Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: wXDnXsfk1njj3xikJWUK0rHxwpJlwL9CjV41YqvTWAc=
Subject key identifier: B3:D4:60:8F:4B:1A:1C:33:24:57:ED:57:C9:0C:4B:F6:F8:76:D0:A5
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 019A706E7426A6D0AD8EDF0B88795B667D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 0751
Signing time: Tue 11 Nov 2025 01:01:18 +0000
Manifest this update: Tue 11 Nov 2025 01:01:18 +0000
Manifest next update: Wed 12 Nov 2025 01:01:18 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: WDyWpmbd6AwI531Ud3wGA0IwrTZ3hVWC9B9EcoAoex8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:74:26:a6:d0:ad:8e:df:0b:88:79:5b:66:7d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Nov 11 01:01:18 2025 GMT
Not After : Nov 12 01:01:18 2025 GMT
Subject: CN=b3d4608f4b1a1c332457ed57c90c4bf6f876d0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ad:eb:0f:a1:c8:c9:cd:43:b8:27:db:d7:39:
5e:51:ea:f0:9f:09:b1:ca:92:da:cf:07:b9:b4:30:
2a:16:b8:10:87:ab:eb:9c:34:2a:6c:17:a1:d3:8c:
2e:f2:08:7d:b2:a1:50:38:b4:be:08:d7:1b:b6:8b:
b8:07:82:e3:38:d2:89:06:71:de:ae:e6:63:10:6a:
fb:ea:94:1e:4d:a2:ff:16:67:d9:af:59:88:1f:05:
7e:19:36:ef:6f:ec:41:0e:2a:60:65:ac:92:3d:ff:
d9:e8:d4:90:17:4f:1f:2e:5d:0b:f9:44:a3:2a:d9:
23:84:46:a1:4e:be:21:dd:53:22:9a:81:2a:ad:a2:
c8:3c:a5:2a:43:b9:f8:e9:2e:e4:c6:8b:89:d4:d6:
d8:ae:80:96:70:4e:08:5d:1a:39:ca:d3:bc:00:6a:
17:6f:bf:59:29:76:40:c4:58:ec:2c:c0:5c:0d:eb:
8f:1d:51:2c:a2:e5:43:6b:29:05:34:f6:5b:e4:9e:
cb:bf:c7:d5:5d:c7:0c:e5:9f:cb:93:63:e1:10:d0:
52:11:f2:36:16:99:2d:ec:1b:2c:6f:e4:8b:56:df:
5d:49:b1:cc:a9:ef:35:98:9e:9a:85:f5:21:c0:9b:
42:35:45:7f:22:8f:85:2b:90:8e:c3:22:9b:cf:0c:
c9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D4:60:8F:4B:1A:1C:33:24:57:ED:57:C9:0C:4B:F6:F8:76:D0:A5
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:55:46:e0:cb:4c:2f:f7:e3:50:f2:dd:f8:7e:51:3c:95:56:
58:33:4e:44:e8:69:23:1f:8f:34:a7:cf:67:fc:6a:9a:d9:c4:
c6:ee:6a:25:04:56:be:a5:be:66:24:63:3a:92:f7:d2:6c:23:
51:1f:95:47:7c:d9:af:c7:d3:ee:4b:57:bf:34:44:eb:1f:56:
9b:a2:da:17:05:39:66:62:53:79:cd:de:2e:82:27:d2:6f:9d:
a0:05:ff:ba:00:d8:8c:f6:0a:81:2d:73:ad:58:05:93:fd:8c:
15:14:dc:79:72:9a:ef:4a:71:a0:b3:d8:45:b5:a5:70:41:31:
41:46:cb:97:82:26:52:b8:18:80:24:c5:1d:c4:5c:33:3b:0c:
62:27:50:3d:53:52:cc:e7:03:b8:e0:f9:5f:4e:2e:fc:06:6a:
24:35:05:57:9d:f9:26:98:bd:1e:d1:36:63:d5:6c:38:29:25:
a3:ae:e7:ec:e6:14:0c:f0:97:43:71:90:06:d4:88:22:f6:ac:
f9:70:e6:f4:85:68:6e:91:82:42:f1:09:81:bf:77:be:eb:66:
58:5f:4b:99:18:65:a3:47:20:8e:65:cd:6a:19:ca:6f:82:fc:
84:45:78:c2:74:9b:4a:25:67:55:17:7b:50:f3:a5:38:fa:d0:
2d:06:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:39 2025 by rpki-client