Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json)
Hash identifier: L0JlBO2SYnfSonvnWMOSlE8s7flRSc235iR4fcyhKQg=
Subject key identifier: 85:0F:A2:4C:8D:4B:D1:1D:65:36:C2:FB:7D:D1:14:CC:61:DA:B8:CE
Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Certificate serial: 019A7180839752A6FCB9480E1ED0C6628AE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
Manifest number: 58
Signing time: Tue 11 Nov 2025 06:00:38 +0000
Manifest this update: Tue 11 Nov 2025 06:00:38 +0000
Manifest next update: Wed 12 Nov 2025 06:00:38 +0000
Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: 9tB62LYSdI8gJxggUEuuOi6wY84no7bl9IHUn32XPbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:83:97:52:a6:fc:b9:48:0e:1e:d0:c6:62:8a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Validity
Not Before: Nov 11 06:00:38 2025 GMT
Not After : Nov 12 06:00:38 2025 GMT
Subject: CN=850fa24c8d4bd11d6536c2fb7dd114cc61dab8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:ec:c2:c6:9a:cc:03:8a:d0:3c:c9:6a:d1:
f8:8b:6c:2d:74:c1:b6:6a:95:93:9b:aa:e4:33:51:
34:44:66:a0:06:c7:88:63:2d:66:d1:a2:c6:4b:67:
75:bb:98:f1:bc:76:25:df:b8:7a:30:a5:14:11:c8:
fc:fc:10:e8:c6:fe:f1:27:d5:82:2f:d3:84:de:18:
49:7c:4e:37:94:2a:1b:2f:ad:23:2a:ef:91:b6:50:
2e:d9:ee:f2:08:c3:11:7b:74:e1:c3:2e:f4:ad:1b:
c9:43:c4:f7:4c:14:38:ee:09:16:63:61:22:86:97:
ed:d0:3d:e6:87:5f:8a:e2:de:87:4d:20:c7:cc:0e:
6f:1a:dd:b4:6a:ff:c8:7e:1e:58:4e:6a:17:30:5c:
ec:3a:cf:12:d9:21:b2:a4:c0:ad:7b:21:50:8f:57:
5e:6d:06:d5:90:02:a7:36:74:7c:f8:e0:26:f5:92:
34:28:41:68:8f:ff:98:1d:2e:43:33:dd:df:d8:54:
92:d6:75:2f:11:e9:8f:fc:74:9f:8a:69:ab:b2:b6:
93:bd:d8:f3:46:11:d8:28:1f:0f:ff:1b:81:0a:9c:
9c:d5:77:05:70:13:76:ef:8d:43:b8:8c:83:66:4a:
91:d8:c0:66:98:2d:91:33:c7:0c:aa:57:55:b0:1b:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0F:A2:4C:8D:4B:D1:1D:65:36:C2:FB:7D:D1:14:CC:61:DA:B8:CE
X509v3 Authority Key Identifier:
keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:3b:19:b1:a5:72:41:1c:27:b7:c1:93:57:ee:53:c2:8c:7e:
c4:47:55:12:9e:e4:1c:0c:20:6f:e5:3a:16:d3:10:6e:37:be:
b1:61:2d:fc:50:27:37:b0:9b:df:f9:6f:ab:21:2d:5d:8c:ce:
15:b4:ba:ad:3b:00:6b:c6:b9:9d:43:9b:ac:8a:12:bd:a5:47:
46:36:8c:68:26:71:aa:87:8b:6c:65:d2:a7:b7:d3:05:0b:54:
ac:da:fd:15:db:b3:1b:b3:c3:c9:27:97:f2:d3:66:01:bd:c7:
be:83:13:7f:65:01:30:f0:fb:10:17:3d:48:d3:87:3b:b0:31:
e4:23:f0:e0:c5:5e:71:a7:12:fd:ac:31:ce:28:60:9a:26:b8:
81:bd:28:c3:06:6e:9b:ea:dd:ee:94:f3:01:df:c2:7d:97:1a:
65:cd:2c:e6:c4:51:60:b4:53:3f:05:87:5b:7a:b0:e0:9e:7a:
4b:b7:c8:54:3f:30:c2:b1:17:c4:96:26:3a:8a:95:2b:7d:c5:
18:64:e4:e8:02:d9:0b:b0:05:9e:5a:71:d0:87:a1:da:af:c4:
21:47:6e:87:3e:57:22:1d:a7:ce:38:76:92:66:3a:eb:b5:04:
d9:8c:da:c1:48:87:cc:33:e0:7c:81:bc:f3:9b:c0:88:2c:03:
a9:3f:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:57 2025 by rpki-client