Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
File: mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft (raw, json)
Hash identifier: 8EVA1vVr5juaE/niaAD4rjZzMoYL/U0jve60H/Y9jqM=
Subject key identifier: DE:D9:64:48:5E:8A:9F:24:FE:95:66:54:36:00:EB:D3:68:70:FA:24
Authority key identifier: 99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
Certificate issuer: /CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Certificate serial: 019A71B8D1CD0B3853618FB5E3BFF499C4D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
Manifest number: 08F3
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl (hash: rraJHpAY8d8HTp0596OFZ6THVlXVFAN8dr1GNTnbOU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d1:cd:0b:38:53:61:8f:b5:e3:bf:f4:99:c4:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ca98a12bb6d8dab82f374cf0a278a5a61b78e7
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=ded964485e8a9f24fe9566543600ebd36870fa24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:df:04:3c:b4:aa:a5:c5:b8:1d:7d:5e:d1:
6d:a6:ea:9b:49:8f:4b:e1:6b:e7:c6:ae:fb:68:e1:
c1:4f:08:8f:8c:5e:06:4e:ea:0d:23:3d:e0:f9:0a:
e0:53:a7:4a:bb:b3:fb:3c:d7:13:c2:04:5b:79:fd:
cc:a4:13:89:a1:4f:5e:0b:4b:37:17:0c:6b:80:85:
79:65:84:45:7b:70:8c:16:ad:e4:21:19:9b:c0:2c:
77:ca:b2:db:05:b7:b8:94:47:81:c3:49:fd:31:f8:
ae:af:f4:be:82:df:47:54:d9:6a:1d:2c:9a:cc:65:
a8:d0:5f:95:86:2a:96:0a:0c:8f:55:9b:f6:7b:b7:
35:a3:ec:93:c6:7c:fc:35:6d:7d:4b:b3:c7:45:bc:
e0:37:11:88:18:62:69:74:2e:c4:17:9a:e6:f6:49:
e5:02:89:f5:5d:8f:74:f7:24:a0:25:7a:08:38:fa:
03:60:9b:14:3b:3e:5d:17:4a:67:bd:6a:10:8b:79:
c5:48:13:5b:e6:d1:a6:a7:b4:9b:b4:c7:73:2b:7e:
2f:50:59:db:01:75:38:e6:bf:1d:07:b1:f5:81:7a:
5a:4a:fc:92:39:ed:19:53:97:d7:f6:5f:05:f9:d2:
2a:a3:ff:fa:b1:84:7c:c2:f3:99:6b:45:d9:3d:f5:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D9:64:48:5E:8A:9F:24:FE:95:66:54:36:00:EB:D3:68:70:FA:24
X509v3 Authority Key Identifier:
keyid:99:CA:98:A1:2B:B6:D8:DA:B8:2F:37:4C:F0:A2:78:A5:A6:1B:78:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mcqYoSu22Nq4LzdM8KJ4paYbeOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c4e75e-fd51-40f6-bc31-28c3c1e2a370/1/mcqYoSu22Nq4LzdM8KJ4paYbeOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8f:20:3d:3f:93:41:bb:06:4a:49:23:dd:e6:c4:53:6a:80:
9e:b6:6e:1b:d0:29:b5:5e:8a:14:05:ec:7f:31:6d:6d:66:9e:
10:e9:10:b2:64:ec:53:ca:03:ba:0e:42:a7:99:2c:ee:cf:c9:
d6:65:c5:5a:ad:04:5a:e6:ab:c1:6b:d3:6a:f3:d9:fb:ab:ba:
3d:ca:fe:af:e2:22:f2:93:4b:49:ed:25:9e:bc:d1:7d:13:9e:
6d:31:e5:f9:ca:cd:29:ed:a3:89:04:5f:aa:fb:9f:4b:3c:a3:
15:40:f9:de:4b:43:6b:22:27:8c:de:2f:16:18:be:0c:aa:d9:
9b:29:37:f7:2d:25:72:1e:d4:6e:e1:a9:ce:10:bc:6d:23:eb:
cd:8a:f4:46:43:75:89:93:e8:3f:48:8f:fe:2c:38:98:07:a0:
d6:f8:82:39:4c:0e:7e:05:47:97:c7:be:0a:80:a0:ce:fa:fd:
33:ab:58:63:21:53:b7:9a:6e:2d:af:3b:29:4b:ec:06:72:39:
df:44:d6:39:71:6e:1f:14:8d:93:50:19:02:20:db:ed:94:1f:
ed:e6:28:d5:02:ec:a9:c3:15:d6:fe:66:76:ee:da:67:97:8f:
6f:75:28:d9:3e:04:4b:ac:d5:10:30:c0:e4:71:f4:b0:21:06:
02:88:6b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:04 2025 by rpki-client