Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
File: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft (raw, json)
Hash identifier: 5iO/pgbXgb2vY+nH4ILXzzSAUjo9KI05Av2PeGTHRVk=
Subject key identifier: F0:42:80:20:4A:7B:C7:4D:79:A9:70:81:91:C2:D4:9B:76:CF:01:E6
Authority key identifier: 42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
Certificate issuer: /CN=424c165b6a49349541c65af9b21580163819f284
Certificate serial: 019A71B82323E4E049BBE490A27EB6657215
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
Manifest number: 0ABD
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl (hash: 6kXUv9RA2F+P23stG5zV7WBeDKESTdGovzuDI981+Fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:23:e4:e0:49:bb:e4:90:a2:7e:b6:65:72:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=424c165b6a49349541c65af9b21580163819f284
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=f04280204a7bc74d79a9708191c2d49b76cf01e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:06:0b:33:49:ac:b6:44:6f:eb:a5:36:8a:
4b:8d:68:f0:aa:73:69:95:a5:e5:f5:22:2c:a2:26:
c4:74:47:e2:f7:be:65:c4:94:76:aa:d1:35:2f:fc:
ce:42:8e:f2:b5:64:c0:2e:7a:21:f2:02:29:b5:87:
8d:38:22:41:53:23:10:41:71:3b:c8:1a:b9:3f:4f:
10:b2:3c:14:d2:dc:00:0c:a9:7a:03:ae:02:5b:b6:
4c:21:6a:18:ad:e2:45:f2:bf:e4:e7:1c:c5:f1:44:
d4:8e:4f:58:93:b5:13:92:8b:d5:9b:f1:5e:74:ab:
c1:ce:3a:a2:69:11:77:39:d0:b0:2f:e9:30:e1:8b:
72:df:9a:e8:6d:d5:42:b3:89:c7:24:22:4c:7d:b1:
63:8d:50:16:93:31:45:fc:3f:db:bd:1d:df:2d:5a:
ef:05:fc:46:85:11:83:fb:ec:6c:d1:cd:cc:b0:b4:
11:16:fe:14:08:4d:04:cc:1c:01:37:7f:02:40:ab:
6e:ad:b3:9c:04:a9:da:bf:10:17:e1:e6:2e:ef:a5:
70:93:6e:7b:30:d2:69:dc:49:3e:ad:ed:b0:2f:93:
e2:03:28:e4:44:8b:1f:ee:26:18:7b:3a:9b:de:59:
a7:01:71:68:e8:1d:f2:8a:6d:01:86:3b:ec:0e:65:
23:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:80:20:4A:7B:C7:4D:79:A9:70:81:91:C2:D4:9B:76:CF:01:E6
X509v3 Authority Key Identifier:
keyid:42:4C:16:5B:6A:49:34:95:41:C6:5A:F9:B2:15:80:16:38:19:F2:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/70c498-6b1d-4d92-a4e8-ec3bf4816d36/1/QkwWW2pJNJVBxlr5shWAFjgZ8oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:25:14:2f:05:88:07:e6:ea:61:02:4f:87:4b:56:a3:ad:d4:
86:e6:61:22:45:2c:33:24:7a:a7:36:32:b1:9d:1d:22:ad:a3:
30:fa:22:5a:3c:56:42:22:40:67:92:f6:27:2a:72:42:05:eb:
3a:2b:21:27:39:50:27:74:48:6f:4c:19:2f:bb:01:f3:74:d3:
18:cf:ac:9b:0f:bc:7a:42:90:e5:e4:9b:b3:8c:71:9a:c4:62:
98:d7:f0:17:fc:9d:51:65:d8:9f:0e:c2:9a:42:a4:6c:64:d6:
bd:82:ce:bd:28:ca:9c:39:0e:1a:5f:89:23:53:94:f5:35:e2:
5c:cd:b0:b2:f0:16:4a:bd:ad:d1:14:85:0f:b0:c7:5a:3b:bd:
02:e8:47:01:ce:e2:11:0b:8d:da:69:e2:51:ed:53:5e:de:9c:
6f:75:46:11:4e:ee:82:68:90:63:9d:2c:82:48:0d:ad:d2:24:
80:a2:53:c4:af:83:43:25:c8:20:dc:77:62:4c:2c:e0:d4:11:
c4:31:bf:0f:21:a8:04:a7:71:10:27:75:d9:0c:04:33:d6:94:
42:23:49:34:73:0c:e9:e8:ff:fa:09:d3:8c:1c:f9:1f:86:a3:
f0:ca:e3:ad:24:72:61:44:9f:77:47:76:62:01:68:dc:4d:92:
36:88:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:45 2025 by rpki-client