Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
File: 9qiFSCQ7bikKBtKaKzcQS3et5vw.mft (raw, json)
Hash identifier: 4aQrhRLkzM0Bjvtymxeo2MEJ/mzR9A2xsp1XWU2hb+A=
Subject key identifier: 82:B7:21:10:14:DB:E1:CC:17:4E:31:02:50:F2:7D:14:71:2F:7F:3A
Authority key identifier: F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
Certificate issuer: /CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Certificate serial: 019A71B7FA3F5C7A900A74EB3AE26F22A6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
Manifest number: 0242
Signing time: Tue 11 Nov 2025 07:01:13 +0000
Manifest this update: Tue 11 Nov 2025 07:01:13 +0000
Manifest next update: Wed 12 Nov 2025 07:01:13 +0000
Files and hashes: 1: 9qiFSCQ7bikKBtKaKzcQS3et5vw.crl (hash: h/bO87A/5AEhT0oOgRcvhL1eykF75/sD5JJnZFaMi4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fa:3f:5c:7a:90:0a:74:eb:3a:e2:6f:22:a6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6a88548243b6e290a06d29a2b37104b77ade6fc
Validity
Not Before: Nov 11 07:01:13 2025 GMT
Not After : Nov 12 07:01:13 2025 GMT
Subject: CN=82b7211014dbe1cc174e310250f27d14712f7f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:54:71:ff:c1:e1:99:9d:0e:27:48:eb:c8:69:
dc:fd:13:69:8c:5c:90:d8:60:75:e3:c8:03:ae:9b:
66:ab:83:a2:a1:fc:de:83:d9:12:09:52:23:e9:94:
ac:6c:d2:1c:73:06:0e:f9:dc:69:cb:94:fd:69:a7:
a9:c4:59:07:d8:4d:97:7c:32:fb:10:2b:c8:4a:98:
56:09:1d:8b:77:88:a4:74:7d:32:aa:9d:c1:36:04:
96:26:a8:50:29:f7:4b:fb:db:31:3c:39:5c:a4:b2:
44:cb:b1:69:64:bd:58:e5:3f:fa:18:be:71:a1:74:
6e:71:69:ca:a1:57:62:5e:28:8c:66:96:4d:db:27:
ec:fc:82:1f:ec:11:b7:f0:b2:cf:d3:85:f5:2f:ad:
6c:d1:94:a5:49:18:c6:f6:19:6c:f2:1b:8e:76:ae:
b4:9b:c1:eb:84:83:73:29:6a:ea:c3:dc:45:62:20:
b2:0c:36:fa:92:18:32:ed:bf:56:e2:aa:d7:b6:40:
e3:f6:2c:ad:d9:8a:c6:fd:e0:30:88:02:2c:8a:a1:
b1:b2:0b:9e:60:46:3c:b9:e3:c1:fe:42:50:81:06:
94:ad:bd:2f:6f:5e:44:b7:27:da:0c:18:ae:21:26:
86:bf:0a:1e:85:13:dc:c4:34:6f:34:06:5f:22:46:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B7:21:10:14:DB:E1:CC:17:4E:31:02:50:F2:7D:14:71:2F:7F:3A
X509v3 Authority Key Identifier:
keyid:F6:A8:85:48:24:3B:6E:29:0A:06:D2:9A:2B:37:10:4B:77:AD:E6:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9qiFSCQ7bikKBtKaKzcQS3et5vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a84dba-d7a1-4209-a20d-94ad487f2e01/1/9qiFSCQ7bikKBtKaKzcQS3et5vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:40:f1:36:89:ba:08:24:47:0e:c8:3c:d3:78:7f:09:6d:fb:
27:40:bc:30:7f:1e:3c:ee:a4:06:26:e9:18:35:8d:74:b1:1f:
3c:8a:da:0c:48:b4:4f:6a:49:bf:98:c8:84:f3:4f:67:ad:68:
82:99:50:51:14:68:7e:70:a9:46:d1:ab:ba:5c:11:e8:df:cc:
44:6a:07:6e:21:5f:ca:48:ab:25:fa:1d:7b:48:f6:17:28:11:
1c:f1:4d:c2:1e:c4:71:66:0a:ae:4a:36:92:40:64:f7:99:d4:
9b:f4:75:52:0d:9a:57:5d:20:b0:55:6c:2c:51:ba:d4:f1:f2:
f5:60:e7:2d:2f:c4:8e:fe:bc:ef:e1:60:67:d3:c8:8f:e9:a4:
c8:7b:dd:86:e3:f8:69:8d:7c:01:12:20:3c:14:f4:01:9c:7d:
7f:1d:ea:bf:67:74:5d:e2:67:6f:6b:62:fe:5b:5c:40:54:fb:
32:57:1c:3b:af:0f:46:36:b6:a8:1b:09:e9:e4:f3:a0:fc:72:
19:fd:04:58:e1:50:38:78:62:2b:1d:34:71:b8:d0:fa:a4:12:
d5:ae:81:be:aa:52:7f:f1:5d:df:59:18:27:4b:88:b8:c2:ac:
a4:c1:13:ab:fb:f7:18:8e:fa:80:c5:4a:fd:4b:bc:95:4b:57:
c4:64:20:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:48 2025 by rpki-client