Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: m3ozGD+xjIumH+e15OYxJhmuvLXDKcM/4Hw6IOzxkOQ=
Subject key identifier: 15:87:23:A5:FD:EC:1A:43:56:69:0E:C2:DB:5D:6E:44:8D:0E:DC:56
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 019A4D7454A1ECB1CC82C15B912D292AC433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:01:00 +0000
Manifest this update: Tue 04 Nov 2025 06:01:00 +0000
Manifest next update: Wed 05 Nov 2025 06:01:00 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: x4lSuNjGiMMFcZKTeSuIPoCi/quwVLrg8aFOl7LFj+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:54:a1:ec:b1:cc:82:c1:5b:91:2d:29:2a:c4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Nov 4 06:01:00 2025 GMT
Not After : Nov 5 06:01:00 2025 GMT
Subject: CN=158723a5fdec1a4356690ec2db5d6e448d0edc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:87:36:5d:b4:d9:f9:96:40:3e:63:93:e1:a8:
9e:dc:b4:58:38:18:37:ae:27:22:39:bf:a6:4f:a2:
90:9e:f5:3a:b4:98:c4:05:05:7e:88:a7:7b:0b:23:
29:56:5a:52:f3:c1:34:c2:1e:18:57:0b:40:cb:80:
21:81:4f:ff:5a:d9:57:9e:3b:51:a4:e3:76:f4:61:
05:91:7b:29:6e:61:91:fc:87:66:1e:48:ed:6d:c3:
88:e8:b5:ac:b3:3a:51:8e:e9:ce:84:59:a8:34:ef:
19:e7:04:18:1f:19:2c:b7:bc:7d:95:3a:e1:b0:e0:
fd:52:2c:2f:5e:ca:95:ce:df:df:53:85:38:fc:d8:
43:7b:7c:66:d2:96:7a:66:ec:dd:2f:74:d2:8a:dc:
f4:2b:8a:c6:fa:ae:8b:f6:f2:8f:72:5f:3e:7b:ad:
68:6e:82:33:9b:ca:a4:c7:07:72:76:21:2e:be:b1:
61:9a:48:2a:73:96:18:b3:aa:44:c6:da:5a:f5:ef:
f3:8b:25:39:32:c3:b8:54:f2:df:b3:d9:65:e2:c6:
af:79:4c:e9:a7:45:b1:69:e1:d2:0a:35:37:68:36:
e2:e1:de:60:cd:be:b7:4e:f6:fc:ef:1b:48:a5:8f:
2b:0d:c6:2b:e2:ce:a3:91:80:fe:c6:11:8e:2e:1b:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:87:23:A5:FD:EC:1A:43:56:69:0E:C2:DB:5D:6E:44:8D:0E:DC:56
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:cc:00:f6:25:c3:76:f9:e3:c7:32:16:5d:31:75:eb:cc:9a:
c9:cd:9f:bd:55:7c:f4:cf:fe:a4:a8:11:98:ac:a3:07:a0:16:
59:62:d3:bb:ab:08:69:ae:41:73:ac:32:c8:ea:ad:e8:7f:dd:
0a:de:05:46:af:93:f8:c5:75:db:1d:86:be:94:5e:60:e7:40:
8a:56:19:c9:02:f9:53:0e:16:49:da:ef:b3:1a:ed:61:0b:07:
fe:2c:9b:13:9f:86:29:1f:7b:5b:8e:00:a4:97:06:3c:23:3d:
1f:42:33:78:e2:20:e2:2e:39:63:04:bb:5b:93:82:aa:38:a3:
87:4e:a7:be:e5:83:3d:9f:3e:db:d7:10:88:b6:d0:c6:73:f3:
81:c6:39:d5:19:ad:9b:07:df:05:94:74:96:db:ff:0a:cd:fb:
b3:47:f3:19:6d:b4:ec:d6:67:d2:ef:2a:bc:5e:ed:09:cd:bc:
13:26:29:c2:e7:64:a9:4a:46:ee:b8:6a:f6:a6:f4:4a:84:ad:
64:36:fb:31:c1:76:29:6b:63:ed:8a:5c:ac:db:42:18:99:d2:
67:75:05:77:b1:65:c2:76:67:e1:c7:63:6b:4e:90:eb:25:ad:
f3:7c:f4:a6:1d:82:31:78:07:60:66:62:2a:3b:a2:be:9f:d3:
b9:6f:a9:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNdFSh7LHMgsFbkS0pKsQzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy
ODRiNzEwHhcNMjUxMTA0MDYwMTAwWhcNMjUxMTA1MDYwMTAwWjAzMTEwLwYDVQQD
EygxNTg3MjNhNWZkZWMxYTQzNTY2OTBlYzJkYjVkNmU0NDhkMGVkYzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ic2XbTZ+ZZAPmOT4aie3LRYOBg3
riciOb+mT6KQnvU6tJjEBQV+iKd7CyMpVlpS88E0wh4YVwtAy4AhgU//WtlXnjtR
pON29GEFkXspbmGR/IdmHkjtbcOI6LWsszpRjunOhFmoNO8Z5wQYHxkst7x9lTrh
sOD9UiwvXsqVzt/fU4U4/NhDe3xm0pZ6ZuzdL3TSitz0K4rG+q6L9vKPcl8+e61o
boIzm8qkxwdydiEuvrFhmkgqc5YYs6pExtpa9e/ziyU5MsO4VPLfs9ll4saveUzp
p0WxaeHSCjU3aDbi4d5gzb63Tvb87xtIpY8rDcYr4s6jkYD+xhGOLhsZ9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWHI6X97BpDVmkOwttdbkSNDtxWMB8GA1UdIwQY
MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt
ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm
LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPcwA9iXD
dvnjxzIWXTF168yayc2fvVV89M/+pKgRmKyjB6AWWWLTu6sIaa5Bc6wyyOqt6H/d
Ct4FRq+T+MV12x2GvpReYOdAilYZyQL5Uw4WSdrvsxrtYQsH/iybE5+GKR97W44A
pJcGPCM9H0IzeOIg4i45YwS7W5OCqjijh06nvuWDPZ8+29cQiLbQxnPzgcY51Rmt
mwffBZR0ltv/Cs37s0fzGW207NZn0u8qvF7tCc28EyYpwudkqUpG7rhq9qb0SoSt
ZDb7McF2KWtj7YpcrNtCGJnSZ3UFd7FlwnZn4cdja06Q6yWt83z0ph2CMXgHYGZi
Kjuivp/TuW+pkA==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:15 2025 by rpki-client