Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
File: SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft (raw, json)
Hash identifier: OunkwD4cPGOpeGy8f0wc0jAzQ3yBM22WqeqkfFIwLgw=
Subject key identifier: 45:24:49:DB:51:2D:5A:43:63:E7:C8:96:06:A1:C9:6A:34:E6:81:F3
Authority key identifier: 4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
Certificate issuer: /CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Certificate serial: 019A72CAB2C0970442AA79F8B453096C1653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
Manifest number: 02FE
Signing time: Tue 11 Nov 2025 12:01:17 +0000
Manifest this update: Tue 11 Nov 2025 12:01:17 +0000
Manifest next update: Wed 12 Nov 2025 12:01:17 +0000
Files and hashes: 1: SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl (hash: z5URBEn1T9DJqfrjEHdy1l7eZkyAxd4uelceOzYdGew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b2:c0:97:04:42:aa:79:f8:b4:53:09:6c:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aa2fa6f6770f72d8084bc6c183058b80e838d73
Validity
Not Before: Nov 11 12:01:17 2025 GMT
Not After : Nov 12 12:01:17 2025 GMT
Subject: CN=452449db512d5a4363e7c89606a1c96a34e681f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2f:98:18:ee:75:03:a0:2a:17:d2:1c:7b:14:
ae:4f:d6:fa:62:ce:f3:73:d9:91:b3:48:96:0c:4b:
5f:bc:29:31:aa:52:2e:3c:54:7c:4e:1d:cf:26:a0:
92:01:16:5d:1d:38:78:d3:88:fc:72:05:93:83:a3:
34:f1:ab:93:3d:b0:bf:bc:cf:c1:5f:73:b0:48:56:
a3:ee:b8:da:f6:09:91:ef:5f:23:57:e0:41:a8:f3:
e8:09:da:60:cf:8e:0e:cb:9e:cb:e5:f5:7b:62:fe:
5f:9d:24:ae:4e:84:2f:e3:78:f0:20:2e:1e:22:5a:
45:b1:56:5a:9c:36:a5:8e:34:5a:4c:f7:a5:8f:39:
44:a8:2d:c1:2b:5e:af:6f:43:37:d6:b2:21:2d:07:
fa:fa:61:49:80:23:5e:9a:4a:76:39:c9:bd:94:b4:
87:5e:7f:48:d8:34:29:24:13:53:85:c0:c9:fb:da:
9d:8f:4d:11:0c:99:43:85:cb:71:55:f6:a2:84:b4:
8c:9f:7e:f3:f9:5e:ac:f6:b7:97:aa:02:67:80:54:
ef:cc:da:34:d4:28:51:58:e1:ae:36:8d:f5:74:1c:
49:5b:ec:6f:18:7b:e3:dc:9b:db:46:6a:96:9a:b7:
19:b5:fe:c4:bf:71:29:3d:83:f2:22:da:b6:99:ae:
30:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:24:49:DB:51:2D:5A:43:63:E7:C8:96:06:A1:C9:6A:34:E6:81:F3
X509v3 Authority Key Identifier:
keyid:4A:A2:FA:6F:67:70:F7:2D:80:84:BC:6C:18:30:58:B8:0E:83:8D:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SqL6b2dw9y2AhLxsGDBYuA6DjXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/297bd8-beaf-4609-9c60-7474f916db47/1/SqL6b2dw9y2AhLxsGDBYuA6DjXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:a5:db:f2:0a:11:27:78:c4:7b:c0:7a:65:6f:09:a5:86:46:
e1:89:4a:1c:e3:d4:88:ad:a3:7c:0e:03:d9:76:b3:0c:72:a1:
a6:89:b4:9d:0a:71:c9:a6:bc:81:d4:49:0c:02:90:da:65:62:
26:43:f7:4d:3d:73:95:32:f7:23:47:d5:4a:ee:7d:54:16:c5:
5e:75:22:d3:11:a3:f3:d8:60:9d:a4:e6:17:7a:8f:f6:31:b6:
6d:96:e5:c0:0e:ce:fc:2a:f9:7e:8b:4e:60:f0:ae:7f:35:22:
79:a9:92:94:74:36:99:ee:34:0d:46:ce:e9:e0:ff:84:c0:ce:
5a:9d:2d:7f:65:2c:ce:68:c6:2f:96:c8:33:a3:06:0b:90:88:
1e:16:48:da:d2:76:f8:a0:09:85:4a:cf:7f:60:c0:95:1a:76:
2e:09:6c:78:90:0f:0d:80:1d:24:9d:a7:a6:a0:b6:92:e4:f3:
96:82:28:89:db:d3:c5:98:c1:7c:a1:81:8d:dd:78:ad:36:e4:
8f:e6:e2:b4:98:66:79:2b:9f:a0:24:74:37:88:04:93:e8:b8:
c5:9b:ee:8d:99:24:5a:0f:2b:0d:9a:8b:64:14:f7:e0:5f:27:
bf:34:fd:3e:cd:77:bf:8d:5b:8e:59:c9:de:5d:da:45:fb:76:
8c:10:a8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:58:27 2025 by rpki-client