Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
File: qS25uA37nJVniwfvLJU9YxB_X2I.mft (raw, json)
Hash identifier: VcCiC9Ftunlh6s1ulHsb9PHUemMdiimaUp4hiWtZynA=
Subject key identifier: 9C:27:5A:76:84:69:AF:19:62:B3:08:AF:DA:E1:A8:32:34:6E:30:62
Authority key identifier: A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
Certificate issuer: /CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Certificate serial: 019A06A46AC2F1014639622F35AF6A5D6912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
Manifest number: 0948
Signing time: Tue 21 Oct 2025 12:00:29 +0000
Manifest this update: Tue 21 Oct 2025 12:00:29 +0000
Manifest next update: Wed 22 Oct 2025 12:00:29 +0000
Files and hashes: 1: qS25uA37nJVniwfvLJU9YxB_X2I.crl (hash: N4X5D5GbBtn21EUJL2lCFFkpizOQumMV65zr4C/IxoU=)
2: u2PcO0qxdpMSmR6nWgSSQ3nTHEM.roa (hash: hawJL7X7ALdqooYTS/10qneIqHecH3wASpMJDU35WRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:6a:c2:f1:01:46:39:62:2f:35:af:6a:5d:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92db9b80dfb9c95678b07ef2c953d63107f5f62
Validity
Not Before: Oct 21 12:00:29 2025 GMT
Not After : Oct 22 12:00:29 2025 GMT
Subject: CN=9c275a768469af1962b308afdae1a832346e3062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:33:91:11:7a:c7:d7:e9:5a:f4:8f:87:42:f0:
85:f8:05:75:4b:f8:9a:32:13:95:6e:ce:19:56:b0:
a6:be:94:75:2d:0c:24:cd:fc:42:bc:fa:a1:98:9f:
30:2d:da:09:3c:36:c1:48:a5:f9:41:cf:89:89:11:
72:47:b5:9e:ca:90:0b:85:3e:87:da:94:37:9c:1f:
92:eb:39:2f:d1:c4:18:27:58:cb:07:00:29:af:bd:
1a:90:2d:c8:26:7a:8a:60:29:55:41:04:e6:1b:a0:
52:d4:c9:9f:25:3f:44:10:b2:de:8f:13:4b:55:1c:
63:8a:23:ae:56:48:ce:f6:b1:c8:43:99:46:16:26:
df:df:13:a9:06:be:e4:8e:a9:5d:3b:d1:cf:3c:96:
6f:64:72:79:be:0d:6a:8e:3e:be:41:54:8a:f3:1a:
8b:11:7d:2a:b6:cf:3b:b8:75:55:5f:b3:16:3a:40:
62:ea:23:72:3c:c4:05:20:cf:cb:c3:e2:e9:e0:5d:
04:ce:9e:19:71:35:ab:6a:58:94:22:5e:d3:c1:20:
97:0e:78:91:19:46:95:47:f6:dc:71:bc:f7:7f:04:
d5:53:a0:8d:d0:0e:3f:74:59:b5:a6:ab:28:b0:1d:
af:31:7f:67:6a:a4:21:ff:83:ec:56:06:17:91:4c:
da:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:27:5A:76:84:69:AF:19:62:B3:08:AF:DA:E1:A8:32:34:6E:30:62
X509v3 Authority Key Identifier:
keyid:A9:2D:B9:B8:0D:FB:9C:95:67:8B:07:EF:2C:95:3D:63:10:7F:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS25uA37nJVniwfvLJU9YxB_X2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/42b3bb-1935-478b-a302-cb7a5fd1ac47/1/qS25uA37nJVniwfvLJU9YxB_X2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0a:c3:37:95:99:7f:20:5d:1c:ae:c8:ca:48:03:2d:09:4d:
a7:00:f2:bb:25:15:cb:b1:90:e1:40:d1:d5:1a:9d:8a:68:d2:
7c:38:5f:49:71:79:43:e7:c3:75:46:41:87:a2:5c:3e:96:d8:
21:58:c4:d2:dd:7a:d0:98:e9:20:b3:cb:40:ee:43:83:28:ed:
a7:30:11:b8:3d:45:ed:3d:2c:da:95:d5:fe:54:a5:56:c7:9a:
be:58:98:0f:a4:b5:10:ca:14:1c:55:bd:d2:d0:54:63:c5:4b:
c9:73:bb:fc:00:b2:40:8e:e4:d9:b1:00:94:06:d4:8d:18:ce:
30:96:d1:18:75:a4:d6:f9:f1:0e:81:bd:45:40:7e:d4:c1:29:
bd:ba:8e:90:39:23:7e:d0:f5:d2:d4:8e:27:56:2f:74:7b:47:
f5:72:d0:fe:58:7f:cb:ea:69:85:14:81:57:54:b9:e6:51:97:
4d:82:d2:bd:03:12:45:81:87:46:f6:f3:c8:21:9e:6c:1d:8f:
06:55:9d:00:5c:18:2b:81:9d:4f:e4:4c:93:66:76:e0:b8:e8:
3f:41:1b:3a:88:20:48:7f:49:a5:46:8d:15:56:71:c6:ed:95:
7c:b5:66:02:f2:57:a8:d3:1b:8f:92:37:b0:6b:fc:e9:f1:e2:
15:85:72:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 17:28:38 2025 by rpki-client