Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
File: MqD9Xa9E_FXXzlk452RKFyOEjDI.mft (raw, json)
Hash identifier: s/S++/CBQyxwb8MAztP8ZQAIwts4tspj52dyFNzIRCQ=
Subject key identifier: F4:89:23:81:8F:30:65:1D:35:F4:C6:2E:60:75:C1:8D:75:2E:49:B2
Authority key identifier: 32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
Certificate issuer: /CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Certificate serial: 019A71EEC61E0C577C9612D69122B32BB0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
Manifest number: 27
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: MqD9Xa9E_FXXzlk452RKFyOEjDI.crl (hash: VM3lUdVoCO0osX6mMPD/ZXvs2Vlh8BVGleot4/Rjb8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c6:1e:0c:57:7c:96:12:d6:91:22:b3:2b:b0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32a0fd5daf44fc55d7ce5938e7644a1723848c32
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=f48923818f30651d35f4c62e6075c18d752e49b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:0f:0f:4a:f8:0e:4b:24:41:a2:05:14:a0:e9:
f2:5d:7a:c8:65:db:1c:af:f7:a3:26:db:6e:a8:f9:
10:81:03:d1:60:94:d8:3f:8c:21:cd:d4:84:31:0a:
4c:4a:e2:55:d6:a7:eb:13:25:7f:ba:07:da:31:86:
f3:49:d7:31:71:90:a4:a2:fe:5d:8e:db:4a:5d:58:
aa:3c:1b:4d:2e:2c:33:93:e2:ae:ce:35:ac:e1:d0:
0b:41:c5:ac:c9:3d:0f:8b:46:99:f7:a0:fc:70:c4:
ad:6f:13:92:42:f9:60:26:6c:c6:4c:12:78:30:1e:
25:84:6e:10:02:d8:9a:1e:92:56:94:a5:49:18:da:
04:a2:3b:b7:f4:bc:bb:f2:cb:52:81:91:62:ea:4b:
c9:32:42:07:ef:43:d4:54:f1:99:7c:17:de:c8:19:
6e:37:7c:2a:c7:b2:d5:ad:be:79:e6:d3:56:39:93:
34:b6:c6:de:ff:a4:e4:ff:a9:8d:1f:d5:d4:4e:6d:
0e:57:17:23:69:d6:d9:8f:8f:d1:fb:ef:42:e8:81:
0a:0f:9c:17:08:ab:c1:35:4f:9f:e6:81:ea:c6:4d:
0e:02:c5:54:7b:19:13:e5:10:d0:11:de:24:28:78:
f4:3c:1c:d7:03:7f:cb:bf:f0:10:36:13:3b:b6:b1:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:89:23:81:8F:30:65:1D:35:F4:C6:2E:60:75:C1:8D:75:2E:49:B2
X509v3 Authority Key Identifier:
keyid:32:A0:FD:5D:AF:44:FC:55:D7:CE:59:38:E7:64:4A:17:23:84:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MqD9Xa9E_FXXzlk452RKFyOEjDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cf98c6-bc6b-4c98-b650-8a3a36d71c66/1/MqD9Xa9E_FXXzlk452RKFyOEjDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:72:53:f3:17:25:9c:3e:b2:0a:d4:73:38:a6:25:b4:8c:c8:
fd:f2:25:c9:36:86:4f:a5:92:30:46:1b:91:be:94:01:2c:da:
fb:fe:0f:f9:57:5e:cb:aa:e9:ab:2d:2e:48:a8:fe:69:fa:84:
6b:af:03:5c:b5:0e:e4:b5:ba:7d:16:d4:b1:1a:b3:76:6c:66:
30:2e:a4:3d:0c:46:82:3b:b2:5c:4c:bf:aa:96:e8:57:c7:f9:
43:5e:50:b0:7f:f9:ce:df:6b:66:82:07:1e:c0:e9:9c:c6:6c:
1c:50:a2:4d:ac:e2:b8:a1:3e:82:09:d5:e1:8b:dc:81:84:30:
bb:de:88:84:7b:58:3f:b3:e7:eb:03:f1:42:43:f5:d0:da:d4:
47:1e:d8:59:c9:c1:d9:ae:14:97:02:65:de:9f:57:09:09:ca:
fe:fd:ed:98:a2:bd:55:80:50:fa:6b:f4:5b:a0:07:ef:ac:bc:
48:84:e1:7b:09:9b:91:b5:d6:d5:fe:73:b8:e0:80:09:cd:4c:
e4:b8:17:e8:f4:0b:72:28:35:25:ad:b9:72:83:36:8f:f6:c2:
fb:06:e2:60:12:69:f0:fd:8f:ce:58:b1:c1:01:bb:aa:22:00:
89:68:96:e6:1f:15:7f:4b:3a:31:d6:d3:3c:9c:eb:85:5a:52:
03:77:ad:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:55:10 2025 by rpki-client