:0e:eb:8e:ee:
6a:58:48:65:b6:c9:cd:55:f3:a7:20:35:03:ba:75:
13:9c:44:27:93:a3:01:43:41:0e:a0:e0:b3:59:86:
e0:fa:e6:2b:c1:79:88:a5:ea:04:c6:45:4e:50:b7:
8f:fb:f1:45:81:7a:2a:2d:66:7c:7c:52:8f:16:c9:
be:02:6d:13:fb:d2:ba:74:ff:4a:8f:78:ad:34:bf:
61:dc:7e:36:d4:3f:a8:d1:ff:a4:a4:93:09:07:c4:
9e:84:1a:45:c0:a8:02:a9:c0:f7:5a:58:6d:34:87:
b5:1a:f2:b7:3b:54:74:dc:43:f8:7b:f0:a9:86:1e:
37:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B3:D0:6A:8C:9A:C9:E0:2B:1F:C0:15:50:47:A1:78:58:E6:B0:39
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1c:9d:8d:16:ea:46:04:c9:45:cd:78:af:5a:b2:0a:e2:53:
df:f8:90:0d:54:c8:ca:39:87:a4:c9:c8:7e:1e:1d:2f:55:8c:
d0:f1:b7:71:ec:a8:ac:08:4c:2c:44:d7:ca:37:07:4d:8a:58:
d2:12:9a:d1:10:0f:2d:a5:0f:a2:39:50:7d:f2:ba:02:9b:ec:
02:c0:7e:e1:c7:8f:fe:e4:9f:5b:2e:b1:15:df:c5:6d:2a:7f:
a2:3c:81:8b:92:88:25:ef:f2:0b:80:1b:c0:26:a5:a6:ff:a7:
e6:0d:b6:29:dc:7e:f3:3a:63:76:e4:a9:f2:ac:19:76:2e:36:
ea:c0:2c:e1:a9:80:ab:f8:05:e5:cf:59:de:73:56:63:b5:99:
65:1e:bf:c3:ad:52:11:b5:1f:a9:a6:50:2f:64:1d:3b:60:72:
4f:8f:ed:44:37:bb:bc:17:94:02:7b:72:85:cc:7a:1e:1f:81:
3a:ed:a2:7f:bc:9c:d4:18:4b:e7:ac:ab:06:0c:94:f1:7e:55:
78:93:76:9e:eb:ca:44:f2:18:39:1c:9a:99:6f:2b:63:13:6f:
b3:ad:cb:5a:eb:10:cd:48:30:25:38:d6:44:6a:f1:bc:cd:ec:
90:72:03:e1:52:dd:28:df:0a:c9:e6:4e:c6:4b:55:4d:68:f4:
1e:fc:55:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:09 2025 by rpki-client