Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: 4cmDEOZvlFSYRpwwUbHU7Ftkis2cBApzCTEd+oBfZJo=
Subject key identifier: 2E:AB:2A:02:93:E0:07:6A:B4:04:37:53:03:EE:0B:ED:B7:47:92:D7
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 019A7112E09AD88E8454F5C2AEC29D697945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 0570
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: gnQguAI0CO9AX756jDRroXpj4E2amzTJ2n2OKFE5AYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:e0:9a:d8:8e:84:54:f5:c2:ae:c2:9d:69:79:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=2eab2a0293e0076ab404375303ee0bedb74792d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9a:fd:27:f6:56:09:3c:90:bf:5c:c2:15:67:
3d:3d:0e:7b:8c:1c:38:16:76:a0:83:67:76:05:d1:
50:d2:16:d8:11:74:b0:bb:1f:02:c8:99:ca:01:60:
3b:d4:e2:71:dc:e0:d8:3b:99:3b:89:9d:65:95:c3:
58:11:2a:e4:98:f9:41:2a:d5:aa:ff:e0:47:66:f2:
64:2f:df:8a:75:02:2d:ba:7f:b2:d2:5c:d0:33:c3:
32:8e:4b:19:26:61:96:97:3c:17:c7:06:14:fa:ca:
5f:bb:62:ea:29:80:4b:c4:f3:4b:26:f7:f0:5a:f2:
13:f9:73:7a:01:f2:0e:83:25:7c:64:71:12:f2:7b:
55:fa:e2:d3:40:17:db:48:4b:e6:fb:8e:ae:87:25:
4e:15:da:b5:37:ff:b1:35:5d:76:82:f4:9b:e0:2b:
51:4c:b6:95:de:e9:a5:33:df:23:34:61:b7:29:8d:
33:20:7f:ff:dc:e8:ad:b5:11:e0:9d:f2:48:24:c8:
e2:57:85:f5:7d:6b:ea:bf:1a:e4:11:dc:82:a0:0b:
df:6d:cb:5a:d0:6d:24:97:30:60:7f:d9:ec:70:40:
1c:a9:fa:2d:43:20:8f:28:34:12:2f:70:de:fa:69:
94:fc:77:b2:53:f6:8d:ac:ac:6d:c6:84:13:27:2f:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AB:2A:02:93:E0:07:6A:B4:04:37:53:03:EE:0B:ED:B7:47:92:D7
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:37:8e:b0:0f:a7:7f:fb:dd:4b:bc:11:68:f2:11:d0:17:64:
fb:fc:5c:6b:cf:c9:eb:0f:2d:7d:fa:b2:cb:24:23:24:8f:57:
5b:ae:a5:10:5f:90:d7:e3:47:77:99:b7:af:d0:15:ab:9e:ff:
2d:bf:d2:63:f8:5d:2e:fa:29:6c:11:c9:47:94:b2:5b:50:8b:
84:8d:85:d3:cb:31:25:60:be:f3:42:48:72:93:9e:b6:bb:b9:
9c:50:a8:34:fa:e6:dd:2e:8b:b3:4a:7e:8b:39:02:61:9a:ee:
db:57:88:05:48:c8:1b:18:a2:cb:47:19:9d:9b:b2:92:1d:ae:
c1:9d:f0:13:97:d2:82:a4:c1:0c:24:aa:58:00:3e:0e:fd:d4:
c4:82:5d:97:53:93:a3:10:e5:59:a8:19:21:34:a2:31:28:17:
a9:98:74:81:d2:04:b6:ec:94:7e:9d:97:54:f4:6a:bb:e2:e5:
fd:ca:73:28:6a:3e:ef:75:a5:76:2d:f3:f4:fe:5e:ec:ce:2d:
0c:85:a9:75:4f:46:00:5e:06:4a:45:4e:b6:50:a8:2c:f2:9a:
28:ba:4f:f4:02:7e:b2:89:59:08:11:e8:c7:cc:76:66:12:b4:
b7:0e:dc:5f:14:39:29:65:8d:4d:2b:45:85:ec:74:1e:88:9f:
00:31:db:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:14 2025 by rpki-client