Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: QBCXdaNIqaloZCBS5Ho2hEs+TSP9wxI1zhV/uvKGvI0=
Subject key identifier: 64:B0:CB:54:CC:6A:FB:34:3B:4B:27:82:09:9D:DA:F5:21:7B:E8:90
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019A71B78E000DD0BE643FCDBB6B773066DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 111A
Signing time: Tue 11 Nov 2025 07:00:45 +0000
Manifest this update: Tue 11 Nov 2025 07:00:45 +0000
Manifest next update: Wed 12 Nov 2025 07:00:45 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: /lBkmgSvz8FJwPX+Q3d3/bqxyzljlC9quBhcKVG9CEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:8e:00:0d:d0:be:64:3f:cd:bb:6b:77:30:66:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Nov 11 07:00:45 2025 GMT
Not After : Nov 12 07:00:45 2025 GMT
Subject: CN=64b0cb54cc6afb343b4b2782099ddaf5217be890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:55:1b:e2:74:4c:f3:03:de:47:8b:a1:ad:
02:c5:4f:8d:8a:10:77:17:2d:f5:b0:ea:19:84:e3:
13:ec:e7:4b:2f:14:1c:f9:79:f5:3d:1b:f4:c5:ed:
f9:29:69:03:32:58:09:61:66:b1:88:01:97:9a:e2:
35:bd:53:0b:ed:19:8d:e0:99:58:7c:da:53:63:5a:
58:13:80:e2:fb:f2:20:f3:b8:9f:7d:99:11:2e:ca:
fa:7e:3a:34:74:4d:f5:3c:d9:ad:0d:5c:1d:bb:09:
4b:7e:18:cc:c2:59:21:93:3f:61:eb:f5:38:fc:16:
34:c3:44:80:d6:31:15:23:cf:4e:78:fb:11:d8:a2:
b5:85:85:a9:94:36:04:78:3c:f7:e4:4f:2f:4b:14:
60:1e:d7:e6:0a:67:cb:3c:32:dc:70:7e:52:d6:7a:
fc:78:a1:8c:60:19:70:76:36:41:25:b5:6a:67:e5:
ee:13:21:25:3e:34:32:bd:28:f8:8a:a8:7e:da:e4:
c6:c5:eb:28:db:58:26:ff:99:ce:77:95:52:5a:67:
e5:5b:2c:90:70:bd:2a:27:b1:b5:bd:8b:f9:10:80:
ae:9a:57:73:69:56:c8:59:bc:6e:91:a9:b9:dd:8f:
e4:95:58:d4:d0:e6:18:8b:43:71:43:c2:2f:bb:c7:
39:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B0:CB:54:CC:6A:FB:34:3B:4B:27:82:09:9D:DA:F5:21:7B:E8:90
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:cf:22:46:6d:da:94:14:97:90:e9:20:14:96:37:b9:55:d1:
30:48:9a:1d:e1:ee:7c:da:e2:c4:1e:32:76:ee:8d:eb:50:03:
64:5d:97:f2:b4:9e:b3:d9:59:60:b7:a0:16:d8:4e:47:30:b3:
d4:32:43:e3:e1:19:2a:3a:ee:32:87:e5:d5:26:92:8d:7c:36:
e2:71:a0:aa:2e:df:ba:9d:b1:bb:1e:2c:c1:89:6f:f4:6d:56:
2a:7e:23:49:00:7d:53:40:7f:f4:db:ab:13:49:80:e5:f8:83:
b9:e9:53:ac:e5:a4:f8:1a:db:ea:ae:aa:81:92:b3:ba:72:a9:
be:13:d4:f8:c8:9d:34:5c:21:92:2d:4c:73:2d:6c:86:ef:aa:
72:a6:0e:b3:26:92:4e:06:09:af:40:7e:2b:31:35:80:2c:3c:
11:74:4d:d6:4e:5d:c3:b5:5f:36:16:eb:85:fe:2f:05:0a:3a:
13:3b:70:11:b2:c1:b4:e4:a6:81:71:5e:e8:c6:ef:0a:4a:96:
66:5b:ae:68:a0:e5:b2:73:f5:11:35:f2:5b:36:54:73:c8:c6:
3a:a7:0c:7c:be:90:e4:b9:ca:0f:ff:05:97:29:f0:f1:92:a6:
ef:8a:28:62:e8:65:8c:c8:29:64:33:b3:60:02:0a:ba:ee:f9:
66:73:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:44:24 2025 by rpki-client