Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: stUOz64f8Oi5NeE5P7w/cOOn1ine2TuDwIzVnYIUWrE=
Subject key identifier: 5C:DF:4B:8A:65:8A:62:89:79:61:C4:B0:5A:BE:25:D6:69:82:5B:CE
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 019A4D74449F0F7A106AFB360A8AEBDC969A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0E24
Signing time: Tue 04 Nov 2025 06:00:56 +0000
Manifest this update: Tue 04 Nov 2025 06:00:56 +0000
Manifest next update: Wed 05 Nov 2025 06:00:56 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: tXh6LA7Mu4G1F+LvXIg9VtUHlpdQst6wX487kneh01k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:44:9f:0f:7a:10:6a:fb:36:0a:8a:eb:dc:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Nov 4 06:00:56 2025 GMT
Not After : Nov 5 06:00:56 2025 GMT
Subject: CN=5cdf4b8a658a62897961c4b05abe25d669825bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4e:97:d8:04:36:98:1e:28:fb:02:ff:0e:f7:
67:8d:98:8c:97:76:19:96:27:6b:93:b8:24:5e:ec:
b2:89:da:ae:cd:e9:34:35:47:ff:e1:b6:8a:67:ff:
c9:f9:c0:f6:c1:10:2f:12:7e:7e:cc:a3:89:88:fd:
69:6a:d3:5c:30:44:72:39:c6:d6:ee:eb:e9:15:7e:
5c:18:27:ec:87:0c:27:5e:a3:9c:9e:20:1d:5b:6c:
a5:4d:46:2a:f4:0c:78:e0:a0:f3:79:b1:71:a4:a1:
2c:5a:25:a8:33:a6:5f:07:74:3f:c0:0a:90:21:a9:
47:e9:53:d9:a7:5e:a3:5e:77:63:43:f4:e6:81:7a:
21:fa:c4:6c:bb:86:27:f4:10:47:65:3a:73:e1:77:
51:e1:e5:79:89:d6:e3:a8:29:83:2a:c4:ba:98:16:
d7:9c:8f:f0:3e:80:d6:80:7f:7f:32:17:f0:23:16:
fc:a1:3c:d3:d9:20:d7:32:b4:0b:d4:bb:69:ec:bc:
1b:50:97:cc:73:8f:32:78:2b:26:57:98:e2:e0:de:
c3:da:7c:67:60:71:e8:36:cc:ce:2d:d9:3e:6e:7b:
66:2b:76:05:b7:50:42:1d:ad:0a:52:9b:3f:e2:82:
87:83:83:a2:eb:2c:b8:78:99:6e:31:e4:d0:f8:a6:
be:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:4B:8A:65:8A:62:89:79:61:C4:B0:5A:BE:25:D6:69:82:5B:CE
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b1:db:66:ab:b1:84:ae:e9:1f:81:1d:65:4d:73:40:c1:0c:
32:66:06:e8:7f:00:a7:9d:86:87:76:17:04:58:bf:75:c3:e4:
28:0c:96:27:4a:8c:32:20:f4:07:aa:d6:4b:4a:39:16:25:cf:
ba:d0:e8:c2:9b:6e:ff:9d:34:7c:94:e1:a9:67:1a:b0:97:c4:
40:0c:33:9b:76:be:58:18:d1:eb:e3:b8:33:bb:57:8d:97:b7:
74:27:55:7a:5c:60:d6:4f:56:1f:12:f9:e1:e0:92:0c:8b:17:
cc:b4:d6:9b:3a:5e:b9:cf:dd:1c:b2:c5:8d:0b:50:e8:6e:ad:
f4:9a:16:34:83:16:1e:0e:f4:ef:14:23:d1:d9:ba:9f:16:12:
94:3b:cc:fc:4d:e6:0c:b5:2c:e6:ce:a6:e0:a6:2f:cf:ce:d6:
89:f1:fd:f4:ca:10:99:31:ee:16:e2:e3:a6:72:4b:7e:92:56:
74:96:20:cf:fd:08:26:d4:c9:a1:7b:31:b3:76:b6:1d:f2:54:
fd:a9:1c:09:93:e5:ff:86:45:5e:b6:69:7f:8f:33:e5:a0:96:
94:2a:f9:20:56:6f:56:b3:fe:41:62:98:a7:2b:45:00:b4:94:
77:32:b8:e6:78:ba:52:71:f4:99:0f:ad:4c:fe:ee:db:5c:b7:
0b:9d:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:55:32 2025 by rpki-client