Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: Dwxw1aXu/jKVH3wMubcpcgpawaXTt6EfVUzG//WF2A8=
Subject key identifier: 0B:4A:4D:B4:96:F8:87:3A:9E:D8:16:B7:7C:E6:65:DC:17:8E:E7:20
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019A71B86C2ABF055A81A8D7CF2BC1C61639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 07F3
Signing time: Tue 11 Nov 2025 07:01:42 +0000
Manifest this update: Tue 11 Nov 2025 07:01:42 +0000
Manifest next update: Wed 12 Nov 2025 07:01:42 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: MHRy/lLUWgHtuDz3rvYHsuQ7QaMDWdu/qbxL79hhqR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:6c:2a:bf:05:5a:81:a8:d7:cf:2b:c1:c6:16:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Nov 11 07:01:42 2025 GMT
Not After : Nov 12 07:01:42 2025 GMT
Subject: CN=0b4a4db496f8873a9ed816b77ce665dc178ee720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:63:fb:ff:e0:bd:e5:f1:10:4a:65:67:61:
ed:e2:5a:27:44:dd:99:b7:20:68:a3:f6:6e:72:62:
ee:70:f8:07:1f:47:88:92:fa:10:58:17:f2:24:23:
e4:05:71:aa:80:90:61:2b:91:c2:c8:bf:45:24:bb:
e3:70:ff:97:99:c4:61:c6:d1:83:7d:2d:87:50:57:
87:4b:7f:43:f2:43:43:e0:00:d4:b2:ce:99:9e:d9:
3c:1f:ee:d3:f6:a7:b9:2a:3b:fe:63:80:54:fc:72:
70:ff:f1:95:e3:ed:66:1d:89:90:1e:44:ff:83:7f:
28:5a:be:f0:1b:b8:eb:7b:9d:67:61:c4:f0:92:49:
b1:86:30:f1:de:28:7a:91:df:9a:d5:8b:56:2e:c6:
a8:d5:cb:db:1c:36:b6:d7:b4:cd:21:2b:09:df:f4:
67:e6:f5:9a:ca:34:4e:9f:0d:b3:39:f4:70:d3:b6:
ea:dd:72:83:60:d4:52:05:78:18:26:a1:ca:c0:74:
55:ac:89:9e:49:0b:a7:0d:67:25:96:be:fd:83:33:
61:14:b4:3a:cb:38:ed:3e:62:b3:2c:f8:c5:8f:51:
74:de:fe:d3:9c:39:1c:4a:4f:46:01:a2:8d:06:72:
bb:3f:2e:f2:63:93:14:68:80:b1:e0:b9:22:ad:ac:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4A:4D:B4:96:F8:87:3A:9E:D8:16:B7:7C:E6:65:DC:17:8E:E7:20
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ee:fb:80:cb:38:5e:f0:67:f7:40:5e:c7:3e:89:ac:e4:72:
46:95:44:95:46:af:dd:96:ef:0a:67:f2:3a:ce:46:12:c6:c8:
b5:c0:2a:61:2f:86:2f:dd:6b:8e:0f:bd:84:4a:6b:eb:1a:72:
7e:ab:b7:45:4f:d7:ab:b1:17:2a:4f:8d:88:45:26:b3:33:0e:
a6:b8:dd:1d:8f:21:8c:21:a0:9f:40:b7:8f:9e:9c:16:0b:2e:
f6:3e:87:93:e1:07:4a:15:ce:7b:73:aa:05:1d:fe:c1:45:7b:
a4:a6:c2:d3:15:6d:8f:30:81:e9:0d:35:3e:cf:23:50:ca:e4:
a7:6c:e0:59:26:cb:4e:92:60:c9:36:2b:76:8e:6a:c0:70:2f:
ec:ee:91:ce:06:e5:a2:cb:6c:f5:a2:f3:66:17:32:5f:80:4f:
ba:43:a8:8e:56:0d:dc:57:22:b4:4a:91:8d:b5:64:25:a4:dc:
0f:f5:88:80:21:1a:e7:a4:37:85:60:ae:65:4b:9e:9a:4a:8c:
80:b5:f4:c0:62:3d:51:2c:88:d2:d0:35:0a:bb:de:f2:3f:2b:
83:dd:12:b1:38:3b:77:3e:b1:bb:92:33:e0:10:c0:9c:5b:af:
68:ff:32:db:e3:f8:b6:a0:a8:e1:97:a3:04:46:ea:0b:56:cb:
b0:02:43:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:38 2025 by rpki-client