Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: MIldppAyd9UzSWrBavPVQhLeqEouphLXZEeWMASedNY=
Subject key identifier: CE:9D:AE:F8:4F:F1:F0:E9:82:1E:0D:65:76:24:36:3E:6B:A3:DA:BF
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 019A70A5671206F50447E7D97D00923FCA34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 02:01:19 +0000
Manifest this update: Tue 11 Nov 2025 02:01:19 +0000
Manifest next update: Wed 12 Nov 2025 02:01:19 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: uR3eO13AMUFPs9V9iSqmPVegLYfCpj1RF5MsXRJhsZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:67:12:06:f5:04:47:e7:d9:7d:00:92:3f:ca:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Nov 11 02:01:19 2025 GMT
Not After : Nov 12 02:01:19 2025 GMT
Subject: CN=ce9daef84ff1f0e9821e0d657624363e6ba3dabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f8:57:78:c3:51:54:60:3a:d1:77:f9:0e:99:
36:8d:d4:e0:6e:2f:56:b3:84:6a:16:19:58:ee:10:
18:95:c1:d5:16:54:37:f8:56:60:54:89:06:e4:1f:
cf:e1:43:bb:d2:68:d6:7e:97:66:1e:04:e3:89:f9:
d6:ca:36:04:c6:02:86:18:e3:b0:91:ce:0f:1f:1d:
db:9c:8e:65:e5:ac:3b:f3:82:20:0e:67:fc:81:98:
ac:e9:ac:63:ae:c1:ec:6a:b1:a8:95:d1:26:c8:55:
db:51:9a:a5:63:15:92:77:22:5b:d7:c3:58:ef:4e:
17:59:55:9f:ea:5d:f5:07:5e:88:48:c9:e8:c3:11:
5e:9e:00:65:d7:28:e1:0d:2a:77:0e:fa:74:79:95:
00:dd:e4:09:4f:71:28:68:ba:7d:5e:a2:e4:86:62:
fe:4a:62:d8:99:2e:39:02:02:ce:4c:4e:47:6a:fc:
a0:40:97:3e:17:2a:ee:4a:72:54:8b:1d:78:97:0e:
1d:33:dc:e3:30:4f:ca:12:77:42:5b:ec:4b:53:aa:
59:91:54:a9:d4:24:d0:95:68:b0:a1:9b:ca:71:82:
23:7e:fd:e9:c8:43:93:3c:e4:d5:6f:3e:1e:f8:ed:
8f:30:ce:29:9b:e5:21:af:8c:89:dc:15:58:e5:43:
c0:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:9D:AE:F8:4F:F1:F0:E9:82:1E:0D:65:76:24:36:3E:6B:A3:DA:BF
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3c:8f:7f:5d:c8:0e:8e:30:1d:cc:fa:3d:6e:90:0f:d1:d0:
68:8f:7e:bc:15:28:90:b8:10:c7:95:bd:3c:6a:36:4b:a0:20:
6e:99:39:ef:14:69:ef:b4:8f:ef:00:65:fb:35:06:94:38:28:
cc:f9:4c:b2:bc:a6:bc:50:65:76:bc:7b:35:fa:77:7b:c3:35:
38:de:08:b7:d9:a5:76:db:8e:95:0b:6c:a4:1c:67:51:88:27:
32:d6:5b:f2:ec:9a:7f:28:c3:dd:64:ec:0a:37:c5:ce:de:b2:
0e:c8:7e:e8:a3:ee:5a:10:ce:a2:27:8e:5f:df:2c:a0:45:e1:
07:35:79:ab:eb:85:26:1c:90:5b:55:f3:3d:7e:d3:a2:d6:f4:
5c:fc:a9:2e:ed:56:8a:ed:ed:c3:b0:e0:22:91:12:54:ec:ea:
97:de:34:90:b2:03:71:ad:e9:27:9a:5a:00:da:46:79:73:1b:
19:ee:4c:b7:53:b8:94:2c:4f:3f:23:fb:97:c5:d3:c0:a7:22:
f3:9b:1a:54:71:84:bb:5c:b3:5e:bf:fd:48:5f:93:0b:06:f1:
70:c4:f3:bf:5f:da:f8:20:88:65:b8:c1:60:9a:a7:7c:fb:01:
5e:f2:79:39:25:77:15:83:a6:01:53:36:cc:57:1b:d8:e1:e7:
cd:dc:88:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:54 2025 by rpki-client