Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: 0N4ZwyGBBnF/bF3TQxmP9SF69Z68Y4fKEXKum/BwdqI=
Subject key identifier: C6:01:E4:95:2D:74:36:9C:7D:E1:A0:CB:BB:DC:C9:F0:6C:35:20:75
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 019A51BE8FB63F2E3DF7333DAC6B0C678F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 07F3
Signing time: Wed 05 Nov 2025 02:00:34 +0000
Manifest this update: Wed 05 Nov 2025 02:00:34 +0000
Manifest next update: Thu 06 Nov 2025 02:00:34 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: oUEgn4kHNiiNREQBk0ZdGSDDPvTeDyijIPARJ4sa2jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:8f:b6:3f:2e:3d:f7:33:3d:ac:6b:0c:67:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Nov 5 02:00:34 2025 GMT
Not After : Nov 6 02:00:34 2025 GMT
Subject: CN=c601e4952d74369c7de1a0cbbbdcc9f06c352075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:45:bb:2b:1c:80:99:45:6c:9a:37:05:a8:88:
79:11:b2:01:84:c8:0a:5e:0e:df:09:66:97:00:de:
f6:02:e6:f4:5b:b2:84:e8:53:01:48:b8:61:56:de:
5e:ec:6e:89:f3:6b:1d:92:ce:36:9b:bd:e6:c0:cb:
03:2f:8f:7e:6f:ef:2d:e1:44:ce:ad:f7:1c:0a:f0:
40:09:ac:a6:c0:a2:1c:00:82:f8:3b:55:86:eb:77:
a8:ea:e6:27:94:58:df:df:1f:51:3e:15:a4:c3:e2:
b0:92:fb:9b:6e:a1:3f:77:69:1b:0d:e6:0d:56:4c:
2b:09:91:72:0d:18:66:5e:5b:94:ac:69:90:cb:57:
6e:8b:ad:04:37:b2:bb:04:b4:b1:3a:93:42:e3:21:
fe:ec:54:7b:80:33:e7:33:6b:3c:e0:b4:f3:0f:e7:
9d:fd:b5:c2:f5:cd:a1:b0:a4:db:71:1a:fb:eb:fa:
10:57:1b:68:c5:35:18:4e:e4:69:ef:ff:47:b7:17:
84:09:d7:67:4c:09:ee:89:a2:84:f1:9f:25:ce:d3:
11:95:01:14:48:7a:3f:e6:e0:99:95:c1:c6:71:0c:
34:fc:fa:c6:40:94:92:d8:90:03:b0:37:7a:51:95:
85:af:2d:2a:2d:b3:63:05:5c:cd:29:86:ff:e8:c5:
84:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:01:E4:95:2D:74:36:9C:7D:E1:A0:CB:BB:DC:C9:F0:6C:35:20:75
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:28:36:93:52:9a:ac:88:e8:b6:f8:05:38:c7:e6:24:b8:05:
cc:aa:99:6f:50:54:5e:4c:29:d1:20:01:6c:10:08:0e:04:d0:
cc:44:fc:d1:39:b8:72:9a:f7:5b:7c:ec:c3:b7:06:80:27:71:
e2:3e:89:9d:56:35:5b:1a:07:5b:4a:26:19:8f:dc:e8:30:92:
76:ae:cb:e5:f4:8b:c2:13:b8:6b:c3:00:4b:79:4a:ff:d8:eb:
30:35:47:82:0f:fa:c9:85:71:bc:35:ce:43:e5:86:98:61:5f:
87:65:08:08:cc:15:a5:ef:8c:6a:2a:8a:98:9e:17:27:13:13:
d4:86:0a:09:06:20:6e:f1:21:c7:52:e5:7e:b3:7c:e7:04:a5:
5a:b1:bf:d4:20:28:28:e7:00:50:4b:fc:46:07:f3:7e:84:b9:
1a:ba:e8:5c:6b:28:01:83:23:d2:9f:67:11:b9:29:02:cb:58:
6f:f4:23:e8:25:08:82:b1:99:e1:30:18:56:3a:09:7c:88:55:
8c:80:d5:a5:6e:1a:7b:2b:63:79:30:14:8c:94:e7:bf:9d:58:
95:cb:8d:6c:a0:02:25:f4:ce:5d:b2:49:0f:55:55:2b:b1:41:
48:65:ed:e0:64:53:73:9a:21:7e:74:bf:69:65:d9:90:f2:a5:
81:ab:88:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:07:26 2025 by rpki-client