Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: qJSzvmJ2KNCjDwG3nOwonixSX32D23BYFIrN4psSCFc=
Subject key identifier: F6:8F:62:79:06:A6:48:CB:56:0D:4B:A1:4E:5C:90:BA:90:30:C4:03
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 019A71B8526B42537961061DD6B30072EF43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:01:36 +0000
Manifest this update: Tue 11 Nov 2025 07:01:36 +0000
Manifest next update: Wed 12 Nov 2025 07:01:36 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: BR20CYnuQxjEWIlrFZqodTARxOAY9Chb/ve6Nq62oPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:52:6b:42:53:79:61:06:1d:d6:b3:00:72:ef:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Nov 11 07:01:36 2025 GMT
Not After : Nov 12 07:01:36 2025 GMT
Subject: CN=f68f627906a648cb560d4ba14e5c90ba9030c403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:34:c1:b0:41:64:b0:20:c2:cf:18:d3:a2:72:
16:93:38:9a:c9:a0:b2:1c:8c:8a:22:fe:21:a1:9f:
07:6e:3c:bf:7a:77:df:25:e9:46:2d:04:37:c1:fe:
ba:08:41:dc:71:a7:dc:e4:bc:eb:42:5f:94:b0:62:
f4:29:40:b4:70:7e:e6:cc:50:9b:43:fb:dd:cc:e3:
c7:4a:cb:91:b1:ed:bf:70:9f:b0:35:d7:50:08:70:
e1:fb:19:68:c8:d1:1a:8a:6b:71:87:22:c9:0a:c6:
dc:0c:6c:91:7e:bf:dc:a0:62:47:2c:5e:3c:3e:45:
7f:3d:85:05:6d:a5:69:27:d0:e2:2f:87:28:67:4b:
17:37:b4:e5:02:4b:47:1e:f2:c7:88:e5:50:d6:8a:
e1:41:56:89:18:e0:af:8a:eb:69:c1:f5:b4:a1:cd:
ea:0f:71:00:d6:94:83:f8:b5:cd:ce:d9:82:18:21:
08:d9:f7:36:5f:61:63:47:ef:4b:99:d3:b3:39:aa:
e3:e6:13:ad:12:3b:68:92:54:51:77:0f:df:28:85:
92:d0:5d:ae:d7:a3:77:da:34:30:23:7b:51:1a:ae:
e2:5b:c3:0c:5b:52:da:3d:5c:93:06:43:6d:89:42:
06:ae:1b:60:37:e3:63:93:e3:55:2d:18:5a:25:40:
4c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:62:79:06:A6:48:CB:56:0D:4B:A1:4E:5C:90:BA:90:30:C4:03
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:da:f7:11:35:f0:e5:47:78:00:9c:3e:1d:4e:1a:b9:51:31:
a1:4a:8a:84:3c:54:cf:48:03:df:c7:73:cc:36:45:18:a6:b1:
fc:c1:f4:c0:17:38:e2:8c:0b:47:90:92:01:17:32:ab:88:d5:
52:05:e1:ac:f3:5c:3e:58:e8:e6:a0:45:87:07:b8:fa:f8:64:
44:a9:2f:e3:0b:4c:82:77:4b:c9:61:d6:6e:02:b6:72:89:9f:
03:fa:ab:be:e6:c8:c2:b9:cf:af:9f:f0:2c:62:8c:54:32:bd:
9c:45:94:cd:05:15:b3:2f:19:f1:f8:49:01:4f:33:7c:d0:42:
1e:42:3a:0d:a2:0a:a9:68:15:bd:f7:77:bd:03:20:3f:6d:45:
e8:a7:53:5b:bc:f7:ff:04:35:37:2f:23:81:25:a4:93:ac:ca:
7a:84:a5:10:ac:bd:ad:2c:1f:41:25:8c:71:79:53:8f:dc:e8:
ef:ea:12:7d:f3:f0:92:25:3c:01:88:fa:ba:45:cc:54:fa:9c:
6f:d1:10:4b:94:5e:b5:0b:38:d1:e9:52:38:4d:9a:09:e9:d6:
04:86:29:0a:76:71:9a:c1:99:3b:3b:15:82:1a:88:78:78:8c:
ba:f9:e2:6a:1b:6f:f5:f1:9f:fa:04:24:89:4c:34:96:57:1d:
29:75:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:37 2025 by rpki-client