Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: xQpa931GthKDQxEKr3pHn2+RVvFcJkdA3953H4ZAVtg=
Subject key identifier: CC:9F:AD:94:BB:96:90:01:2D:D2:ED:2C:F6:90:83:51:26:E9:A2:60
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019A7225E52068032BEA72E78C026B2B84FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 066E
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: uaVuSIADZU7WFsD+jAvivHqZu8BBo/bH1KGKLUSY6gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e5:20:68:03:2b:ea:72:e7:8c:02:6b:2b:84:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=cc9fad94bb9690012dd2ed2cf690835126e9a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:9f:cc:bd:b7:2e:5a:22:8a:bb:59:c4:e5:
06:5f:17:b3:bc:6f:93:6e:b3:eb:16:69:a1:d5:3d:
fa:ac:27:10:41:6b:5a:8d:8b:c5:6f:8f:89:7d:a2:
0e:39:93:54:1a:c8:af:8b:66:6f:5e:77:4b:b1:5e:
09:d3:59:f2:55:ee:e9:47:d9:18:a3:c0:ef:eb:97:
ed:66:18:22:66:e1:8d:e3:04:e1:29:ff:71:78:3c:
f9:9b:95:06:f9:4f:6a:ba:cd:ff:07:cc:7b:3f:8b:
0c:b2:eb:0f:0b:4a:80:48:6d:02:02:34:f1:50:09:
c7:46:e1:fd:25:c2:28:06:a5:cf:c3:5b:d4:30:e5:
96:dc:af:95:b0:f8:0f:29:86:0d:07:66:00:8a:6a:
88:49:36:e4:3e:77:bb:bc:b9:31:73:4e:ca:e4:4e:
9c:c7:fd:ef:88:f5:21:c7:e6:ca:d3:bb:a0:09:c5:
5b:2b:4e:44:12:e6:ac:69:1f:00:7a:8a:ee:64:81:
34:92:6f:0e:1f:17:08:88:c7:12:29:0f:a5:5c:53:
a4:0b:30:9d:eb:99:b9:f5:78:84:e8:e5:00:88:b3:
09:c2:62:a6:29:28:c1:90:32:c7:e7:78:4f:bd:2c:
70:49:ed:8b:0f:ac:65:4e:6d:e0:59:bf:e6:54:3a:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9F:AD:94:BB:96:90:01:2D:D2:ED:2C:F6:90:83:51:26:E9:A2:60
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:91:9b:21:42:d4:93:4f:ec:d3:8b:ca:ba:90:7d:dd:6e:9d:
ee:27:87:3f:bd:0b:58:f8:04:cd:e8:4b:6f:b8:54:9a:09:28:
7a:e9:46:11:af:d0:c4:19:46:49:2c:ee:21:01:22:3c:e2:02:
ee:d3:14:2e:01:ec:55:c3:70:f6:8a:6a:81:37:65:58:36:1d:
21:be:9b:54:12:d8:48:ac:3f:04:bc:53:4f:23:29:f8:67:9e:
2d:e8:2f:78:dd:88:a1:16:a6:40:b1:3b:97:25:c2:27:19:11:
fe:2d:62:dc:92:0a:0a:bd:a7:1f:58:60:e5:10:74:6b:c5:f0:
e4:c7:84:4d:62:09:f1:36:f6:f6:e5:ad:58:ad:50:90:17:48:
22:89:53:7d:7d:46:15:e4:a9:8d:3f:03:f9:c1:3e:0b:c6:ab:
28:99:76:f6:5d:35:f6:a4:ad:9a:d0:dc:c1:0f:ec:83:2e:1e:
b0:18:c0:b7:61:15:43:21:83:3a:fd:66:b4:d3:a1:e1:13:63:
44:e6:6e:58:f2:3e:f4:9c:5a:be:19:85:df:42:3b:1e:79:09:
5e:1e:a5:82:67:8b:55:fc:16:06:2c:80:fa:ba:4f:1c:e5:c5:
39:24:6e:0e:3a:1a:38:90:6d:c0:c1:23:e0:bd:f2:ef:8e:2f:
67:49:9f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:12 2025 by rpki-client