Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier: b0mGWDVGpyrxfeJrMpilDh7ohSGwsjjU0wdr7qyKIB4=
Subject key identifier: DA:F7:E5:77:C7:75:77:25:8E:9A:29:5A:FF:F4:1C:C5:87:4C:F0:A8
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial: 019A7225F2999F278AE422E3690CF8355346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number: 13AF
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: 414dH5a/YFx+rjaUhGwC5nS3LMurRllGZDvI95SfJJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f2:99:9f:27:8a:e4:22:e3:69:0c:f8:35:53:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=daf7e577c77577258e9a295afff41cc5874cf0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:a2:5e:ce:0d:ec:58:08:bd:9c:1c:a2:3a:
db:2a:ed:86:7a:27:3c:6e:0e:dd:da:6e:56:ab:7a:
55:d8:6b:fb:50:96:d5:03:97:e5:eb:b0:b8:98:0c:
f2:ec:72:04:4d:cb:63:98:e5:b6:12:9c:01:e4:fa:
bc:a8:80:b9:e7:f3:38:07:f8:2f:12:1f:d9:dc:ce:
69:84:b8:5c:31:02:9a:a7:0b:fb:1e:28:36:c7:43:
da:ae:b4:1c:b5:c2:42:64:ee:56:22:dd:98:c6:ac:
bd:80:23:1d:e1:50:52:ff:bc:12:f0:d8:70:d2:b8:
f9:e0:e2:ac:e9:13:4d:27:1c:4e:b0:d2:b2:6c:4a:
1a:22:28:53:4e:2e:9c:c5:0e:28:8e:87:2a:d8:fc:
78:f2:72:ad:e4:78:7a:fb:bd:a3:fe:dd:c3:80:61:
73:ad:26:bf:28:73:d9:3a:ed:bc:41:c8:01:20:51:
9a:9d:ac:f8:41:d6:3a:92:43:d2:28:39:8a:09:28:
f7:b9:ba:ab:97:a4:5a:cd:36:e6:d9:c6:4f:98:f8:
e5:e2:62:c7:d3:04:ff:38:76:01:cd:ff:1b:0b:3b:
df:53:60:5f:81:af:b1:2c:f2:ae:c1:e3:c1:00:44:
a1:fa:07:6b:54:4a:68:31:c2:ea:e1:ef:95:e4:09:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F7:E5:77:C7:75:77:25:8E:9A:29:5A:FF:F4:1C:C5:87:4C:F0:A8
X509v3 Authority Key Identifier:
keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:5a:a7:10:6b:6c:3e:8b:e7:14:d8:d9:8e:ce:3b:44:4b:
15:55:50:ac:db:7b:33:c5:63:04:c0:da:25:2d:3c:b2:1a:51:
b0:0f:21:5e:5b:f7:c3:6d:91:b2:9a:84:bb:10:ab:89:a0:b0:
06:47:25:fc:3a:e6:aa:53:02:be:03:25:1d:a3:f3:0a:cf:d9:
27:0f:3b:0e:e3:af:1c:1d:8e:1e:e3:2f:d5:10:06:69:6e:60:
93:ce:e3:90:f1:53:7b:f9:64:bf:ab:df:b4:b8:da:8c:5e:30:
8d:9b:ac:bf:e9:c4:e7:a0:64:a2:c9:60:d9:e7:e7:99:bd:02:
c4:1d:a9:cd:4f:a7:38:fc:f4:e6:2d:0b:e8:87:6f:4d:8c:9d:
01:dd:55:36:cf:4b:0e:fa:f3:18:a0:7f:4c:4b:76:68:5b:b6:
e1:ad:ba:51:75:a3:5d:e5:71:ef:40:51:f7:15:f3:cc:f5:10:
f8:ee:77:ef:a8:be:06:90:97:32:25:f6:e6:c5:cc:4f:d9:95:
4c:38:91:a2:f3:a7:7e:b2:82:66:bc:db:86:16:ae:b6:75:9a:
93:21:c4:88:c9:d8:e4:54:7d:c9:4b:d0:c4:77:7b:30:66:b0:
97:46:ce:22:e7:ae:60:2c:9f:12:68:39:44:80:7f:66:2e:a6:
4d:77:58:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:21:32 2025 by rpki-client