Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: D0ppruo3koINNaJmgSF94QGjbFu+EyufXQM10MNIK5g=
Subject key identifier: 9F:2C:7E:BC:0E:6E:FA:6C:EE:EF:6C:D1:9B:CC:8D:3C:66:5B:95:4F
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019A7225A6A627C5E90898D3C6B9D3AC2EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0B95
Signing time: Tue 11 Nov 2025 09:01:01 +0000
Manifest this update: Tue 11 Nov 2025 09:01:01 +0000
Manifest next update: Wed 12 Nov 2025 09:01:01 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: TzXe1MW3gmDvJu+Lh3v8cfavN9wsILu6Yx02icbodww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a6:a6:27:c5:e9:08:98:d3:c6:b9:d3:ac:2e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Nov 11 09:01:01 2025 GMT
Not After : Nov 12 09:01:01 2025 GMT
Subject: CN=9f2c7ebc0e6efa6ceeef6cd19bcc8d3c665b954f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:16:2d:28:de:11:e6:84:b2:27:6b:2a:c6:
76:c6:07:55:05:b6:2b:e9:2c:f0:5c:2c:7d:c1:5f:
41:0b:d2:fa:8e:e5:4f:2c:17:18:48:83:2f:ec:09:
1a:b6:7b:70:bd:0a:88:cb:ae:81:c7:fc:da:03:22:
37:45:0a:3a:2b:75:97:ca:09:a0:6d:b0:20:53:b5:
6f:1f:62:22:c5:e4:35:0e:3d:13:b8:57:91:ee:57:
6e:19:33:f9:e3:24:89:9e:30:ce:78:71:01:ab:50:
19:df:e8:03:92:fc:e8:ea:c5:76:80:88:32:58:69:
eb:91:2e:fe:55:11:18:e6:cc:00:d5:99:78:01:59:
64:6a:4c:5a:5c:14:4d:71:30:81:7b:3b:b3:73:94:
33:f4:4e:7e:2e:07:22:0b:5f:e0:59:e8:f2:82:ec:
35:82:88:e0:a3:b1:2c:4a:88:c6:cd:24:aa:57:b7:
f4:67:00:d8:19:c0:08:ea:c8:0f:44:12:2e:e3:53:
72:81:50:e6:56:48:82:5d:b6:41:26:52:02:9e:2a:
bd:3a:cf:85:b0:0e:45:3c:86:68:41:b3:fc:e5:a5:
09:c7:31:67:9b:b0:da:65:c8:5b:9b:a9:04:fc:3e:
45:e5:fa:f5:12:01:37:ee:ff:cb:c5:a9:f4:1a:f0:
89:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2C:7E:BC:0E:6E:FA:6C:EE:EF:6C:D1:9B:CC:8D:3C:66:5B:95:4F
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:68:9e:65:8f:77:aa:50:00:e2:4b:81:e6:40:d8:61:c9:b8:
e9:23:65:78:8e:7c:d9:16:bf:cb:e6:35:20:04:6d:25:6e:d2:
e1:0c:dc:99:d8:ec:c0:07:50:69:9e:48:99:89:36:1e:48:88:
66:52:2f:4e:95:c8:0a:b6:a5:00:2f:36:7b:80:bf:c5:c7:ff:
ef:af:b6:8c:49:07:41:9b:b9:ed:3c:a4:51:fa:32:b9:85:6f:
5e:99:16:23:b0:f8:df:d6:2c:19:9e:49:7a:0d:0a:cf:a6:0f:
ac:02:7e:76:f1:92:30:f9:d5:6b:3b:51:b4:dc:42:b2:11:6e:
5e:78:83:0b:8c:c0:4c:61:37:61:1d:2c:1a:70:f9:e8:44:e4:
db:85:89:d3:1e:8a:c9:99:4b:4f:ee:43:5e:a6:8d:81:25:ce:
ec:54:ce:83:72:e4:08:d3:89:ec:67:d0:7e:6d:64:2b:d1:f8:
00:a5:e1:e6:16:b6:ca:85:2d:a9:f5:f8:12:25:c9:af:2e:b2:
b5:e9:79:bd:4e:aa:fa:07:48:1e:a4:8c:b4:e1:df:45:c3:c4:
d7:58:93:94:74:f5:71:3d:d5:eb:23:6b:aa:74:3c:75:de:b2:
2a:e2:82:aa:3e:6c:4e:08:8c:e0:88:1c:82:62:07:70:d6:9d:
a7:f7:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:42 2025 by rpki-client