Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: cJVwoKvPDRYCboYPypu8YptupmGmE0CiVfEVkD3Mt7k=
Subject key identifier: FC:F1:C6:B7:7D:19:A2:FC:0F:7A:1B:62:D3:C5:36:D1:16:D5:6C:FC
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019A7112BA1DDC61F4DE948207CA4FCE6667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 120C
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: Dqpc/tnQCadu7vZivnWaTQIfRJyABHg5g4S4QpIMfc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:ba:1d:dc:61:f4:de:94:82:07:ca:4f:ce:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=fcf1c6b77d19a2fc0f7a1b62d3c536d116d56cfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:11:fd:7f:0b:23:fd:31:63:3f:c7:e2:d8:
64:99:a0:86:27:d1:fe:8b:bd:d0:56:0d:07:4f:96:
1e:13:93:00:18:d6:d7:b1:3d:df:fa:42:f6:d7:13:
61:a8:66:ae:15:f2:94:cd:3d:c0:b6:4b:f6:9b:dd:
c8:57:11:88:f9:fe:81:f3:da:c2:4e:fc:f5:15:17:
b2:8f:65:4c:1f:74:56:63:36:b4:c8:c2:31:43:ac:
1d:65:5e:05:d5:cf:27:dc:7e:a9:42:3f:78:14:4b:
76:7f:53:79:d1:a9:4e:74:dc:21:55:8a:c1:d8:cf:
90:ea:1b:4e:38:38:73:52:f5:72:57:59:7b:65:ee:
c6:85:e9:d2:98:8c:87:3d:82:09:bd:61:e7:31:7c:
61:3b:c6:06:50:df:62:f2:ad:79:3b:2c:cf:31:08:
6f:7f:5e:71:64:9d:ee:f1:4d:62:2f:d2:e2:78:c9:
b7:24:2e:c9:c0:94:7e:2e:b1:df:8e:1b:33:96:a5:
b1:76:28:d3:50:73:c3:a9:04:a2:cf:fe:37:d6:73:
52:eb:f4:0d:43:17:f9:c9:d7:c1:6d:15:ea:74:76:
0a:54:54:08:34:df:c0:64:85:6b:71:03:34:8a:09:
0a:ec:8d:f7:e3:65:a4:ff:de:ee:9a:c3:22:f5:7c:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:C6:B7:7D:19:A2:FC:0F:7A:1B:62:D3:C5:36:D1:16:D5:6C:FC
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:b8:7b:d9:2b:12:2c:56:82:3d:4f:63:2f:9f:5a:11:fe:ca:
c0:77:d5:e9:38:0e:45:56:af:27:c5:23:21:8d:f5:39:b2:ff:
87:b7:d2:5d:f9:ee:e2:c7:2b:b3:c6:fe:7a:ef:ac:54:25:fc:
44:37:53:b5:09:74:f0:7f:9d:27:57:9b:c3:5d:c9:fc:65:55:
78:5b:44:5c:5d:78:e1:7d:32:a5:47:a2:c5:c0:04:36:23:85:
31:0d:8b:43:6a:2d:25:25:f8:03:df:28:c4:fb:2d:ee:54:d4:
fd:6d:1c:dd:b7:55:1f:f8:ef:85:3e:78:b1:51:30:58:bf:2e:
59:6b:09:1e:5d:f1:0a:d3:d8:51:2e:d6:4a:a8:43:3b:9f:a7:
44:00:6e:45:1c:6e:8d:07:e2:4d:9c:9a:4d:6c:2b:a3:52:c5:
d0:be:79:e2:a2:07:87:65:96:86:35:fc:7a:e8:7a:a1:c6:d7:
a1:fd:de:78:77:3e:33:f9:63:32:18:e3:9a:36:d6:c2:eb:db:
66:1e:b4:24:f4:6f:30:69:87:a9:7d:92:d1:a4:8e:9c:c8:e2:
a8:30:df:a4:34:ee:92:95:24:a2:9a:d5:c7:e3:23:41:6a:61:
d8:da:52:75:91:e7:4a:b2:a0:fb:d9:a4:3f:b2:f6:b4:e8:e8:
48:cf:b9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:23 2025 by rpki-client