Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: yoZ4h/DLnqiYdXkCTDGFsAIelxlRUCRNazFmpitegN0=
Subject key identifier: 93:E6:03:0E:31:03:92:C0:F5:D5:00:2E:1D:34:D2:07:D0:CF:0E:31
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 019A71B7C0CCC2E744C63EDA76975208F911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: G0TqQFytlYMgkV9OJ3Kiv3L5DXLlbNyyuEvJkVlasMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c0:cc:c2:e7:44:c6:3e:da:76:97:52:08:f9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=93e6030e310392c0f5d5002e1d34d207d0cf0e31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:d9:8b:1f:42:85:19:23:e7:3c:c1:72:6c:
c6:a5:3d:bc:6b:51:aa:8a:8d:fc:bf:6e:0b:d4:3c:
6e:bf:df:f2:d1:b9:04:a3:8a:1c:cd:5b:07:6d:29:
9c:e3:4d:3e:b4:c0:c8:52:51:d3:6d:be:dc:b7:aa:
08:ff:2a:7f:cb:99:b8:ff:6a:d4:9f:d2:35:72:80:
1c:f8:63:24:77:bd:95:6a:53:e7:75:31:e1:b9:3d:
76:aa:a9:36:fc:3f:d0:58:fa:00:0f:d3:52:cb:c1:
73:da:5a:75:b4:98:22:8f:53:47:4a:91:fb:bf:42:
bf:02:c2:07:20:40:0c:89:c0:a3:69:92:77:68:12:
2c:3c:49:34:b5:ec:0a:14:62:e7:f4:26:c0:97:cf:
75:6a:2c:a3:4d:46:0a:2c:d6:2b:d8:85:54:63:ef:
b7:51:1b:fa:ee:e4:47:b4:37:49:2d:7a:32:3a:1a:
b8:b9:1b:94:7c:40:ef:a1:5d:43:10:8c:28:75:3f:
38:5a:61:78:63:e7:52:7b:01:27:53:a6:71:f9:38:
1d:87:6a:14:31:3c:cc:e4:0d:e0:ea:6c:2b:c6:89:
f0:20:ed:16:6a:7a:45:b1:56:76:b3:62:39:dc:5d:
9d:db:39:fe:96:4c:89:f6:3b:8b:e3:59:18:84:af:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E6:03:0E:31:03:92:C0:F5:D5:00:2E:1D:34:D2:07:D0:CF:0E:31
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:70:e3:b3:95:1e:d9:cf:32:9a:24:b8:3f:5f:36:32:87:68:
f0:42:b5:21:b8:2e:f3:fa:db:4f:00:21:c7:c0:5f:7a:5d:01:
d9:79:b0:27:ca:88:52:1d:2d:48:dc:68:e9:a0:7d:2d:fa:fe:
88:c7:ff:1d:a8:e4:bb:dd:de:23:e4:9e:e1:ea:85:53:70:19:
28:01:99:29:77:dd:08:52:70:a5:fb:ad:47:dd:a2:cc:18:d6:
61:ec:55:f7:aa:54:55:c1:99:87:13:be:8d:e6:81:af:27:73:
61:e3:8d:1b:af:42:07:4f:9b:0c:38:a1:7f:49:5c:25:b4:24:
35:96:0d:44:e0:dc:7f:bd:07:a5:ff:09:2a:32:4a:4d:b5:5f:
0a:13:7b:88:94:21:71:85:27:c5:d3:0d:17:42:c7:55:3e:51:
47:d2:87:10:bb:58:d1:a8:03:fc:16:05:fa:a8:b3:9f:b7:81:
f3:99:51:d7:13:7f:2a:95:d4:59:a5:32:13:7e:f4:71:9c:e5:
29:8c:3d:38:56:ad:96:4d:aa:f8:8b:b4:cb:6d:3d:03:b9:9c:
83:5c:b6:24:48:62:c7:25:92:2e:2b:1f:15:d7:28:eb:c2:b5:
69:60:48:3d:30:31:45:0e:d4:5a:7b:fd:e4:d8:f9:fd:a1:de:
4b:98:a4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:55 2025 by rpki-client