Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
File: _QwhhAzBSt9SamgcB25mxDQxWCw.mft (raw, json)
Hash identifier: 4pchW1qTzlkJb8eRZs6ov4w/84+HVJnUgkM3RmHXjlM=
Subject key identifier: 73:F6:6F:F5:F8:89:AF:E4:88:A7:28:A2:64:68:BD:AF:B5:71:F3:74
Authority key identifier: FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
Certificate issuer: /CN=fd0c21840cc14adf526a681c076e66c43431582c
Certificate serial: 019A71EE5F8550650B46E01774ED58613C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
Manifest number: 39
Signing time: Tue 11 Nov 2025 08:00:38 +0000
Manifest this update: Tue 11 Nov 2025 08:00:38 +0000
Manifest next update: Wed 12 Nov 2025 08:00:38 +0000
Files and hashes: 1: _QwhhAzBSt9SamgcB25mxDQxWCw.crl (hash: eaOp18ykUlfFsT/3lIg6adESQVgs2wrmgGLPtbDl5+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:5f:85:50:65:0b:46:e0:17:74:ed:58:61:3c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0c21840cc14adf526a681c076e66c43431582c
Validity
Not Before: Nov 11 08:00:38 2025 GMT
Not After : Nov 12 08:00:38 2025 GMT
Subject: CN=73f66ff5f889afe488a728a26468bdafb571f374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:c7:ef:02:fb:09:ff:5d:8a:c7:66:67:2e:
a7:ef:89:2f:9a:4f:2d:3f:55:7d:f5:87:6a:5d:e7:
a4:c2:6f:bc:27:9d:99:aa:c6:51:cb:c9:3f:39:02:
c6:8e:2e:2e:05:b1:d1:f8:78:be:a5:d8:e7:0d:e0:
e7:38:45:d6:be:a8:82:6f:f4:a2:51:eb:4a:41:b9:
1c:55:18:b1:87:c5:2d:f4:87:28:5b:3a:7f:d8:f7:
85:5c:24:b6:74:10:54:fe:32:2a:36:23:ce:fc:76:
ed:28:73:ae:e6:46:f8:45:52:71:26:a1:ce:e0:7e:
fd:fb:a2:be:a5:8a:59:36:e9:4b:89:ef:d6:c8:76:
65:3d:89:42:9e:49:23:97:15:44:52:cc:16:2c:b3:
3d:e4:7d:ff:47:16:50:f7:ed:7c:0d:23:67:8f:a9:
c4:e7:cd:41:e8:82:6d:72:52:bf:b7:ed:73:6a:89:
b4:ed:9a:2e:29:cd:e5:6b:15:3d:0d:84:75:a9:24:
32:31:87:58:94:99:55:ab:01:a0:81:c6:2c:8f:41:
70:d0:46:02:bb:2b:f8:18:b9:37:e9:22:00:25:53:
56:b2:43:f5:38:b1:91:1b:26:f4:68:95:d4:cd:56:
1b:b8:4b:f6:f5:9b:5f:2e:32:f2:18:93:92:0b:25:
4e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F6:6F:F5:F8:89:AF:E4:88:A7:28:A2:64:68:BD:AF:B5:71:F3:74
X509v3 Authority Key Identifier:
keyid:FD:0C:21:84:0C:C1:4A:DF:52:6A:68:1C:07:6E:66:C4:34:31:58:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QwhhAzBSt9SamgcB25mxDQxWCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/30bd12-de8c-492f-8a16-ee961da972dc/1/_QwhhAzBSt9SamgcB25mxDQxWCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6f:6d:0a:f3:02:7b:a0:20:e1:a5:38:bf:81:79:26:7f:df:
ee:7c:a4:de:4e:be:ae:16:eb:6d:dd:06:35:50:9d:b8:8d:22:
96:c5:ad:c6:60:29:b3:ce:48:10:9d:a7:67:28:9e:69:14:ad:
1d:36:24:6a:33:6f:f0:45:05:2d:23:f2:14:25:2c:d3:70:13:
52:22:03:31:7a:59:ae:33:51:2b:7e:8c:18:40:91:9f:a8:28:
20:52:f3:85:ae:23:43:98:c1:d8:8f:a3:30:74:22:82:0d:94:
54:c4:51:f8:ed:e6:c3:1d:b3:51:d1:44:a5:dd:ec:aa:a7:ea:
50:ae:f7:5d:8a:23:ff:fe:a5:75:59:f9:2c:2c:ee:12:8b:91:
79:fa:75:e4:1b:ae:85:0e:68:af:ca:ec:36:66:fb:2e:e6:57:
c3:99:e4:89:b4:38:33:68:7f:ef:12:42:fa:21:ee:9e:fc:c3:
1b:4b:ed:73:ad:ea:69:c9:b0:d6:28:b4:3e:c9:3b:c1:32:4a:
87:f4:65:64:5c:1a:70:4a:14:8a:6f:34:76:7c:f9:75:fe:df:
65:8d:c4:48:a0:2e:ad:df:98:c3:ec:bd:54:14:75:ab:16:9b:
09:31:72:1d:d6:bc:25:63:54:7a:6b:26:52:57:5b:9d:32:e0:
5f:e4:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:33 2025 by rpki-client