Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: hU4rhi2t9ut7ByDrUOSlmF9+0ZdOPT5qMnJCmiaqDso=
Subject key identifier: C0:8E:A5:D9:D4:4F:B4:05:0A:20:DA:A6:94:8F:DC:22:7E:51:BE:CB
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 019A7225DC4F68754FA8ED70924CB17CB3A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: rlcg0liGrFmjQ7MjD4JJuHt4zuz0Cij6hPMEAjxeYCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:dc:4f:68:75:4f:a8:ed:70:92:4c:b1:7c:b3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=c08ea5d9d44fb4050a20daa6948fdc227e51becb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a5:fa:89:46:43:ef:e1:79:9a:44:b5:4d:37:
58:31:c9:df:14:0e:2d:50:f1:66:a4:18:cb:8c:ae:
49:56:b8:63:ad:39:b7:ef:fa:33:bc:fc:fb:99:01:
f1:f6:c8:d1:33:f4:63:59:d4:d7:d5:4c:10:ee:b0:
59:f8:e2:6f:7d:99:93:c3:36:63:23:09:87:8e:97:
69:8e:1c:4e:13:ed:b7:47:f4:dd:d5:5c:72:65:9e:
56:8e:da:73:3a:a8:29:10:73:4b:b9:34:0f:ea:4f:
2a:2b:ab:f6:f1:2a:5e:da:d0:42:b4:2a:17:34:d5:
0b:cf:c7:f4:50:07:4f:03:52:84:e6:36:5f:b3:a4:
b8:fd:07:b9:87:3f:e8:9f:60:cf:59:ad:0d:e3:b6:
b6:98:4d:67:5c:a4:48:9e:c8:a0:2f:5e:7c:94:34:
a6:f5:83:50:f6:10:4c:53:4d:dc:22:d0:47:e4:23:
05:69:84:dc:f0:4e:79:78:d8:d7:0b:f1:da:5a:c3:
1d:5a:e0:f7:0f:f3:a7:6c:e5:07:ff:f2:4c:53:a2:
82:45:f6:24:a6:76:80:f7:c4:69:2b:64:75:50:7a:
86:50:87:c2:6f:30:ed:83:8a:b8:de:31:19:cf:fd:
3a:fd:25:62:12:88:07:f9:8c:f8:7c:5a:c7:71:8e:
3e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8E:A5:D9:D4:4F:B4:05:0A:20:DA:A6:94:8F:DC:22:7E:51:BE:CB
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:c0:5e:8f:64:54:f9:c7:4f:03:bf:0d:b4:a0:00:68:fa:ba:
2f:05:2c:55:9a:1c:45:97:0e:52:9b:04:3e:01:8a:3d:e9:27:
76:76:56:8f:60:e1:4c:22:83:c3:8e:5d:47:b4:bb:c9:2a:5b:
b8:5c:d0:9c:c8:cc:d4:c9:a1:a6:32:a9:eb:16:13:73:da:85:
4f:55:0f:7b:a0:55:bf:8c:ed:9b:98:0e:32:48:b3:48:b4:d1:
60:07:a6:fc:a7:cd:f2:ba:03:d5:77:44:f9:aa:1c:9c:48:d7:
62:81:95:c5:89:d7:99:e7:6b:29:7d:09:dd:ea:2c:a3:da:62:
34:fd:b7:5f:63:fb:2b:d9:e9:28:63:52:c0:0c:6a:69:c9:63:
0b:d1:47:85:22:73:fc:66:72:20:c8:83:7a:a9:f8:02:22:18:
20:2e:65:26:70:0d:c9:f1:0e:e3:75:6b:9e:06:bc:b2:f6:0b:
32:62:a2:a4:45:38:08:12:84:45:46:67:04:80:c3:b6:ab:7f:
93:51:3d:b9:16:ad:88:6e:ad:b6:b7:41:61:3d:35:8a:3e:1e:
af:c3:a1:2a:2d:df:1b:b5:30:ce:d4:a6:4b:09:2c:5d:65:cb:
13:bd:dc:b2:d9:00:a1:ea:01:aa:dc:6d:fa:0c:e7:73:56:59:
41:b2:3b:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:17 2025 by rpki-client