Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: /8DTDcdwpZzCUCYilCOn2la2Qo02iFOOBnyQzhh4W8o=
Subject key identifier: 6B:21:97:7B:0D:2C:D8:53:71:AF:1E:8F:0E:1A:28:92:33:F3:5A:71
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019A7112D797C5FD97FE6B59724E7A6C1C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1474
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: o9n38rAOe9+uVO/NKhj/z5ztJfqnBMXBb0OYUyrICm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d7:97:c5:fd:97:fe:6b:59:72:4e:7a:6c:1c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=6b21977b0d2cd85371af1e8f0e1a289233f35a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:67:13:7e:c2:45:46:88:be:6f:b2:20:82:
6d:24:75:44:b5:26:0a:5c:c3:a8:02:39:46:b3:6c:
14:cd:f8:a0:c4:c2:fc:fc:cf:05:0e:8c:59:35:42:
7d:13:89:16:a9:ba:6a:80:70:4f:38:5f:15:e5:48:
c7:9a:65:72:26:b4:37:03:6f:fc:32:69:24:02:94:
32:3e:74:a2:3f:8e:ed:70:e0:41:ba:ed:9e:c8:a3:
5d:de:9c:ba:fd:26:59:52:3a:6d:93:36:aa:46:aa:
37:f3:89:98:1a:05:fb:c3:e4:74:ff:b0:e7:7e:74:
10:52:c8:2d:8c:f6:ba:f3:f1:11:0c:36:3c:ee:bc:
7a:dd:69:89:be:16:6f:ad:31:9b:b9:22:fe:31:8b:
18:98:22:bc:6d:c2:86:a1:de:45:9e:70:8b:d9:f6:
de:c1:fc:23:09:ef:2c:c3:bc:c9:50:ad:8e:6e:0f:
f7:84:76:e8:14:b9:be:14:d9:49:93:bb:0e:df:94:
76:28:ee:f4:b5:a9:36:34:ba:e2:9b:bb:5a:48:5c:
35:f5:df:1d:ad:80:2b:a1:7e:85:08:44:07:59:dd:
30:e4:7c:c6:0c:16:83:81:54:ad:ec:bc:9c:5b:62:
f3:ac:b1:59:f1:49:25:66:2d:3e:74:99:89:91:61:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:21:97:7B:0D:2C:D8:53:71:AF:1E:8F:0E:1A:28:92:33:F3:5A:71
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:14:03:2e:c6:3f:a1:ec:3d:45:82:b0:33:c3:89:64:9b:f1:
a8:3b:41:e9:65:67:33:2a:45:2c:db:1f:52:9d:1e:1e:ee:02:
92:4d:e0:94:3f:c8:59:d6:e8:2b:48:42:64:12:29:3d:34:34:
94:da:47:d1:3e:c4:df:c9:6b:7e:46:f8:58:e6:c4:eb:48:68:
a6:8e:b2:03:f5:c1:6b:b1:af:ca:eb:05:44:0c:8b:73:36:78:
08:be:3a:1e:5a:ca:0b:16:fc:b8:b5:ac:ed:46:97:42:53:7c:
ae:ae:00:77:5d:8b:d6:5e:7a:9b:83:68:45:72:d7:23:f6:7d:
fd:45:c6:aa:c5:62:6f:ed:ae:c9:4f:65:7d:5a:5a:b0:69:c3:
0e:2b:c3:14:b4:2a:e2:26:2e:2b:ac:0a:29:69:85:15:6c:00:
bc:1e:03:82:c7:b5:a7:5c:14:c6:53:7a:92:05:c8:28:2f:bf:
d7:bc:83:d8:3b:eb:bb:82:d0:c6:15:82:9a:bc:01:1a:d9:a5:
be:52:b2:ef:d2:aa:a3:5a:d8:12:f4:2e:96:f7:42:ce:13:52:
8c:8b:8e:35:f4:99:e2:b0:36:f5:80:f8:e4:fc:34:f7:4c:8b:
13:9b:30:d9:66:5c:d9:aa:b8:a3:4f:3e:0f:b2:1e:77:91:06:
a4:29:52:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:12 2025 by rpki-client