Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: 3oRN4Xtnr/RIU/MLBF+dX60e0BN4lu7n1bDGbrbRKO0=
Subject key identifier: 94:A1:90:E4:BF:F3:F6:90:EC:82:05:4C:65:CF:6E:43:D1:3C:E6:37
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 019A500711375CF96CD4FA9BA0BB33A34F07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 0425
Signing time: Tue 04 Nov 2025 18:00:31 +0000
Manifest this update: Tue 04 Nov 2025 18:00:31 +0000
Manifest next update: Wed 05 Nov 2025 18:00:31 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: YvLJ7n9tMmQumeVott1WXMODV2h4UWbCfCp2MQvfk1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:11:37:5c:f9:6c:d4:fa:9b:a0:bb:33:a3:4f:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Nov 4 18:00:31 2025 GMT
Not After : Nov 5 18:00:31 2025 GMT
Subject: CN=94a190e4bff3f690ec82054c65cf6e43d13ce637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:44:8f:a8:75:b0:93:7e:18:a0:df:5f:7c:
e1:1f:5b:f0:f9:4a:13:e7:c0:a7:83:7c:b1:34:57:
d8:a0:c0:d3:23:56:cd:8d:e5:e4:b6:df:2c:f3:84:
04:d6:fd:aa:2e:9b:b5:44:31:5a:5a:43:df:88:5f:
fa:14:fb:47:1a:1c:ab:2b:d0:3e:09:c5:cb:46:41:
5e:67:dc:59:d4:e1:17:35:1a:39:0b:87:2a:c7:7f:
09:4e:94:85:f1:a7:9a:7c:47:ac:c7:86:c7:8d:ca:
17:6f:ff:cc:70:be:54:d2:b6:b2:99:4c:0a:58:61:
99:93:83:9d:cf:81:0e:c1:df:05:91:04:9d:83:6b:
3e:95:16:2c:88:5f:76:0b:e0:c4:4d:f1:fd:ec:9e:
35:d2:98:81:71:bc:1d:08:1e:f7:06:e0:1f:ec:fc:
bd:b3:30:17:10:ec:43:f8:b1:88:8f:3e:68:0b:c8:
f7:61:43:61:92:0a:02:4c:4c:2a:ba:97:25:96:f1:
3a:8a:ac:eb:19:2a:a2:88:fa:f0:7e:93:8f:d4:1b:
93:76:23:d3:db:f6:c7:26:ca:65:5b:3d:a1:50:e1:
64:8b:94:51:07:5f:cd:85:6b:b3:4b:e3:7c:76:10:
0f:18:f0:fc:89:2b:33:c8:4a:95:ad:9a:2a:1b:ca:
6c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A1:90:E4:BF:F3:F6:90:EC:82:05:4C:65:CF:6E:43:D1:3C:E6:37
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a4:de:d1:5f:a6:55:73:04:91:48:04:14:a1:d5:b7:b7:bb:
33:2c:9c:37:51:69:3b:9a:0a:8c:ac:38:b8:c3:75:7c:d6:3a:
7c:01:88:c9:d6:75:7a:df:e3:bd:fa:c8:d5:06:91:af:0c:df:
f8:f2:e4:98:b7:7d:c4:67:af:f9:3c:da:ca:0e:c7:46:8c:c7:
93:00:22:47:bd:43:b6:2d:92:ab:03:05:4c:74:a7:a7:b9:e8:
61:1e:5e:f1:2c:6b:6a:93:0b:91:b6:b0:4c:93:e8:7e:73:da:
71:34:4f:74:b4:8c:d2:05:fa:24:6c:c0:f3:c6:b4:f0:98:f0:
c1:9d:53:86:12:4e:19:20:cc:d6:be:4b:9e:c3:83:6d:c9:6f:
01:79:e4:e7:27:9c:ca:88:ab:ff:9c:d4:67:2f:27:35:90:e5:
73:10:e8:fd:80:85:57:3e:23:a3:3e:92:28:7e:aa:a2:32:43:
56:92:4d:fe:ed:22:fa:d8:8c:9a:4d:64:0c:07:ca:f4:35:70:
d5:52:01:ed:50:fa:62:e0:b6:eb:23:2e:9e:c8:e5:cc:25:b9:
5d:55:4e:27:f8:8f:a4:de:c1:cc:76:a2:f9:0f:92:c0:33:b7:
69:6d:cc:93:49:8c:2d:84:d6:e1:52:11:5c:55:3c:42:9c:30:
97:07:28:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:32:13 2025 by rpki-client