Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: rsOtMqI1VZRO6zdro97y5Uoj+4Sh2TWRyDo6NeVuW6I=
Subject key identifier: A1:CF:6D:79:78:FB:42:5D:B7:89:DA:B3:DB:C8:CA:84:6C:00:AE:75
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 019A71B8AE690B83F9ED9EF59802C0DFFA5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 044E
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: cy+qFNSZvFV8dKLcqEZyxzyNOAYdcsSl67jqQIzI2oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ae:69:0b:83:f9:ed:9e:f5:98:02:c0:df:fa:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=a1cf6d7978fb425db789dab3dbc8ca846c00ae75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:6f:ef:47:b9:f1:3d:53:9b:fd:6e:12:b3:1c:
b3:cc:0d:5f:1b:4b:42:5f:9e:0e:9b:b5:66:d8:88:
0d:af:7e:c6:73:2b:40:24:d2:c3:7a:2b:0b:bd:dc:
93:53:f7:93:43:2e:64:c1:b4:64:e2:70:3b:1e:4f:
31:8d:fa:9c:80:93:d4:65:fb:f9:87:fd:ba:c8:06:
26:1f:84:51:cb:f5:2f:79:d4:60:55:64:9b:7a:b8:
6a:d3:30:72:cb:5b:54:9a:21:ce:2e:b4:99:a2:74:
3f:f0:8f:70:99:bd:c8:73:21:97:29:0a:22:94:3d:
4f:2f:18:36:3f:a0:c6:06:b9:37:eb:4a:09:a9:e9:
94:cc:4e:23:42:34:10:39:0a:51:2b:de:22:21:e9:
18:bc:03:53:9f:5b:0e:83:14:94:60:65:4d:97:0e:
1f:da:23:bf:e5:54:3f:01:42:40:9b:91:f5:b3:25:
58:51:7f:b6:c8:f8:e9:83:78:37:d3:75:98:d7:af:
85:85:36:45:3e:e9:bd:eb:6d:28:d4:79:c3:8c:39:
e2:1a:15:dd:fd:1d:cd:88:3d:8d:88:f5:b5:87:19:
99:fa:68:c4:41:4f:b4:15:d3:6b:ff:e6:03:64:65:
b9:94:2b:0b:58:24:59:d0:ee:f7:aa:e7:21:b0:e1:
32:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CF:6D:79:78:FB:42:5D:B7:89:DA:B3:DB:C8:CA:84:6C:00:AE:75
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:03:3f:2e:ae:61:07:04:57:05:8d:74:37:61:10:45:32:3b:
c5:0d:4c:99:08:fd:af:33:69:46:2b:cf:20:c0:df:ce:87:31:
8f:cb:0a:6e:98:32:28:fe:92:ac:66:49:39:01:9b:55:4f:23:
5d:f5:e1:23:17:a0:2c:b5:80:bc:b7:67:33:82:5a:62:03:2f:
22:20:6f:5a:d6:cf:4d:73:16:1f:dd:67:02:8f:a8:a6:e1:0b:
ca:6e:15:65:d5:b4:5b:9e:e1:0b:cf:fd:76:3f:72:42:6b:6c:
e1:df:a9:97:be:6b:59:7f:aa:d7:17:d7:a8:7f:70:31:5a:3e:
8c:21:db:40:f5:4e:93:ce:b8:01:e3:6f:c6:58:9c:70:f5:99:
42:0f:ea:38:4b:af:50:6f:a4:4a:70:79:80:82:fe:48:52:74:
23:ad:ab:07:50:44:c6:0b:2f:d1:19:a0:4d:cf:56:81:48:a6:
29:85:59:58:77:dd:9c:b3:f4:4a:51:5d:e5:13:9e:ce:f9:d8:
2e:ba:f2:7a:b9:8f:d3:0f:81:49:77:14:ba:aa:ec:fa:2d:00:
79:93:14:c7:33:8d:ae:c8:ef:56:9e:b0:01:65:e9:ee:1a:21:
2f:c3:08:5f:ef:74:b4:fa:4e:89:7f:3a:f9:ea:8b:e0:89:63:
e5:b5:ee:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:41 2025 by rpki-client