Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
File: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft (raw, json)
Hash identifier: afOO/r2zWCgSrgreWW9bmWjZQn8qVgowbIMr2HzV9T0=
Subject key identifier: A5:B2:4D:96:64:17:69:32:A6:07:84:59:BC:4B:AC:F2:76:22:20:5C
Authority key identifier: 43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
Certificate issuer: /CN=43a8e2899693fca00bd8041ba8801f2d88869108
Certificate serial: 019A70DBE64E13D85E853CD785BEA196706E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
Manifest number: 156D
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl (hash: UatTEFpOejHVAsJC8Dd3+VPGgkNcwlIQ+KCC0e4cPgU=)
2: cIo_z6M4iUgSv6Rq-GH3zvKNA-E.roa (hash: uuzfvafFMiGynhqFG/8GblYil9CuUOOslH5kMNYMbzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e6:4e:13:d8:5e:85:3c:d7:85:be:a1:96:70:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a8e2899693fca00bd8041ba8801f2d88869108
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=a5b24d9664176932a6078459bc4bacf27622205c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:c4:ee:a6:d8:c3:58:8d:ff:1e:87:06:5d:
f4:aa:1c:88:33:20:58:01:85:68:8a:c3:e5:c6:fb:
b1:3c:3e:ab:61:10:6e:68:85:5e:31:62:62:5c:89:
9e:d4:25:24:23:9b:1f:ee:62:00:fa:8e:5d:ab:ed:
cc:ba:89:7e:51:cc:c7:3d:c1:9e:ae:9a:1f:7c:24:
0d:54:2b:51:29:ff:18:b3:45:ac:07:1b:32:67:d0:
e8:c8:82:93:54:a4:e2:e7:93:dc:57:1e:18:85:6b:
76:22:21:d1:5b:37:4b:c9:b2:b8:28:d0:48:71:93:
0e:67:db:8b:e8:04:ea:64:e6:fb:fd:71:0d:ff:32:
a1:16:49:ed:81:37:08:f5:39:7a:2b:99:db:75:e7:
9d:93:0a:c9:e4:6d:8a:0b:b4:ce:09:46:4f:93:91:
0d:a3:4d:69:0d:7f:e8:cb:a9:68:cb:32:1d:a8:de:
5b:6b:1f:67:63:d6:3d:ba:60:07:96:96:9a:ca:bd:
d3:56:59:24:16:1f:6d:e5:5b:d9:30:76:01:8e:43:
a4:d7:e4:44:a9:37:36:d4:5a:49:f3:83:9b:cf:44:
e2:c4:89:ad:01:a2:4a:6f:48:a6:b7:3b:29:92:31:
da:b8:90:4b:d2:14:90:a2:38:d4:32:12:77:19:72:
66:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B2:4D:96:64:17:69:32:A6:07:84:59:BC:4B:AC:F2:76:22:20:5C
X509v3 Authority Key Identifier:
keyid:43:A8:E2:89:96:93:FC:A0:0B:D8:04:1B:A8:80:1F:2D:88:86:91:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/14e091-979a-4ed5-9d5e-4954270e2507/1/Q6jiiZaT_KAL2AQbqIAfLYiGkQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c0:8b:1a:03:bf:90:0e:3f:48:a2:39:47:40:fe:8e:e4:e9:
1e:a2:59:e4:e7:80:11:94:f0:a0:83:12:fd:d5:dd:b6:a0:0b:
0a:72:ff:6d:b9:40:86:dd:3a:dd:e0:01:ba:4e:86:1d:93:ab:
33:7c:7d:70:0c:d1:76:bc:35:a3:c1:6f:41:41:bd:12:27:50:
1a:0d:7b:f8:8f:69:9f:ec:25:52:be:15:86:0b:76:2f:75:43:
6a:57:3e:b6:87:36:ee:b4:80:21:83:3d:3f:a8:9d:df:81:c7:
8d:75:f7:24:18:36:57:4b:d7:8f:3f:b8:bc:7d:3c:a7:3b:11:
0b:55:ca:e0:63:ef:09:30:be:53:9c:e2:f5:ce:68:b8:e9:47:
59:d2:d7:ce:05:df:9d:cf:4a:2e:d0:ec:14:c1:cd:ac:2d:93:
9d:46:14:26:9e:f9:25:f2:ff:34:96:73:b4:ea:1f:a5:87:03:
0e:79:30:f3:a3:9f:9b:7a:f0:4b:51:df:15:68:8b:79:69:66:
8d:b3:8f:be:80:06:d8:6a:69:ee:a6:fd:10:41:1d:f2:95:8d:
26:a2:52:52:db:01:be:71:e4:93:b0:1a:a3:68:a2:f5:2c:51:
8f:24:ce:a0:40:a0:8a:43:f4:4d:55:72:58:05:7f:43:8b:c9:
74:ef:89:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client