Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
File: QsjW8uHBvt_nu4z3nbKMjvP7d28.mft (raw, json)
Hash identifier: yFgeDcZiytpz0l4Mf67gr0ratx1s4vznpJCgarJDcFU=
Subject key identifier: 66:2E:6B:4E:BC:72:B6:C6:6D:68:30:8C:33:1A:C7:8B:4A:B0:B3:E4
Authority key identifier: 42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
Certificate issuer: /CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Certificate serial: 019A71B916DAADDCC937E485CE0DA2EBE459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:26 +0000
Manifest this update: Tue 11 Nov 2025 07:02:26 +0000
Manifest next update: Wed 12 Nov 2025 07:02:26 +0000
Files and hashes: 1: QsjW8uHBvt_nu4z3nbKMjvP7d28.crl (hash: 6DnXLYkl4TvCu3nT0xFIpDMsF3Bck6OWPizdYfGU0HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:16:da:ad:dc:c9:37:e4:85:ce:0d:a2:eb:e4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c8d6f2e1c1bedfe7bb8cf79db28c8ef3fb776f
Validity
Not Before: Nov 11 07:02:26 2025 GMT
Not After : Nov 12 07:02:26 2025 GMT
Subject: CN=662e6b4ebc72b6c66d68308c331ac78b4ab0b3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:89:1e:19:59:03:a5:05:bd:15:4b:29:40:b2:
2e:c9:cd:19:f1:e0:82:82:17:19:87:3c:19:b2:07:
84:5d:ef:c2:f1:72:f9:7e:92:e8:2a:0f:3e:72:39:
8a:a2:84:ab:b9:3a:a9:cf:3a:be:02:21:7d:3f:f0:
79:03:cd:6d:c0:2c:15:54:b8:aa:d2:3c:76:72:92:
24:95:53:98:21:d9:b1:01:2f:40:3f:12:4c:1c:b6:
42:38:0b:3c:e3:89:1d:eb:e4:19:3e:19:9e:8d:a4:
b4:9e:0a:8f:d3:2c:56:4f:6f:7b:23:60:d1:fb:13:
f7:1f:af:97:be:5b:8a:22:58:8b:01:4d:6c:a5:f4:
0f:eb:85:c7:d2:1f:ac:6b:3a:6c:1e:d0:da:6e:78:
0e:21:47:cf:1a:f5:dd:81:17:6b:27:c8:56:3e:14:
2e:92:42:b1:1b:4c:9f:15:80:bc:8c:62:f7:7d:18:
6d:39:98:e9:ea:ba:e8:a0:cf:77:8b:cb:3d:ab:f3:
17:b5:53:d5:cb:6e:fe:e2:63:64:68:91:b9:6d:ed:
8d:7f:52:12:18:73:23:88:96:78:82:b6:01:99:2f:
ef:02:b6:c8:78:c3:d9:95:8d:96:fb:dd:48:26:c8:
a2:9c:96:f8:26:0e:31:28:fd:7e:ac:01:c3:54:30:
30:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2E:6B:4E:BC:72:B6:C6:6D:68:30:8C:33:1A:C7:8B:4A:B0:B3:E4
X509v3 Authority Key Identifier:
keyid:42:C8:D6:F2:E1:C1:BE:DF:E7:BB:8C:F7:9D:B2:8C:8E:F3:FB:77:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsjW8uHBvt_nu4z3nbKMjvP7d28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5ef774-3099-456a-87e8-0fdb7bcdffd6/1/QsjW8uHBvt_nu4z3nbKMjvP7d28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:98:d2:72:94:69:d9:a7:ac:13:1c:d0:46:81:75:7f:ed:44:
bf:86:36:c1:60:55:f6:02:7f:f0:fd:70:48:99:55:fc:27:f8:
cf:59:18:48:58:e4:5b:6a:fa:4e:9c:49:a6:7d:e1:11:6d:03:
cd:5a:25:bf:89:c4:9e:44:fd:42:82:3c:eb:7d:38:8d:f0:ef:
60:8f:b6:ac:64:ff:8a:54:c7:ac:d9:62:68:7d:89:95:81:5d:
34:5d:4d:0b:6b:f9:73:ec:1e:ea:4a:74:69:03:c4:bf:a6:14:
fc:89:bc:54:d6:b5:1d:49:c5:92:c4:37:a8:e5:ef:e0:60:e0:
63:00:14:2f:88:a5:62:79:5d:e2:5f:e2:eb:4c:bb:f3:f7:4e:
05:6a:bf:f4:81:9e:ef:d0:49:74:f5:14:fe:dc:1f:ae:59:d0:
2a:f7:27:b5:a5:e5:ed:cb:68:8a:7d:7c:00:b1:d0:30:72:de:
83:12:74:ce:ef:ac:f7:0f:b1:5b:fd:d4:c4:a7:13:85:f0:6e:
1e:e7:e8:9c:76:9d:4b:b4:40:1d:36:fb:ab:25:b7:1c:8d:05:
97:b2:ce:91:3a:3b:16:24:91:5f:88:f5:b3:d0:c6:0c:90:64:
46:ec:c9:c3:6d:a1:7a:e6:a5:42:47:cc:23:45:31:15:29:62:
a4:2a:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:22 2025 by rpki-client