Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
File: lQPIUJD5zC4inTj96rrmJlCL3rg.mft (raw, json)
Hash identifier: SovhImBTNWZiZ5PJvixTEHDtE38w47wSHn1RwtCJRQw=
Subject key identifier: 7F:C0:BA:7B:E9:64:DB:6F:23:AA:79:C7:95:EC:94:BE:58:4A:55:81
Authority key identifier: 95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
Certificate issuer: /CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Certificate serial: 019A4E864F18B36252E6CB1F798F1182E0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
Manifest number: 042E
Signing time: Tue 04 Nov 2025 11:00:16 +0000
Manifest this update: Tue 04 Nov 2025 11:00:16 +0000
Manifest next update: Wed 05 Nov 2025 11:00:16 +0000
Files and hashes: 1: lQPIUJD5zC4inTj96rrmJlCL3rg.crl (hash: EZUmgPjNYrEjW9aJiUVZ3KQlRovTQo0geyzGAlv8nIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:4f:18:b3:62:52:e6:cb:1f:79:8f:11:82:e0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9503c85090f9cc2e229d38fdeabae626508bdeb8
Validity
Not Before: Nov 4 11:00:16 2025 GMT
Not After : Nov 5 11:00:16 2025 GMT
Subject: CN=7fc0ba7be964db6f23aa79c795ec94be584a5581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8e:f8:3e:af:c5:a3:11:03:dd:f8:3f:05:50:
5c:5a:ee:1a:91:cb:ed:97:15:bb:cb:8c:0c:f6:4f:
10:9c:79:89:4c:39:f9:41:95:d0:81:73:a4:82:b2:
50:b3:1f:21:28:46:6f:4f:33:ca:25:11:37:85:76:
9c:56:a3:41:3e:36:1b:67:48:99:8a:d5:8b:3d:87:
30:8b:38:36:2f:c3:c5:ca:ca:77:85:c8:af:b7:40:
a3:be:63:b1:1b:e7:b1:68:da:4c:c0:fd:f7:b1:a6:
7f:2b:f9:5d:16:17:19:ed:b2:8d:28:a8:7b:92:87:
72:24:32:5d:2e:86:b8:26:bd:c9:26:d9:1c:f2:a1:
db:63:b3:46:99:f8:bd:14:78:b7:1f:66:fc:a8:a9:
0f:29:11:4c:92:26:8f:f9:ae:37:4e:a4:8b:ad:2f:
11:e2:f3:94:15:40:d1:69:ee:f0:d8:55:06:bf:43:
57:d6:f7:c8:a5:27:ec:38:8d:07:99:a0:e3:b5:c8:
03:79:81:0f:f9:96:a0:a7:05:7a:b6:e0:6a:47:89:
4d:da:cc:fe:5f:bb:7f:94:b1:e2:9f:a3:98:d4:fd:
2e:53:59:94:af:fe:ad:24:1f:ea:b4:32:75:43:63:
e9:e6:8c:73:cf:e4:0d:29:ae:2c:a7:e5:ab:71:0d:
aa:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C0:BA:7B:E9:64:DB:6F:23:AA:79:C7:95:EC:94:BE:58:4A:55:81
X509v3 Authority Key Identifier:
keyid:95:03:C8:50:90:F9:CC:2E:22:9D:38:FD:EA:BA:E6:26:50:8B:DE:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQPIUJD5zC4inTj96rrmJlCL3rg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/39294c-ebd1-4ef4-915e-f0dd879ae53a/1/lQPIUJD5zC4inTj96rrmJlCL3rg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:44:81:2c:e7:29:80:5c:ab:03:24:bc:cf:86:c7:73:be:1d:
20:94:c3:2f:ac:fb:75:b9:c9:60:00:bc:e4:26:35:4a:ad:dc:
33:67:c6:25:96:ae:91:80:88:ed:0a:be:1b:16:1c:fa:ac:be:
af:64:41:9d:af:c8:71:34:ce:65:05:f8:de:23:72:60:f8:59:
f5:87:4e:82:45:7d:a8:0b:cb:76:84:d1:a0:b1:47:f6:0b:d1:
dd:0c:ff:da:c4:2a:2e:6a:5e:68:94:c9:5a:f4:aa:4b:e4:84:
27:56:9e:2c:06:21:24:07:5b:70:9b:48:d7:44:55:71:b8:55:
83:77:3a:e8:91:9f:fd:aa:f4:c7:09:d0:6b:2d:38:81:92:27:
39:05:99:96:74:ed:08:53:92:ed:35:7b:55:45:5c:9a:6b:93:
c8:ea:b8:3b:b9:15:4a:3e:11:68:ce:9f:5b:fb:8a:e1:2e:7c:
0c:df:3a:c6:5e:a0:62:2f:3a:4f:58:bf:37:b9:d1:95:dd:bf:
bc:30:23:c2:5f:de:41:3a:ee:7f:9d:ce:b5:ef:33:b4:32:63:
47:50:02:96:e0:28:4e:85:73:be:48:28:65:d1:46:2e:0c:84:
5e:64:bc:76:86:7a:cb:c0:b1:1e:0a:7b:70:81:ea:ad:20:ea:
dc:8c:96:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:54 2025 by rpki-client