Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: l3hSW2KddffcEbu9xwp6BPnkHLSJR0xYaQrt7zF/kq4=
Subject key identifier: 62:AD:4E:11:DD:7B:46:5B:4F:5F:5E:1C:FA:D6:BB:D7:81:87:3C:87
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 019A71B8417CBAEFE2471EE17529B6A0F69E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: SJ69lbxJzceWFTuTvizz5hgVTgOCPbcALc2X2DaeTeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:41:7c:ba:ef:e2:47:1e:e1:75:29:b6:a0:f6:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=62ad4e11dd7b465b4f5f5e1cfad6bbd781873c87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:58:a7:c6:e0:a2:64:be:f3:9b:78:15:cd:
6f:51:3b:34:e5:23:9b:67:01:06:2a:d1:49:ef:52:
2e:dc:91:e7:f4:86:eb:53:a2:76:e0:86:bd:11:c5:
8d:ae:ea:ff:15:8f:7e:3d:e7:bd:e3:55:12:f6:bf:
31:26:11:5f:74:34:8a:f9:04:3d:b8:7d:cb:f4:86:
3e:d5:fc:6e:37:0e:52:0a:c7:4e:06:cb:d3:6f:82:
9b:ee:c4:cb:fa:f2:ba:aa:13:00:e2:9a:e5:32:78:
76:85:d5:49:71:4d:4e:41:be:fc:71:51:02:d1:a6:
8d:17:63:4d:ae:78:b4:d8:da:f3:fc:d9:43:be:40:
9c:e9:d0:fa:dd:df:1b:aa:2f:e8:3c:64:00:04:e3:
2b:64:84:7e:c1:2d:55:90:9b:a4:9a:2b:9c:4b:ae:
86:46:09:15:87:5f:89:88:26:7f:85:68:56:93:96:
f5:af:97:fc:7b:21:ad:23:4e:33:a6:a7:d8:1c:08:
19:a8:10:36:0e:45:0e:da:c4:0c:bc:0c:36:17:07:
fb:74:e3:d2:a1:a2:90:be:16:4c:fa:94:e9:94:8a:
89:60:91:a9:0b:fb:cb:29:fd:74:13:45:83:d2:20:
2a:fe:be:67:7a:64:7a:c9:42:bb:ef:e0:a8:ed:82:
a1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AD:4E:11:DD:7B:46:5B:4F:5F:5E:1C:FA:D6:BB:D7:81:87:3C:87
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c4:c4:bf:e8:99:e7:97:b2:d7:d8:e7:35:38:28:2d:30:47:
1e:6c:2b:bd:c5:fb:34:16:f8:4e:12:89:9d:6f:f7:60:22:d2:
6a:45:61:d1:6f:32:56:f3:72:f6:54:7f:18:91:69:34:e9:c2:
72:32:67:4c:e1:01:8a:63:5c:78:e1:e0:5d:51:99:2d:8a:46:
30:54:9b:2c:a4:41:db:6b:4e:b7:e9:d6:08:3f:f0:b5:a3:9c:
ba:f8:78:81:56:bf:68:a8:e4:24:83:83:8a:4c:88:c4:63:1e:
42:a9:82:7a:40:9a:62:48:62:ce:45:fb:da:0c:7f:5c:2e:91:
9a:72:2a:54:18:4a:85:d2:0a:d3:e2:02:65:72:c3:ea:b3:f7:
94:56:c8:9c:e0:29:ce:11:b3:f4:fb:e8:30:85:15:d5:6d:95:
9d:3c:56:4d:34:29:35:54:45:7b:1d:2c:66:4f:5a:4b:d9:24:
df:33:46:34:dd:3d:78:ab:78:3c:13:0e:71:41:15:d4:b0:a9:
90:77:ab:88:a5:99:c4:7c:2e:d5:48:ab:55:56:32:2e:7d:74:
27:0f:3c:f0:d4:e1:59:06:68:00:81:9d:19:8b:5e:29:d1:ab:
7c:60:0e:0c:d9:d5:c2:d1:83:ad:ec:b3:f1:9e:15:fe:73:c3:
2a:21:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:51 2025 by rpki-client