Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: kCsdebKBAmq3UUFHApLaQQDFtKuSPYPtqbS01a/LrUw=
Subject key identifier: BC:3A:A6:80:12:2D:A2:E1:89:22:7E:96:A6:A6:DD:2B:88:31:AC:E2
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 019A1E085659143D9D8652389E30E81135CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 0399
Signing time: Sun 26 Oct 2025 01:00:54 +0000
Manifest this update: Sun 26 Oct 2025 01:00:54 +0000
Manifest next update: Mon 27 Oct 2025 01:00:54 +0000
Files and hashes: 1: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: qCtEUb70MCQHQLn1H0OMua+XGtHHD1+UBTxMU4r8HKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 01:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:08:56:59:14:3d:9d:86:52:38:9e:30:e8:11:35:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Oct 26 01:00:54 2025 GMT
Not After : Oct 27 01:00:54 2025 GMT
Subject: CN=bc3aa680122da2e189227e96a6a6dd2b8831ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2d:b7:54:19:3c:b5:7c:29:67:db:9e:a2:cc:
5a:ba:f4:70:2d:b6:9a:3a:e9:64:92:fc:b9:79:23:
a4:a4:71:79:b4:af:3d:46:5c:43:4f:2a:40:57:7c:
da:a9:a8:ab:be:2f:9f:3a:93:0d:6e:6b:95:a9:a1:
53:c3:34:72:e6:a3:cb:39:f9:f2:d0:8d:5c:83:e3:
85:5f:62:11:50:9d:52:07:17:d9:a2:40:dc:09:eb:
89:c1:8f:69:bc:d0:a6:42:32:24:48:4b:02:7b:9c:
28:cf:c7:86:68:99:a6:9e:01:a9:e4:0f:b1:a3:5a:
5f:42:0a:76:6a:f1:09:44:fa:0a:30:b0:26:44:da:
06:33:11:78:c0:f5:2c:ba:a4:97:b9:2d:36:aa:ba:
7d:d9:16:0d:45:af:4e:86:15:66:8d:ec:7a:aa:90:
fb:f2:ef:c0:2d:b9:b3:23:71:16:4c:58:59:08:4d:
83:b1:4b:12:a8:25:31:5d:30:92:d0:14:4d:2f:77:
5e:30:d4:da:2c:37:10:41:9f:55:17:40:9f:78:9b:
0e:a2:42:f8:b0:8f:5b:3a:e6:9f:99:76:c1:3e:b4:
39:d8:e0:2d:4a:74:56:b7:58:27:4e:7b:2a:2f:f9:
60:30:12:a6:2a:1c:c4:e2:05:6a:e9:47:4a:78:a9:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:3A:A6:80:12:2D:A2:E1:89:22:7E:96:A6:A6:DD:2B:88:31:AC:E2
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:3c:03:97:e6:f6:ad:c9:05:3c:ec:de:d5:86:bd:b2:62:cb:
87:ee:2f:c0:e8:11:ac:7b:67:4e:4b:ec:d5:71:a8:db:72:b2:
45:c4:62:1f:d3:59:99:c4:28:92:9c:36:44:60:d8:10:6b:95:
75:c5:60:ab:88:08:b7:a4:f2:f9:09:9c:9b:21:d1:2e:e2:f9:
64:b0:53:7c:76:b1:aa:cc:4f:b3:4d:76:9b:56:c0:6f:05:b6:
7f:99:a9:b2:ad:ae:44:92:8b:55:ce:54:d8:c7:79:0b:25:c2:
a7:da:5d:06:d0:1f:ca:f0:97:4e:a4:00:68:b4:75:4d:b2:1e:
09:6e:6e:02:ae:e9:d1:9a:b0:17:b8:a3:08:ae:f8:30:01:e2:
4b:5f:c7:52:91:ac:1c:a9:e9:31:07:d8:a5:fa:8f:df:ff:7e:
81:8e:66:fa:28:dd:09:8f:e4:56:4b:4a:87:01:33:c8:60:d2:
d8:83:ca:22:e6:c0:cd:36:72:db:44:fd:af:60:ab:fb:18:e5:
e2:cd:17:86:1d:02:f7:3b:e0:a6:ca:82:09:46:8c:95:db:56:
dc:75:1c:91:67:cb:0a:d3:5c:3c:1b:74:be:18:9c:2c:1a:4e:
5c:81:fd:76:ed:c3:77:32:c8:9b:df:25:0c:65:b8:8b:5a:86:
f9:dd:6e:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoeCFZZFD2dhlI4njDoETXPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNTQyZGFkMGJhZWRlNGE4YjExNTBmNDU5YTAzZjAxMWNk
YmE2NTQwHhcNMjUxMDI2MDEwMDU0WhcNMjUxMDI3MDEwMDU0WjAzMTEwLwYDVQQD
EyhiYzNhYTY4MDEyMmRhMmUxODkyMjdlOTZhNmE2ZGQyYjg4MzFhY2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqy23VBk8tXwpZ9ueosxauvRwLbaa
Oulkkvy5eSOkpHF5tK89RlxDTypAV3zaqairvi+fOpMNbmuVqaFTwzRy5qPLOfny
0I1cg+OFX2IRUJ1SBxfZokDcCeuJwY9pvNCmQjIkSEsCe5woz8eGaJmmngGp5A+x
o1pfQgp2avEJRPoKMLAmRNoGMxF4wPUsuqSXuS02qrp92RYNRa9OhhVmjex6qpD7
8u/ALbmzI3EWTFhZCE2DsUsSqCUxXTCS0BRNL3deMNTaLDcQQZ9VF0CfeJsOokL4
sI9bOuafmXbBPrQ52OAtSnRWt1gnTnsqL/lgMBKmKhzE4gVq6UdKeKkiaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLw6poASLaLhiSJ+lqam3SuIMaziMB8GA1UdIwQY
MBaAFK9ULa0Lrt5KixFQ9FmgPwEc26ZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMt
NmI1MDA4NGY0MjY0LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wMmM0OGItMTk1NS00ZDBhLWFkODMtNmI1MDA4NGY0MjY0
LzEvcjFRdHJRdXUza3FMRVZEMFdhQV9BUnpicGxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGDwDl+b2
rckFPOze1Ya9smLLh+4vwOgRrHtnTkvs1XGo23KyRcRiH9NZmcQokpw2RGDYEGuV
dcVgq4gIt6Ty+QmcmyHRLuL5ZLBTfHaxqsxPs012m1bAbwW2f5mpsq2uRJKLVc5U
2Md5CyXCp9pdBtAfyvCXTqQAaLR1TbIeCW5uAq7p0ZqwF7ijCK74MAHiS1/HUpGs
HKnpMQfYpfqP3/9+gY5m+ijdCY/kVktKhwEzyGDS2IPKIubAzTZy20T9r2Cr+xjl
4s0Xhh0C9zvgpsqCCUaMldtW3HUckWfLCtNcPBt0vhicLBpOXIH9du3DdzLIm98l
DGW4i1qG+d1u8g==
-----END CERTIFICATE-----
Generated at Sun Oct 26 10:43:21 2025 by rpki-client