Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: YvMNDgT4AxIzYRecUq31s6dyYfcLTtUGc+E+FYvDmQ4=
Subject key identifier: F4:74:9A:0D:15:E8:D6:AC:3F:58:F8:9A:7E:FC:BC:8C:1D:B2:8B:73
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 019A71B8AC2D5B3A8D81BF5E94F28E5054F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: 8tZojUUM9o95oeqGn8cKFktB4D5tZ6hIa3dtnADVNxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ac:2d:5b:3a:8d:81:bf:5e:94:f2:8e:50:54:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=f4749a0d15e8d6ac3f58f89a7efcbc8c1db28b73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:9c:10:e6:08:ec:6f:33:ba:95:6f:7e:89:
ca:cf:b0:05:f0:8a:95:72:d3:bf:4e:fb:39:a9:e7:
17:b1:e7:3d:11:4e:3e:f8:5e:70:31:33:9a:ac:0e:
eb:15:08:d5:10:39:70:2a:7a:45:50:ae:cb:eb:be:
08:86:97:9c:12:64:0f:be:03:89:89:27:00:bc:a6:
4f:46:4e:e9:48:73:53:c5:2b:fe:c1:78:69:ac:d2:
b5:8e:2c:19:95:e4:81:10:2a:bb:82:23:ae:c8:f1:
af:69:48:28:c8:fe:97:83:41:19:f4:52:5d:22:cf:
0a:3e:30:d0:70:9f:51:82:69:38:7b:18:1e:99:2f:
9f:28:05:e9:48:e1:e5:b2:65:cf:a4:28:80:6b:26:
82:0f:01:86:41:66:25:02:33:aa:e1:ec:76:b2:71:
3c:04:ef:ea:6e:bf:7c:9e:9c:0f:9c:82:00:38:70:
d8:65:28:d7:f6:bb:01:e2:21:83:d4:81:bd:70:68:
34:4e:cb:51:c2:c2:84:8c:44:5a:a9:60:22:b6:93:
a3:f4:a0:0d:6c:e7:48:50:3c:05:e4:85:92:2a:17:
73:3d:9d:a4:e3:85:82:37:40:66:54:91:4d:6b:fb:
24:35:48:96:24:a0:37:0c:55:28:29:53:7f:34:d6:
de:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:74:9A:0D:15:E8:D6:AC:3F:58:F8:9A:7E:FC:BC:8C:1D:B2:8B:73
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1a:ae:b2:cb:46:d0:6a:ee:21:cf:52:a9:9a:1c:ac:7f:12:
17:00:15:b8:5b:26:b8:0c:34:38:34:4c:56:99:69:e5:4f:8d:
00:ba:53:27:70:40:97:7b:11:66:24:83:d4:d3:70:f1:0e:e4:
4a:09:96:9c:fd:4f:45:42:ce:4d:20:49:24:64:6e:46:de:15:
00:39:db:92:43:a1:f9:a4:73:07:61:6c:3e:97:4c:8f:16:b1:
d9:42:ed:30:f8:2a:36:97:b2:0f:9c:f3:27:0e:a9:94:bb:84:
2b:b8:03:40:db:5c:e3:a6:da:6e:f9:16:10:5f:22:d0:74:ef:
da:3a:b2:30:6c:b9:38:72:e0:ac:7a:68:63:e9:bf:71:9d:a8:
2f:92:b1:5d:2e:0d:ad:93:28:9f:17:10:6f:0e:c3:f2:53:64:
86:88:a5:ea:5e:6a:4d:16:0a:8c:1e:b9:be:a1:5c:f6:9f:80:
63:8c:af:ca:e8:05:cb:86:10:69:5a:a1:0d:89:20:2f:dd:9a:
68:68:46:3b:b1:e0:74:e2:b9:65:77:4f:9d:36:f6:34:3a:67:
fd:1c:a6:92:4f:52:b3:ad:64:a0:71:58:71:47:d8:61:d3:d6:
f8:e6:2d:61:9b:87:44:19:ac:9b:5b:7e:13:66:2c:e5:5f:11:
8a:a1:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:35:54 2025 by rpki-client