Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: W+CRpUe7aOsBfYFkOawVStkesz1rvx6Zk0FL8DKqjHY=
Subject key identifier: EB:5E:26:2E:ED:EB:36:2E:41:D5:77:57:26:F2:80:05:01:8E:FB:45
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019A7225A77D40B85B1F4536E12936528ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: kDbon9+ob+HaPtR8PCUs4BYw0ExPMGgpCqrgn6fTx94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a7:7d:40:b8:5b:1f:45:36:e1:29:36:52:8a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=eb5e262eedeb362e41d5775726f28005018efb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:7a:84:84:af:25:4c:72:2a:1f:d1:d4:13:c0:
dc:9b:d4:8d:f7:b4:6c:6d:f8:ce:0e:ea:8d:c6:d0:
d7:b1:10:c7:b4:9d:33:bc:29:1d:bf:4c:2a:22:b5:
0e:e7:80:ae:41:85:31:ad:65:db:23:eb:4c:69:a9:
07:8b:39:78:b2:af:63:57:d9:46:7f:69:60:db:bb:
65:b6:77:5b:87:fc:ce:c5:19:dd:29:d6:fe:47:97:
c1:57:cd:58:31:43:52:c3:6f:b1:0a:33:ad:87:5d:
68:91:31:e5:ec:8a:66:98:7d:9b:cf:1b:e1:7b:4a:
f6:3b:1d:83:bf:dc:90:16:9b:42:99:91:9f:95:84:
a6:07:a0:97:d0:ec:01:3c:52:89:53:a0:34:40:28:
01:f3:eb:59:91:fb:81:b4:2f:ae:05:db:6b:0b:3f:
71:cd:c2:73:55:0a:0a:a3:8f:18:1b:c9:1e:62:93:
ee:1c:71:cb:c0:5e:87:86:7f:d9:b6:31:48:f7:8d:
97:67:30:25:ee:ff:79:8f:45:89:d7:9a:da:3e:7b:
80:ec:0b:ed:bf:d3:14:24:54:6e:c1:45:ce:7d:23:
a7:f4:5a:eb:1d:3f:05:9a:11:70:20:50:ef:86:0a:
2e:f9:ed:6f:56:6f:17:e5:a5:ea:61:1e:df:9a:5b:
a8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:5E:26:2E:ED:EB:36:2E:41:D5:77:57:26:F2:80:05:01:8E:FB:45
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:60:38:d3:bc:ca:4f:ab:fc:93:a0:15:cc:4e:0a:74:6a:95:
e6:79:14:d6:7e:7b:1d:77:47:16:61:56:34:70:b1:71:82:42:
0c:47:d1:70:56:cf:7b:7b:06:17:f2:54:47:ff:1a:32:9a:55:
60:cd:d9:d0:77:76:18:1c:fd:d7:38:30:75:af:b0:42:88:a7:
98:f1:6c:27:53:b8:0c:e8:cd:44:a3:5b:13:0b:44:e8:6f:ac:
4e:98:94:8c:e7:08:17:2b:0e:48:50:b8:f6:74:ba:e2:ec:d0:
9a:85:af:1a:69:1c:0b:4d:2c:db:30:50:0b:4c:c0:06:26:92:
61:90:fc:34:9b:7d:6c:8b:7b:0b:be:50:ae:59:22:3e:5b:64:
c2:33:e7:90:9d:db:d0:e3:61:21:57:46:95:78:ab:1e:fe:77:
6a:46:a9:c6:74:ec:b3:e6:d3:77:ab:45:bc:62:9e:40:93:2c:
c5:fa:de:30:8c:5e:18:03:1c:93:8b:59:7a:af:08:ac:70:86:
2a:7f:a4:a5:d8:47:95:5b:d9:05:50:da:30:70:cd:9b:d4:21:
bf:29:42:6b:78:f0:74:99:5b:3d:a9:f4:40:d3:42:8e:16:c4:
b2:02:55:9c:3d:48:99:02:21:02:ce:6a:d1:c3:89:63:d1:78:
b5:df:20:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:44 2025 by rpki-client