Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
File: fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft (raw, json)
Hash identifier: OaiXznZToYssCrR4gg0EMlQ6KN08Tl8Zc1Y2Uyez2x4=
Subject key identifier: 19:0A:2A:21:31:3E:81:04:C3:07:9B:D7:6B:C0:4C:56:C1:14:B0:DA
Authority key identifier: 7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
Certificate issuer: /CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Certificate serial: 019A5074A499CE4BD2CA9105A0A8A080C6A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 20:00:12 +0000
Manifest this update: Tue 04 Nov 2025 20:00:12 +0000
Manifest next update: Wed 05 Nov 2025 20:00:12 +0000
Files and hashes: 1: fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl (hash: wMhj5xSrRwKV8cg2RMdiu1O+GhCBx7FWg5PeVabaXWo=)
2: vnzMzh2cQHm0Lys-suLZiDHDQ8A.roa (hash: R9SbPATXxScQWUAkTRPu9oq7L8jHGUzOG3svKZG10/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:a4:99:ce:4b:d2:ca:91:05:a0:a8:a0:80:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0ac334438a53d18ae40efc9368768b931cfac2
Validity
Not Before: Nov 4 20:00:12 2025 GMT
Not After : Nov 5 20:00:12 2025 GMT
Subject: CN=190a2a21313e8104c3079bd76bc04c56c114b0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2c:9e:fd:86:65:28:01:70:b6:cc:ae:08:69:
38:68:15:c2:2c:ab:77:0b:a9:e5:a0:0c:f8:cd:38:
85:e4:d1:b2:0f:50:85:9d:ac:9a:83:29:3d:98:a4:
a7:ff:ad:38:5b:63:c2:23:33:f4:ab:ad:3a:45:56:
a4:9a:40:18:05:65:96:13:70:01:ab:0e:71:3a:2a:
bb:28:6e:3d:19:d6:73:59:5c:21:08:8d:34:b7:83:
5d:0b:85:85:c7:62:a3:fd:e0:a7:13:4b:69:66:bb:
26:e5:f2:49:44:46:51:19:39:ae:9f:5b:53:27:ae:
65:f3:37:c7:e1:6a:8c:72:34:af:6f:bb:dc:81:ec:
00:35:d8:18:1d:62:7d:2f:16:56:9c:91:b5:e1:3b:
ef:f5:7d:c4:61:8c:32:39:5a:4d:cf:6f:47:ab:e0:
12:8c:5b:66:12:ae:16:e6:49:64:40:cd:01:69:96:
31:d4:b3:2a:eb:dc:33:f5:e8:f2:d0:69:23:78:c4:
6a:4d:e1:68:76:e8:fa:26:b7:8b:a3:5f:4d:45:c0:
d0:f8:1f:49:a9:2b:6a:29:6f:ac:e8:07:3f:d4:9a:
cf:91:43:e3:70:46:62:91:42:fd:47:7e:34:32:d5:
65:69:0f:4e:8f:7b:66:7d:f5:51:bd:ea:7f:57:52:
c3:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:2A:21:31:3E:81:04:C3:07:9B:D7:6B:C0:4C:56:C1:14:B0:DA
X509v3 Authority Key Identifier:
keyid:7D:0A:C3:34:43:8A:53:D1:8A:E4:0E:FC:93:68:76:8B:93:1C:FA:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQrDNEOKU9GK5A78k2h2i5Mc-sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f26fd1-b375-426c-af79-b519b131bf85/1/fQrDNEOKU9GK5A78k2h2i5Mc-sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:8f:05:22:a2:93:b5:dd:79:e6:bd:31:49:df:2e:8a:d4:97:
9b:34:c6:57:79:4a:08:80:73:95:7a:a7:0c:f1:b8:da:d7:88:
e5:1b:f6:b6:57:4d:fd:3e:b3:72:75:13:96:9d:b4:88:2a:05:
6c:e4:d0:a0:99:f3:b7:38:ef:85:75:af:ea:40:26:c2:47:8b:
88:95:d8:01:38:29:4e:87:ec:0e:6d:fb:79:6f:77:5d:b8:94:
ff:55:5e:ff:05:c2:27:d0:96:db:0e:9c:e2:cf:3e:6d:a9:ab:
31:4a:21:d5:bd:b0:05:17:d6:49:2b:c3:0c:bf:55:76:59:ad:
db:40:a4:09:73:b5:51:2a:1a:ef:a4:d2:e0:e9:0c:23:09:a5:
b4:b7:01:62:52:ae:61:1e:53:3e:e7:13:da:06:0e:f4:02:c5:
d3:39:7c:f0:68:35:b8:46:c8:41:5f:9f:06:ae:1a:0d:45:b3:
ca:b0:a6:60:72:b2:81:0d:07:71:39:75:a5:5e:6b:0c:1b:0c:
75:50:f2:5d:42:32:d1:9f:a8:3d:f5:04:fd:e5:7d:df:c7:aa:
cb:b6:ad:fe:71:d8:90:2b:44:d0:6c:cb:7e:83:5c:fe:c8:4a:
24:2b:35:bc:47:d2:b6:fc:38:a2:b4:d2:8f:64:c7:7e:64:18:
6a:c8:d7:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:09:14 2025 by rpki-client