Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
File: qjX0oGEfcqiSww2CEtIfhswTqWc.mft (raw, json)
Hash identifier: kVw5ghBlpXBIr2S2hyydHcRQhOUs+M3oy43ickPplwU=
Subject key identifier: 1E:D2:8E:25:85:D3:6D:97:86:34:41:E7:F1:C0:53:31:13:82:0C:26
Authority key identifier: AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
Certificate issuer: /CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Certificate serial: 019A7226703B67E0B89EDD8B10D5886C923F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
Manifest number: 07B8
Signing time: Tue 11 Nov 2025 09:01:52 +0000
Manifest this update: Tue 11 Nov 2025 09:01:52 +0000
Manifest next update: Wed 12 Nov 2025 09:01:52 +0000
Files and hashes: 1: qjX0oGEfcqiSww2CEtIfhswTqWc.crl (hash: f66QRni9ucM74rmDpxmiJyiQ/mzJIo+pfUzD+GLoAxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:70:3b:67:e0:b8:9e:dd:8b:10:d5:88:6c:92:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa35f4a0611f72a892c30d8212d21f86cc13a967
Validity
Not Before: Nov 11 09:01:52 2025 GMT
Not After : Nov 12 09:01:52 2025 GMT
Subject: CN=1ed28e2585d36d97863441e7f1c0533113820c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:73:fe:59:1d:ce:dd:e2:63:b6:62:9b:ae:
78:70:f6:11:68:46:86:13:1c:0a:f8:7b:9a:36:12:
18:19:49:1f:f5:f1:9a:06:a2:fd:ab:a3:95:14:db:
d6:e8:f4:d7:fc:8e:b3:ae:49:c4:f4:4a:23:29:01:
ba:5e:56:a2:74:97:b4:db:f5:1c:0a:22:e5:e7:b9:
f4:1c:b2:02:ed:c0:71:a6:a8:27:08:4e:4d:9a:41:
85:2e:52:1e:16:63:9f:bf:fd:69:55:b5:96:9a:14:
3b:8e:82:18:39:13:a9:9e:95:3f:c2:89:69:12:77:
fe:c4:91:1b:f9:e8:93:33:c9:b9:ed:4a:ee:71:10:
a4:09:c6:82:9b:c3:af:42:22:51:ca:a9:f3:73:5b:
ed:ce:0b:d2:f5:7a:54:56:74:37:04:ac:9f:30:f0:
0a:d5:0c:f1:53:b3:d2:60:1e:bc:f8:15:39:f3:39:
c2:d0:2f:18:48:70:57:f4:f9:de:e3:b9:50:68:4f:
b3:03:6b:91:e4:5c:2d:67:cb:07:1f:77:51:18:b4:
3e:0b:26:21:df:7c:65:6e:60:d2:63:55:72:34:0d:
99:cf:8b:1c:78:34:50:9d:94:0f:50:30:3e:53:fa:
61:99:09:a9:70:b2:91:31:79:bf:38:52:44:62:aa:
51:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D2:8E:25:85:D3:6D:97:86:34:41:E7:F1:C0:53:31:13:82:0C:26
X509v3 Authority Key Identifier:
keyid:AA:35:F4:A0:61:1F:72:A8:92:C3:0D:82:12:D2:1F:86:CC:13:A9:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjX0oGEfcqiSww2CEtIfhswTqWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/aa1f94-8825-4bdd-b4d8-6bbfe58a1ca0/1/qjX0oGEfcqiSww2CEtIfhswTqWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:c2:4b:58:85:dd:03:48:53:a6:13:e2:0a:64:ad:85:8d:
70:de:c6:4e:b5:26:64:59:38:ac:14:42:b8:ac:2b:4e:7d:18:
e4:66:ea:14:3c:ce:b7:6a:78:c8:db:54:bb:80:bd:26:29:f5:
70:b7:7a:93:4c:fb:10:f3:12:c7:ec:28:6d:a2:b7:2d:d0:22:
bd:bd:8f:4d:25:55:83:b5:26:34:ab:49:24:d1:1d:e3:ea:a7:
4c:d7:ea:e4:e3:ed:b7:7c:a5:ef:65:20:c4:fe:86:f0:a7:79:
a1:91:c5:37:f1:3b:df:17:2f:9c:59:ce:cb:11:f3:29:7d:fe:
ae:19:3b:7c:da:10:75:eb:34:84:73:50:39:cb:e0:bb:81:7f:
5e:3a:8e:8b:66:db:28:72:4e:c1:71:3c:7a:d0:2e:0a:bd:fb:
55:5d:fa:4b:16:09:59:da:18:dc:1e:05:0d:ef:ae:bb:45:cc:
3a:fe:45:a4:0b:cf:cc:c8:0b:c5:90:16:09:03:f3:4c:02:69:
0b:ff:11:03:5a:0b:cd:d5:67:7d:65:e5:de:00:b3:f9:18:0d:
55:dc:fe:d6:8d:d5:38:73:4f:a7:9d:2f:a8:dd:0e:fd:bf:5c:
07:d6:bc:71:fe:2f:86:9b:25:93:1b:6f:f1:75:46:fc:c4:75:
48:b0:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:46 2025 by rpki-client