Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
File: mQxLs441zXAyDreRUgxsrTSksnE.mft (raw, json)
Hash identifier: 857cjlAyG8tVQt11qE+md6PuewV/rUYeoZlSpKiyToo=
Subject key identifier: EA:E9:19:FA:E9:06:82:FA:B3:60:41:C8:F8:2D:AE:1A:FF:FA:63:CB
Authority key identifier: 99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
Certificate issuer: /CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Certificate serial: 019A7293984152F0ED3AEF2B30463A9DF3ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
Manifest number: 13B3
Signing time: Tue 11 Nov 2025 11:01:06 +0000
Manifest this update: Tue 11 Nov 2025 11:01:06 +0000
Manifest next update: Wed 12 Nov 2025 11:01:06 +0000
Files and hashes: 1: JtxbWq9ormth5LcKwN5vG4Q3apo.roa (hash: lQXeYw4zv4cIzlRUFSI2nS9Q4llqbkuImnCVCQNKPmM=)
2: mQxLs441zXAyDreRUgxsrTSksnE.crl (hash: bydMcbuZNUXbFPUziqKzIKeupTnoZOAPWcrT7gu2Uas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:98:41:52:f0:ed:3a:ef:2b:30:46:3a:9d:f3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990c4bb38e35cd70320eb791520c6cad34a4b271
Validity
Not Before: Nov 11 11:01:06 2025 GMT
Not After : Nov 12 11:01:06 2025 GMT
Subject: CN=eae919fae90682fab36041c8f82dae1afffa63cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cf:6b:a7:db:5b:1d:c8:12:bc:fc:ff:59:bc:
d2:1b:f1:da:97:4d:a1:df:5c:80:6d:d2:01:2f:f0:
96:ee:15:c9:fd:85:04:ab:a7:2a:01:c0:4f:c6:c7:
03:9f:b5:2f:5a:5e:0a:2f:37:77:88:d0:7d:d2:ae:
e9:99:a4:11:46:29:15:5d:7d:8c:b5:e0:78:51:45:
48:24:e4:86:54:95:b4:11:50:42:5c:d4:56:96:37:
9d:1b:4e:83:71:ed:d1:37:87:0d:4e:a6:61:0e:a7:
fa:42:3b:88:0a:77:c6:87:ad:5d:2b:53:47:24:de:
bb:a8:1f:ae:28:99:fa:d9:9a:3a:6f:5d:99:0e:4b:
dd:d8:91:5c:ea:ef:aa:20:b6:c7:14:f9:2b:4a:07:
cf:cf:89:38:1a:06:34:9f:9c:84:ae:19:4c:95:40:
a8:36:12:0d:e2:a2:45:93:32:13:8b:a6:20:f2:b1:
4d:59:58:46:bf:f5:d0:82:8a:3f:0c:5e:2b:8e:83:
06:f3:7a:39:2d:2d:98:43:7e:9e:d8:b6:ac:74:e1:
0f:17:f3:6d:66:77:70:03:62:51:cd:b4:e7:05:6f:
a7:cd:68:7f:71:be:b7:e8:64:78:74:7f:b0:2e:e7:
44:69:61:a0:b9:36:70:b2:96:ca:38:01:de:2b:3b:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E9:19:FA:E9:06:82:FA:B3:60:41:C8:F8:2D:AE:1A:FF:FA:63:CB
X509v3 Authority Key Identifier:
keyid:99:0C:4B:B3:8E:35:CD:70:32:0E:B7:91:52:0C:6C:AD:34:A4:B2:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQxLs441zXAyDreRUgxsrTSksnE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/mQxLs441zXAyDreRUgxsrTSksnE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:bf:1a:90:6e:10:0a:16:f3:e2:b1:eb:30:ea:4a:45:39:40:
79:dc:25:65:a1:5c:70:0f:62:51:26:42:88:01:9e:4d:b8:bb:
31:0f:3b:c1:7c:5f:ee:c2:d4:76:c9:1e:84:a0:fb:9e:44:fb:
63:67:70:cc:f7:83:94:a3:12:2f:04:44:78:8c:2a:e5:56:f2:
5a:e9:55:40:f7:77:30:bf:6c:ab:b3:3f:5c:26:17:07:f0:69:
0c:a5:51:cb:31:fe:df:b3:41:d5:26:00:33:d3:e4:17:04:b8:
50:72:36:34:45:cf:09:f4:9b:0c:38:b5:ef:b3:d0:bb:6e:90:
4f:4a:e0:5c:f3:3d:da:04:51:42:2d:36:a9:f5:a5:ec:a2:3e:
91:19:de:59:d2:45:d9:18:19:00:36:73:97:ba:ef:67:83:c7:
60:0a:ab:88:e8:22:cb:0a:30:ac:13:01:7c:c0:1b:27:b5:bf:
3e:42:1d:a1:47:49:08:4b:a0:a7:c3:0f:0c:e9:26:25:f3:e5:
cb:c9:47:0e:ee:ec:9e:03:b1:82:9a:e0:1c:6f:68:8d:4d:99:
bd:6c:bf:30:49:81:e0:b0:b9:33:3e:93:c0:65:3b:46:7a:a9:
e7:94:a4:93:79:90:60:b2:4d:1f:5f:57:22:9b:66:a7:66:d0:
58:c3:7c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:20 2025 by rpki-client