Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
File: Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft (raw, json)
Hash identifier: 03XPHfRGFl4f29Tp7jOwLJwq2B703lPYkbrtiGyJz6w=
Subject key identifier: B2:20:00:DB:4F:79:7C:A6:FE:5A:4E:46:12:6D:4A:F2:4B:E4:CC:82
Authority key identifier: 43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
Certificate issuer: /CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Certificate serial: 019A7149E4F808B5CEA8E08E756A8C03E345
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
Manifest number: 98
Signing time: Tue 11 Nov 2025 05:00:59 +0000
Manifest this update: Tue 11 Nov 2025 05:00:59 +0000
Manifest next update: Wed 12 Nov 2025 05:00:59 +0000
Files and hashes: 1: Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl (hash: 0TPuSXkbu5eiUEXVxyipaDTgx7zp5KuH0dKUNvXlFds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:e4:f8:08:b5:ce:a8:e0:8e:75:6a:8c:03:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Validity
Not Before: Nov 11 05:00:59 2025 GMT
Not After : Nov 12 05:00:59 2025 GMT
Subject: CN=b22000db4f797ca6fe5a4e46126d4af24be4cc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:84:23:bf:3f:15:0f:69:64:63:80:10:11:2c:
e7:32:87:50:4d:c0:40:d3:66:d4:a6:4c:c0:39:40:
bf:a1:7d:cd:d9:4d:4e:7c:78:88:ac:24:8c:20:e9:
80:49:9a:a7:6f:de:a6:4e:f3:96:c3:6f:c6:f1:46:
fc:e1:e1:d5:23:4a:dd:33:90:f9:e2:73:d0:78:49:
ff:ab:0a:76:9a:84:5b:cf:3b:37:af:08:e4:ed:45:
4c:02:3f:d0:9e:66:04:f8:7f:da:54:f9:57:f4:3b:
89:5c:cb:3e:c4:bc:de:49:1a:88:93:e1:5c:1b:72:
f1:d5:e3:ea:0f:69:24:6d:d7:f5:79:a9:15:05:f3:
c2:fd:54:26:9b:6d:65:39:f4:5b:a4:62:e8:c3:8a:
a4:e2:3e:13:fa:c8:65:75:ec:c8:6c:2d:31:81:1b:
d9:36:81:3d:4d:97:a1:ab:fb:92:5f:d1:1b:a9:6a:
7f:e1:53:d0:7b:40:ab:b5:4a:1f:dd:49:a3:50:2c:
68:98:b7:bc:d5:03:ff:95:9c:80:6f:24:92:a5:f2:
01:45:a1:b7:61:6f:97:2f:32:70:5a:26:5c:89:a3:
ba:eb:4d:55:63:b3:de:31:da:2b:60:31:5e:1e:53:
2a:83:d3:80:92:2b:51:6d:dd:6b:20:f7:08:79:35:
9c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:00:DB:4F:79:7C:A6:FE:5A:4E:46:12:6D:4A:F2:4B:E4:CC:82
X509v3 Authority Key Identifier:
keyid:43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9c:13:ed:f4:16:65:b0:3a:83:60:a3:d7:21:e7:c5:be:28:
9d:07:e5:55:d8:31:44:1f:78:55:4e:f3:02:e1:59:a5:b2:eb:
f5:94:09:19:ae:45:66:7f:2c:d0:c5:99:ca:87:48:a6:e3:eb:
c9:63:da:70:c1:05:05:e7:50:d1:f7:b4:b6:3b:9f:5c:a8:cf:
66:c6:9a:dc:48:40:35:58:8f:c2:d1:82:2d:6f:5e:1b:5d:4f:
95:f9:ef:3a:ab:b3:8a:e6:3c:62:6b:b0:19:49:3e:df:6e:de:
12:7a:3b:c8:62:9f:ff:71:58:1e:2a:eb:7c:d0:a6:58:c4:c2:
cc:ca:08:9c:45:d3:22:6b:a9:71:0c:f8:b7:9b:4a:57:c0:e4:
47:6d:8a:b1:b4:f5:8a:b3:d1:92:ec:d8:fe:c0:21:80:1a:01:
4a:d3:68:8b:36:80:c4:22:71:94:7a:31:8e:12:d1:e8:42:82:
6b:5e:4e:c5:28:75:97:b1:f6:ef:71:51:5e:6e:e4:f9:e4:e2:
5f:ff:9e:f6:8d:99:da:75:cc:f7:9c:2d:2a:6a:ff:22:2a:29:
13:b5:a7:77:65:0a:f2:e7:55:55:72:7c:84:30:2a:58:94:43:
2a:4b:de:b6:06:1f:99:ef:33:5b:72:ba:bc:9b:9f:50:c9:8f:
5b:45:7f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:43 2025 by rpki-client