Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: Mb0vuy/PKD9ZJpMSLEUxvZzcIt1Ns6PnP00XNSx0s9s=
Subject key identifier: D3:A9:0B:5F:73:DB:FE:FE:5D:24:31:79:FD:E3:E0:9F:A4:5A:46:E1
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 019A73387DD5F9CDBE61236BFCFFCC0DD8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: 01B0
Signing time: Tue 11 Nov 2025 14:01:13 +0000
Manifest this update: Tue 11 Nov 2025 14:01:13 +0000
Manifest next update: Wed 12 Nov 2025 14:01:13 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: U1+bBoLv3Pl3ZVntAeHwddMkMAVbHwQoiGzHsFMNpc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:7d:d5:f9:cd:be:61:23:6b:fc:ff:cc:0d:d8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Nov 11 14:01:13 2025 GMT
Not After : Nov 12 14:01:13 2025 GMT
Subject: CN=d3a90b5f73dbfefe5d243179fde3e09fa45a46e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:c9:20:13:91:8b:a1:ab:b8:f5:1a:59:89:
96:a2:01:98:a7:ab:66:c9:ed:ef:df:26:b9:24:68:
9e:01:8a:3d:f8:94:ca:ca:0d:27:b3:ab:92:53:92:
cd:0a:a2:67:59:01:1d:be:33:c8:8e:bc:52:45:4a:
53:6b:13:64:bc:44:2d:c6:d6:24:69:1d:3c:1c:48:
4a:4a:05:45:bf:23:5a:10:44:75:e2:b8:6e:8e:7b:
c1:a3:d7:eb:ae:4e:2e:fa:1b:02:8c:ab:d4:8e:9a:
34:38:41:1a:72:c1:55:ab:b9:52:da:09:8b:55:50:
ca:4d:29:3a:67:fb:b6:79:c7:1e:7e:40:fe:47:6d:
35:45:a7:6e:a9:d4:c8:43:10:60:d5:89:a1:74:08:
9b:0f:10:98:bd:5f:de:65:7d:25:7c:55:c7:0d:32:
f0:b4:08:f0:b2:82:fd:87:6e:51:52:97:47:3e:43:
28:d6:2a:23:c5:b3:5f:0b:73:ec:02:81:fd:9d:7b:
4f:30:87:0c:94:80:d4:13:ca:ae:31:91:c2:d9:2e:
8a:63:e1:42:05:f4:d0:79:a2:b7:86:43:62:60:ec:
1c:9e:92:e5:34:c1:99:35:0f:bf:83:ce:95:1b:34:
e6:cf:50:37:fd:3e:0e:ef:76:9e:f4:09:c2:7e:20:
7c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A9:0B:5F:73:DB:FE:FE:5D:24:31:79:FD:E3:E0:9F:A4:5A:46:E1
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:81:d9:16:21:cc:51:da:a9:9c:81:13:69:ad:84:b2:d6:78:
ca:7d:b4:b4:c4:72:cf:da:cd:74:ac:93:7f:6c:9c:e6:a5:c4:
92:f0:f9:49:19:88:f3:4d:d0:c5:53:eb:0f:29:43:12:89:26:
8f:83:42:9a:6e:e6:9c:fb:2c:1b:ee:a3:a0:08:73:08:20:00:
ca:16:5e:05:55:68:70:89:4d:76:66:b0:51:e8:90:ca:48:55:
29:ed:bf:e8:fe:a8:83:ec:17:9e:81:84:d5:1b:e7:f1:71:7f:
aa:bf:9a:6c:00:36:c5:01:cc:05:f9:c1:81:93:4f:b0:ef:a9:
91:23:3b:a2:a4:91:58:2d:1d:b6:80:fb:eb:f8:19:2b:20:b0:
96:1d:85:62:51:66:22:fc:c6:7e:8d:0c:76:aa:7e:7c:e8:b4:
01:c7:88:11:05:6d:bc:3c:b0:32:1f:8e:31:94:79:69:9c:13:
91:09:1b:c4:20:38:2c:7a:c2:42:53:e0:e6:06:84:48:fb:13:
3c:7e:96:a3:4a:66:ad:66:08:9a:ea:26:d2:e9:a2:c5:f8:47:
d5:a2:3f:3c:e0:b6:14:d8:51:e7:ae:08:5f:3c:69:30:0a:9a:
57:bd:39:3c:4f:fd:7f:4c:7b:57:09:7a:0c:7b:12:0a:dd:84:
bd:e8:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:57:11 2025 by rpki-client