Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: FgYrAGEtpNRhtrL5sWnrehUNVMpUodADDmdkaloi/mM=
Subject key identifier: BE:66:4F:52:70:DF:4E:53:F6:8A:B8:EC:7B:19:61:D7:1F:C7:6D:23
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 019A729398EA6A1EFF9F5759F38D466741F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 03B9
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: E/6f85BuBuf8XGk/dRbrTwSN/AF1AwouhIV8unr3qQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:98:ea:6a:1e:ff:9f:57:59:f3:8d:46:67:41:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=be664f5270df4e53f68ab8ec7b1961d71fc76d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:2b:b1:36:86:1a:6e:82:de:d0:ca:e2:42:
8a:e0:1c:e4:c4:b7:d8:26:f5:95:8c:63:6f:a8:2e:
e8:25:45:af:53:f6:ce:d4:58:00:41:3a:b3:c8:7a:
08:13:7d:21:18:c5:37:5e:37:0d:a8:a2:10:0e:cb:
61:e9:e9:b5:89:8f:bb:f6:0d:b5:20:d1:7d:a3:dc:
90:80:1d:46:d3:88:a9:41:c3:10:28:ab:7a:b8:42:
ef:a9:8e:4d:b5:6f:50:93:90:20:05:5d:0f:bf:40:
4d:53:85:29:0c:b4:cb:4e:82:d2:e6:1e:86:93:17:
18:d4:34:38:32:cf:22:82:f2:7c:fe:9d:d3:a1:e5:
d3:b8:32:7c:02:ff:59:79:74:4d:4d:69:d7:59:a5:
cd:3f:0a:6c:59:b2:86:60:fd:64:34:13:c7:fc:2d:
fb:1b:87:f8:11:58:8c:c2:c7:8c:77:57:50:86:b3:
31:b3:98:56:7c:55:2b:dd:df:f7:dc:7e:b5:2d:bb:
80:9c:eb:1c:05:1e:dc:a4:46:44:26:82:c4:3a:5e:
08:5e:f2:8f:30:e3:d8:4e:5f:1e:3a:fc:50:c3:6c:
09:88:44:c2:0d:cb:5b:60:cc:fc:02:2d:82:58:7c:
48:85:ac:4d:b6:8a:6d:31:6e:63:d9:8c:f3:6c:2d:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:66:4F:52:70:DF:4E:53:F6:8A:B8:EC:7B:19:61:D7:1F:C7:6D:23
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:4c:f5:d6:f8:02:ef:a3:b8:14:61:82:ff:f0:0c:0a:cd:cf:
f4:67:4c:f9:4d:52:eb:e7:2b:12:c8:81:16:59:64:e8:eb:dc:
94:92:2c:9e:5d:3b:16:3c:88:5a:a4:59:0a:d7:d6:86:bc:37:
25:67:2b:13:06:c4:b2:fd:5c:b8:07:38:f4:10:ee:92:9d:93:
b1:f6:73:e4:5b:7f:1b:a6:2a:5b:89:d9:3b:17:6c:b9:6d:f5:
a0:4e:29:ec:cd:96:2d:03:14:c8:52:58:52:a3:53:70:60:98:
8b:25:ae:bd:3c:0c:0f:5d:0a:09:41:77:89:7f:69:57:0c:de:
f5:82:7f:7e:eb:3f:e3:15:6f:4f:32:7b:67:e8:dd:c2:94:9b:
77:f0:6a:b0:41:38:44:72:85:40:f2:3d:40:62:fd:5e:04:4a:
f9:57:a6:79:5d:d4:1b:ee:b6:56:c3:3e:57:12:02:37:d8:7e:
97:b5:5a:f4:a0:ef:00:89:ba:54:61:8c:7a:43:6a:3d:f4:8a:
cb:c7:7f:2f:0d:35:b9:f1:5d:6c:29:1d:59:9b:97:e3:51:a0:
f9:29:76:8f:86:01:c8:3a:58:17:cc:c4:e8:dc:b8:d7:34:15:
ab:3b:11:c0:57:46:1e:75:16:bb:b1:dc:81:bd:48:0a:03:61:
71:a3:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:45:11 2025 by rpki-client