
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: WfK2jD80smAVycA6mC63QU3UcXDqmrQFwc3bwg4qNnA=
Subject key identifier: E4:A4:F9:4E:99:AD:43:16:1E:E9:96:00:E3:0A:EB:6E:D9:7B:28:A8
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019922FA3F16482A2184CEFEDEF987997B08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 115F
Signing time: Sun 07 Sep 2025 07:00:49 +0000
Manifest this update: Sun 07 Sep 2025 07:00:49 +0000
Manifest next update: Mon 08 Sep 2025 07:00:49 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: Be2QqP8BTXH6AqFmIAvJrr/l5Vd3+7NjeI6KVNa1dRU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:3f:16:48:2a:21:84:ce:fe:de:f9:87:99:7b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Sep 7 07:00:49 2025 GMT
Not After : Sep 8 07:00:49 2025 GMT
Subject: CN=e4a4f94e99ad43161ee99600e30aeb6ed97b28a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:5e:44:ed:73:0e:b9:86:91:59:2a:82:b1:b9:
34:7b:5e:02:2d:28:7e:2e:bb:e1:cd:e9:ce:4d:eb:
11:4b:b5:81:9e:9b:6c:6d:ed:08:74:b2:0b:a3:a8:
eb:02:a1:79:0b:88:c1:bd:d9:ba:53:f6:be:2f:99:
44:73:33:a0:03:36:45:07:96:f9:2e:92:f1:07:53:
fd:6f:73:86:ba:82:53:c4:12:a8:49:8f:98:f6:a6:
9b:6c:12:22:82:ff:fc:2c:2a:0c:62:62:11:f5:c3:
ce:e0:8a:e7:82:d8:ba:e1:2e:58:bd:05:e6:48:94:
6e:3b:1a:50:04:be:7f:0f:dc:d7:30:9d:f0:c5:19:
79:5e:e9:2f:fb:34:b7:db:85:34:e7:fd:ba:82:45:
ac:0b:0f:7e:eb:78:18:d4:49:98:e3:3c:51:98:c8:
74:64:93:3c:47:0b:22:06:d2:62:72:62:30:b8:5b:
40:13:8a:71:60:db:f1:f1:35:6e:84:ea:c7:4e:00:
90:37:d2:39:0a:df:79:8b:c3:f2:6e:33:c8:be:1f:
7c:e1:52:6d:0f:a2:26:b3:94:7c:c8:b3:42:8d:19:
51:1d:74:74:e4:5c:6f:e7:3a:35:fb:b4:6b:56:07:
48:ca:4e:1c:b1:48:5f:bb:af:79:9e:9e:15:9c:60:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:A4:F9:4E:99:AD:43:16:1E:E9:96:00:E3:0A:EB:6E:D9:7B:28:A8
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:a5:b5:94:b1:35:96:26:fa:b1:31:9d:b3:3f:da:b5:2a:e9:
81:c5:d9:be:e2:b0:be:6d:5f:08:b4:68:e9:c7:fb:2a:10:1e:
f9:bb:0d:6e:38:bc:28:37:43:83:0f:da:3d:ac:84:8f:c0:45:
75:bb:ba:09:e3:b8:12:e4:68:eb:48:c7:63:32:6e:64:e3:64:
cd:4d:f5:c6:de:02:f1:74:d4:52:e4:1c:ca:12:ac:06:b7:41:
cf:53:b5:8b:d0:e8:32:27:cc:d5:b7:a3:a8:f6:16:f5:9a:3a:
37:1a:39:78:2c:11:fd:35:fb:c8:08:09:45:be:01:59:77:ad:
7d:91:52:28:15:7a:9b:b6:8b:db:4d:ba:3b:ef:79:91:ad:54:
20:79:09:91:10:79:72:8b:01:35:ea:9b:1b:f3:51:0c:37:b7:
7d:f9:dd:1a:ef:25:3b:30:58:d4:47:b9:2e:79:f3:89:8e:77:
0d:5d:51:f7:ef:cd:ce:52:b6:7a:1e:71:f1:06:83:6d:2c:07:
45:3c:45:93:e2:6c:9b:47:1d:9f:88:7a:47:53:58:af:44:25:
12:dc:b1:63:08:ea:5c:9b:3a:76:8f:d7:41:34:ec:86:51:94:
fc:6b:d6:aa:5d:41:c9:4e:26:d1:95:6e:d2:12:68:57:d3:44:
6c:94:b9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:09 2025 by rpki-client