Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: 6ZC/dRvphuMZ0Zi9caA4SFWAw2tvfA95prKEL2UIl28=
Subject key identifier: D2:B5:36:DA:65:F2:33:3A:42:06:25:55:4E:EA:05:53:63:45:A9:D6
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 019A71B8D80BA39840E20EC23835E8C75506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: BBmQB1MCaeO7WorlQIWXox8I9eS9AOUMPlndewYPAA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d8:0b:a3:98:40:e2:0e:c2:38:35:e8:c7:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=d2b536da65f2333a420625554eea05536345a9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:77:f3:60:e6:c9:be:f9:21:5a:b3:15:f0:
69:27:8b:a6:1e:2c:59:95:cc:c6:ee:f1:c5:18:4e:
e3:6f:e8:2a:55:4a:51:23:a3:06:4f:30:94:da:00:
8b:36:cb:f0:1e:5d:af:09:c6:5d:40:08:7e:24:bb:
b2:eb:7f:97:2e:c1:d0:91:ff:39:cc:08:db:3d:24:
3f:a0:9b:81:c9:5b:8d:80:4f:8d:1c:96:e1:7e:d8:
47:7f:6a:67:5e:b9:23:5f:e3:91:36:14:47:5f:29:
4a:63:42:1e:72:73:f0:60:30:22:f5:1f:a3:0e:88:
b6:0a:54:ac:56:15:a5:f1:46:2c:4f:98:ff:a2:7c:
9d:0b:ed:28:50:09:fb:86:71:f6:79:20:d1:da:9b:
df:67:41:df:55:3e:67:c4:6c:aa:c3:b6:a9:80:4d:
64:26:ea:4a:02:a8:45:e5:72:a3:d4:bc:3b:78:50:
33:58:ee:a4:0a:d4:7d:14:2b:71:3c:62:5c:79:50:
69:8d:b8:64:f8:fc:e7:a4:eb:3d:b7:37:eb:2a:e0:
eb:65:37:d7:44:14:2d:67:3e:51:79:df:24:71:16:
8b:69:62:17:bd:3c:46:e3:5c:81:bf:a4:d6:a1:18:
ca:da:31:d3:cc:8c:1a:38:01:6e:a5:1d:3a:27:71:
69:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B5:36:DA:65:F2:33:3A:42:06:25:55:4E:EA:05:53:63:45:A9:D6
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8c:fe:ac:2a:cf:f1:fa:c9:8e:a6:99:de:cc:c5:a8:9c:46:
5a:11:f8:84:a0:69:67:99:20:3c:d0:e1:e9:66:bd:ef:8d:d7:
16:34:44:a0:ca:33:44:1b:d6:0f:c0:09:98:eb:fe:91:d0:95:
69:b6:a5:cf:28:4c:87:5c:4f:41:0a:df:12:ea:33:4c:4e:99:
ed:16:0c:27:f2:08:24:39:18:20:ab:4f:e2:8a:33:38:8f:4c:
f9:2d:5a:4e:81:be:b5:24:7e:a2:1a:48:28:13:0a:34:64:64:
70:0b:1d:f6:5c:5f:21:32:45:9d:8f:f7:6e:e4:c4:34:ae:a7:
15:ab:5a:99:e8:bc:67:8c:bc:d0:93:98:2f:7e:c8:80:ce:b0:
40:b2:b8:54:ce:fd:f0:79:6c:56:bf:41:aa:81:4b:04:2f:4e:
ff:d8:95:9a:a8:30:8d:2d:60:5d:dc:9e:0f:91:d4:0c:92:9e:
c4:35:43:2a:dd:d6:89:2d:ab:f4:0e:06:cb:0d:9b:3e:20:63:
64:bc:43:bf:9b:0a:56:a0:0f:bb:4a:5b:b8:07:f9:93:fd:f3:
b9:bf:71:e4:c4:d3:69:fd:d6:29:5c:f4:d1:d5:5d:13:b5:4a:
99:50:2f:2b:b2:e6:91:7a:c0:13:f9:ff:af:83:f0:96:1b:3d:
04:c2:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:54 2025 by rpki-client