Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
File: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft (raw, json)
Hash identifier: kxYQaUPHbayd8Y/ZXsSyrUksUAKDUG5mfbsBDXwK+9s=
Subject key identifier: B8:A1:2B:B2:46:B8:6A:DD:B5:ED:EE:06:DB:94:C4:8B:99:5D:FC:3D
Authority key identifier: A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
Certificate issuer: /CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Certificate serial: 019A209AF8831EC7A2B5C9E615F49C0ABF14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
Manifest number: 0B53
Signing time: Sun 26 Oct 2025 13:00:18 +0000
Manifest this update: Sun 26 Oct 2025 13:00:18 +0000
Manifest next update: Mon 27 Oct 2025 13:00:18 +0000
Files and hashes: 1: qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl (hash: WNA+YyhvEwr4cNm1FjjIPxeT0MfkQ2YEEc2pD+Ie1cM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9a:f8:83:1e:c7:a2:b5:c9:e6:15:f4:9c:0a:bf:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a862c9eee7c7064ff911594fe835a2f125c8dd50
Validity
Not Before: Oct 26 13:00:18 2025 GMT
Not After : Oct 27 13:00:18 2025 GMT
Subject: CN=b8a12bb246b86addb5edee06db94c48b995dfc3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:00:62:ab:3c:89:4b:ea:ad:31:a5:ea:bd:32:
21:ab:d1:9d:02:57:15:7d:cf:18:98:05:43:52:6c:
3b:fc:d4:5f:87:b3:ed:93:2c:1b:87:1b:11:2f:cf:
0c:6d:4b:61:bf:04:4c:e6:b6:30:b6:8e:76:48:5c:
c9:95:dd:ee:88:c4:80:4b:33:d6:4c:b8:ac:05:71:
f0:01:50:25:98:59:87:72:fb:59:68:3e:66:5f:1c:
5a:07:4b:76:cd:a0:ab:64:00:ee:65:87:62:1a:0a:
c5:f5:84:54:4c:34:48:ac:6f:10:b2:d1:93:de:f9:
26:c3:72:c4:b1:7a:ff:32:cd:92:86:9b:c2:2f:e3:
56:d1:c4:33:21:0b:00:17:25:bf:44:1b:cc:1e:82:
a0:3b:e1:40:7b:c2:c6:03:84:bf:8e:f1:bd:03:fe:
ff:f2:39:59:86:9a:fe:63:ba:6d:1b:da:94:bc:38:
ca:9b:7b:a7:c3:df:45:bd:96:42:e0:ef:53:b6:51:
78:7a:51:7a:50:61:16:51:c3:d8:5a:b9:28:b3:98:
ef:db:69:59:15:d6:0c:8e:dd:2f:9e:73:ac:af:26:
79:ff:20:06:3f:a7:0c:0a:64:46:ff:6e:f0:38:90:
1d:18:34:a3:6c:d5:41:49:fd:69:78:5e:e7:3e:3c:
43:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:2B:B2:46:B8:6A:DD:B5:ED:EE:06:DB:94:C4:8B:99:5D:FC:3D
X509v3 Authority Key Identifier:
keyid:A8:62:C9:EE:E7:C7:06:4F:F9:11:59:4F:E8:35:A2:F1:25:C8:DD:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b17d4e-6171-46bf-b767-1b02b1fc7d0d/1/qGLJ7ufHBk_5EVlP6DWi8SXI3VA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:e9:f0:58:b4:fa:bb:cd:26:63:c2:b3:4c:fe:48:6a:3d:36:
73:6c:88:21:74:e6:32:aa:18:ad:4c:a8:49:be:a5:7d:4b:ae:
97:04:97:13:c2:fd:e8:17:2e:7e:88:55:48:bb:25:24:02:84:
09:a3:4c:82:92:72:ab:a0:42:08:d5:df:61:4e:d8:5b:f5:94:
da:a8:cb:27:cf:e4:e5:bb:b0:73:59:d3:2c:06:fd:5f:5c:51:
db:98:50:f5:9d:d5:39:dd:79:50:5f:57:22:76:74:90:b8:65:
81:19:71:75:0a:8a:e9:31:24:7a:bc:7c:92:c0:85:c7:05:b1:
8c:07:ad:87:58:3c:90:d5:11:20:20:d6:58:fd:7d:84:56:6f:
65:bd:6e:2a:04:df:7a:1c:3b:e9:2e:4d:df:f6:31:82:5b:3b:
f6:9b:1c:4d:99:df:66:d9:94:fe:67:e3:ee:48:4b:20:85:3e:
f4:ef:1d:be:55:ed:80:04:ca:cb:b0:f0:91:d2:6a:e0:dd:4f:
ca:4c:8a:7d:31:01:ab:f5:00:9b:6f:1f:c9:7a:24:43:ff:1c:
1f:0a:52:f8:83:bb:81:98:5c:41:f6:c0:53:23:fa:1e:21:14:
16:e6:68:fa:c5:e9:c9:75:06:d4:a9:47:94:9a:e7:60:36:d7:
f3:33:a8:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:40 2025 by rpki-client