Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
File: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft (raw, json)
Hash identifier: xX23YtZULaOgMpm+3u0fxwbU0x/MFkfI06PV3D+zlZM=
Subject key identifier: 6F:76:A3:D7:A9:C9:EA:DF:1C:6F:50:56:1D:80:13:92:03:17:84:C4
Authority key identifier: 42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
Certificate issuer: /CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Certificate serial: 019A4DAB0E2B4E76CD8A82259681FCD8E4A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
Manifest number: 0630
Signing time: Tue 04 Nov 2025 07:00:47 +0000
Manifest this update: Tue 04 Nov 2025 07:00:47 +0000
Manifest next update: Wed 05 Nov 2025 07:00:47 +0000
Files and hashes: 1: QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl (hash: xE7Uh88yK/CPb2G57xU8fJlsU1obDnJykyLd2a9ZFLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:0e:2b:4e:76:cd:8a:82:25:96:81:fc:d8:e4:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4213b5471966c25610d95a5a2fa5cc06fc93ff57
Validity
Not Before: Nov 4 07:00:47 2025 GMT
Not After : Nov 5 07:00:47 2025 GMT
Subject: CN=6f76a3d7a9c9eadf1c6f50561d801392031784c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:dc:c4:6a:60:7d:14:6a:b9:30:25:45:87:ab:
a5:ca:10:7b:0b:32:41:54:b9:d7:78:52:69:b3:b0:
21:b5:52:3b:f9:b8:01:3c:94:47:3c:ed:ec:54:2f:
36:25:c8:b3:d4:c2:72:2d:6a:88:6c:48:53:aa:b1:
bd:cf:b9:a5:7c:73:4b:78:fd:87:4b:cf:00:4d:24:
6a:70:43:12:07:d5:87:61:ea:85:96:e8:e9:b0:5c:
b3:9a:03:7a:b8:e8:b2:88:ca:6b:2d:cc:f3:91:e5:
1b:73:bf:60:3d:55:7f:9b:9e:67:4c:30:ec:2e:48:
17:b4:b6:69:6d:59:b7:14:df:a8:58:66:ff:ac:21:
ae:5c:55:d2:b2:75:cd:96:cd:87:7c:d3:27:77:69:
1e:f4:36:fd:f5:89:f3:49:58:58:b3:2a:d9:58:b9:
4d:39:ba:f0:b1:67:b4:03:42:c9:63:8d:6e:56:bc:
f6:08:3e:0b:47:ac:d4:92:c7:fc:85:7f:4c:5f:80:
c9:29:4c:6c:6e:32:75:b1:27:f4:87:b9:02:2b:c2:
59:4e:75:61:ab:e3:a2:ec:50:4c:09:88:e5:7e:ac:
54:bf:4b:8e:4f:79:73:26:cb:82:98:d3:85:44:fa:
a2:33:db:59:49:30:da:26:be:b0:c3:6f:24:cd:52:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:76:A3:D7:A9:C9:EA:DF:1C:6F:50:56:1D:80:13:92:03:17:84:C4
X509v3 Authority Key Identifier:
keyid:42:13:B5:47:19:66:C2:56:10:D9:5A:5A:2F:A5:CC:06:FC:93:FF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/000485-721f-4d97-a0f2-5bdb2c60102d/1/QhO1RxlmwlYQ2VpaL6XMBvyT_1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:2d:d1:fb:ab:57:86:ad:db:53:ea:f3:8c:b3:d9:e8:0f:46:
ca:22:e3:1a:83:f7:0b:b4:9b:c2:3a:05:f6:4e:9e:09:25:47:
11:54:b4:9d:69:b3:98:6d:86:1f:91:13:cb:d6:0c:5f:d7:44:
00:ca:10:53:c0:ab:66:fe:ca:86:f0:79:5f:a0:6b:29:e5:b8:
c0:87:07:7d:c6:51:70:49:bd:02:d4:5c:a2:7f:d7:f3:21:9c:
05:d1:65:7e:08:43:c1:76:98:86:7a:66:fa:21:bd:66:99:92:
3f:dc:5c:b4:d9:79:33:55:ea:26:ba:19:3c:46:a3:79:4d:5c:
00:f4:25:0b:95:4b:c3:0b:d6:23:40:76:e0:5b:03:5a:bb:a5:
a7:23:4b:e4:c0:62:40:89:5c:9e:1c:c2:2f:83:ab:5e:15:20:
ba:5b:62:05:31:5d:27:6b:be:fe:4b:5a:91:00:01:46:67:0c:
82:a9:30:31:ef:70:f1:d6:20:74:f0:e4:d7:96:4a:ac:02:7e:
3d:13:b1:64:ab:09:ba:62:64:fa:ba:7e:9d:65:d8:0f:46:8b:
29:a1:05:b5:e3:03:1a:28:66:fd:14:88:80:6d:56:34:36:54:
c1:7b:bf:84:0a:1b:3e:eb:25:65:68:a5:0e:b8:6a:53:df:23:
1c:12:fc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:13 2025 by rpki-client