Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
File: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft (raw, json)
Hash identifier: gKUm5jYSTAZ3fjOmFaZgHByKvhZxyV3+xDDs/HA5mTQ=
Subject key identifier: F7:FC:4C:0F:F2:50:85:82:6B:6B:59:CB:61:E0:31:51:2B:C4:CF:96
Authority key identifier: 2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
Certificate issuer: /CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Certificate serial: 019A71B8184330B051227E5893870F9A8B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
Manifest number: 171A
Signing time: Tue 11 Nov 2025 07:01:21 +0000
Manifest this update: Tue 11 Nov 2025 07:01:21 +0000
Manifest next update: Wed 12 Nov 2025 07:01:21 +0000
Files and hashes: 1: L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl (hash: l7YsEedA0/o0yNg2yM2SvbsP+0auqSvrnB461A/2ufI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:18:43:30:b0:51:22:7e:58:93:87:0f:9a:8b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fe0aa7bfae1247402abb6c89b75bb23f0f0f120
Validity
Not Before: Nov 11 07:01:21 2025 GMT
Not After : Nov 12 07:01:21 2025 GMT
Subject: CN=f7fc4c0ff25085826b6b59cb61e031512bc4cf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:fd:78:5e:44:48:52:39:dc:1b:08:ba:39:
d7:4b:db:4f:51:1a:6e:b7:12:e9:ce:33:d7:e4:0d:
6c:c9:66:ee:f2:e4:54:4a:85:54:14:89:d0:3c:61:
6a:96:7e:1b:06:6d:73:0b:be:ac:22:42:c6:df:e1:
ba:49:83:06:31:af:58:1b:b6:c5:4e:b6:2f:f5:73:
5f:70:18:24:4a:78:87:4f:a5:8b:e6:59:18:46:70:
be:e2:6b:de:d3:f5:56:5b:7c:6b:04:57:93:d9:d1:
a1:e0:8b:05:45:4f:80:e3:2a:42:b2:55:c5:0f:18:
53:7f:33:e2:21:10:b9:18:0a:7f:b2:7e:ef:70:e5:
78:ce:6e:a9:e9:5d:d3:7a:fe:f3:61:2b:5a:ee:99:
05:cb:59:ee:00:e0:52:32:6f:38:ea:af:a0:e2:d4:
fb:6b:c7:c5:b7:29:d9:7e:55:a0:e1:ad:77:fd:e2:
42:5f:e8:a9:7c:98:ac:eb:c5:1b:47:59:b4:1a:99:
c5:b0:af:b8:c1:c8:ca:9c:60:ee:d4:61:82:f1:ff:
15:7a:6f:73:c0:85:88:af:45:7e:f0:61:5d:9b:fa:
bc:58:19:30:dd:38:6c:6b:1b:e6:0d:8b:d2:12:59:
af:27:b0:21:15:0d:8b:af:bd:54:4a:80:f6:69:e8:
80:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:4C:0F:F2:50:85:82:6B:6B:59:CB:61:E0:31:51:2B:C4:CF:96
X509v3 Authority Key Identifier:
keyid:2F:E0:AA:7B:FA:E1:24:74:02:AB:B6:C8:9B:75:BB:23:F0:F0:F1:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/a46d32-b055-4ab2-8286-52c9d356a215/1/L-Cqe_rhJHQCq7bIm3W7I_Dw8SA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d7:37:d2:9d:2c:4c:d3:1f:30:da:55:f3:f5:58:20:15:0f:
37:24:69:5b:6d:4f:05:65:4d:55:9d:ea:66:8d:ff:29:2f:a6:
a2:e7:fe:82:27:ca:c0:13:17:69:02:5f:f6:60:71:7c:a2:f0:
90:15:bf:2d:bf:27:40:44:1e:59:ad:07:80:70:98:8a:b7:6d:
3e:72:08:60:32:23:68:6e:2c:d7:ef:e0:cb:bb:6b:d1:95:9c:
c1:79:82:86:39:1a:8a:03:53:e6:d6:3b:97:d4:60:65:af:b3:
bb:52:58:31:17:1c:e2:e6:9e:ce:c5:42:f7:08:23:6a:b1:f1:
ce:53:9f:88:a3:d4:40:24:fb:b4:cf:5f:e4:8c:4d:0c:e7:55:
be:28:00:4b:7a:d8:4b:ab:f9:64:36:94:6b:15:33:34:92:aa:
65:bd:ff:4e:6d:f5:65:64:4b:7d:91:5e:f9:27:ea:a2:67:89:
94:dc:c9:ce:cd:4b:0e:c9:97:f4:87:45:35:b6:f5:9f:91:0e:
d6:c7:b7:f7:c0:36:12:ec:a9:4f:69:7c:7f:84:b0:61:ce:95:
63:97:02:17:13:3f:2b:04:5f:29:66:8a:c1:6b:44:0b:f9:23:
65:24:47:04:18:85:b0:92:fd:ce:0d:4c:7f:30:40:6c:19:49:
74:fd:a2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:03 2025 by rpki-client