Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: f8yjZqsB1da8zXb+MvQPPcIcYt4HfdtoYBsoidLywz4=
Subject key identifier: FD:91:CE:3C:55:AE:61:73:16:78:4A:A5:8E:14:B7:5C:B6:E2:2C:22
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 019A73A5F1AF216A36040EF92625244CCCA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 0B46
Signing time: Tue 11 Nov 2025 16:00:46 +0000
Manifest this update: Tue 11 Nov 2025 16:00:46 +0000
Manifest next update: Wed 12 Nov 2025 16:00:46 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: gn11lKiYj9idl0ajk661XrqEtY7+XJtqhKR5n1yJjxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:a5:f1:af:21:6a:36:04:0e:f9:26:25:24:4c:cc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Nov 11 16:00:46 2025 GMT
Not After : Nov 12 16:00:46 2025 GMT
Subject: CN=fd91ce3c55ae617316784aa58e14b75cb6e22c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4b:bc:d7:1c:d7:f7:8e:35:fe:20:93:fd:ec:
7c:e3:a3:67:ef:cc:e4:08:d8:87:59:07:c0:bf:30:
dd:6e:63:9e:9b:98:96:d7:39:16:ac:10:73:cf:91:
c4:2d:5f:36:3c:70:c1:c4:1b:23:00:be:dd:4f:31:
b0:77:50:28:59:7a:39:86:4f:bf:b5:58:08:b5:a7:
f6:aa:90:5a:f8:63:76:40:1e:43:df:7a:40:90:c7:
34:a2:c5:0b:6a:1b:2c:aa:02:7d:6a:bf:86:a7:1b:
9a:d1:8a:ca:e8:df:f0:10:43:ee:06:cf:dc:d5:97:
66:1e:7c:27:13:f0:65:10:dd:dc:d7:44:04:00:66:
fb:03:fa:96:22:5d:7c:fc:ce:0c:8c:0c:a4:ed:03:
4f:0c:01:69:03:97:9a:90:43:4f:2c:c7:8d:f1:ea:
46:f9:a5:80:29:b6:0f:ca:03:ee:e6:03:14:f6:9b:
81:52:5a:7e:fb:fb:2e:80:41:db:d5:73:36:f5:82:
67:07:e0:04:92:a6:d6:64:e8:f3:c7:97:bb:d4:68:
7f:66:68:56:cd:75:6f:5d:ad:4c:e9:02:fe:0f:3a:
b2:ca:78:3a:a9:48:c2:4c:72:03:79:d7:a3:8f:85:
a9:48:5d:cc:e0:64:0e:6c:35:34:22:38:3b:5c:84:
c2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:CE:3C:55:AE:61:73:16:78:4A:A5:8E:14:B7:5C:B6:E2:2C:22
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:e9:35:1b:5d:0b:0e:43:33:a4:e6:1b:99:c3:2c:04:5b:df:
e8:ba:96:cf:1a:b2:18:f1:09:8b:2f:86:bc:50:16:d7:12:72:
03:bd:2a:6a:bc:a3:10:a7:44:61:76:c1:ed:e9:6c:e1:0c:14:
ff:37:5b:b8:03:b7:9d:3d:07:d5:4b:af:ff:79:d7:24:3d:16:
47:51:0b:ec:b1:e6:38:e6:13:34:78:db:b0:a0:1a:00:47:19:
31:42:97:a1:d7:c8:60:ad:c0:60:f8:31:ef:03:b1:f5:3a:b6:
ad:e5:ba:fd:e5:ca:65:c7:a6:ae:4d:f2:b7:bf:db:86:6e:82:
ef:9c:19:e0:26:29:5d:09:60:36:55:3c:95:71:55:33:5d:95:
d5:bf:d6:1f:21:7a:f6:08:84:aa:fc:77:4d:38:00:eb:bd:03:
e5:8b:e3:af:2a:dc:81:62:50:67:11:f3:52:18:1e:aa:76:df:
12:b7:18:68:b2:3e:00:bb:2b:27:28:38:b3:3a:89:9f:88:a3:
16:85:4c:a8:a8:4c:19:92:d1:b5:a6:81:d8:ab:47:d8:27:98:
b1:3b:a4:24:7d:cd:2c:f5:9a:e3:a5:eb:bd:1b:9f:fa:e4:b2:
72:69:10:36:fe:a5:a8:ea:5f:d4:e0:ca:62:d0:c7:0b:65:28:
ed:b7:63:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:54 2025 by rpki-client