Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
File: qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft (raw, json)
Hash identifier: nUDc3wtrLApz4JW8moUbC/Cf6HBjxVn1B1ZA4Vjc90A=
Subject key identifier: 94:A2:58:D7:E4:10:CF:D8:60:21:64:69:E3:24:86:97:01:E0:17:1E
Authority key identifier: A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
Certificate issuer: /CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Certificate serial: 019A4E18EB6FCB690046448EE308F319CB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
Manifest number: 125F
Signing time: Tue 04 Nov 2025 09:00:47 +0000
Manifest this update: Tue 04 Nov 2025 09:00:47 +0000
Manifest next update: Wed 05 Nov 2025 09:00:47 +0000
Files and hashes: 1: qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl (hash: /bMhbzmyyojmqOeJkfxyx8r8nKStedc6yvbEqsGEeC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:eb:6f:cb:69:00:46:44:8e:e3:08:f3:19:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9240f027a9409229c59ff630aa2a80f9378a93f
Validity
Not Before: Nov 4 09:00:47 2025 GMT
Not After : Nov 5 09:00:47 2025 GMT
Subject: CN=94a258d7e410cfd860216469e324869701e0171e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:6d:4c:0b:6a:ce:ec:6d:e7:b4:50:f9:2c:9f:
a8:45:76:a4:9b:09:15:7d:b4:bb:35:31:0a:fb:44:
e5:c4:54:b6:db:c5:55:d6:37:06:35:49:05:c4:25:
94:51:f7:a8:25:f6:6d:d7:07:be:dc:75:40:ae:22:
9d:9f:4d:93:7f:64:62:85:bf:aa:e9:c5:d2:79:f2:
88:67:92:4c:9b:3c:61:6b:c5:5c:df:51:ea:23:ea:
09:f1:ab:1f:c3:1d:6a:34:43:75:18:6d:d3:18:f8:
7d:76:cf:d8:a9:23:77:87:78:af:4f:b3:c1:3a:1f:
cf:23:1a:90:41:67:16:dc:87:6d:76:db:c2:0f:88:
2c:aa:77:5c:c9:23:26:b9:67:5a:44:77:74:dc:78:
82:df:2b:e1:fb:b5:b5:4a:2a:84:cb:fd:76:04:ed:
c7:17:66:7c:58:12:52:26:6d:0b:e7:9d:fa:58:22:
11:a8:d4:cd:f9:35:8d:ea:39:84:58:41:d5:53:e2:
80:d3:32:c3:58:46:bf:8f:86:3a:e1:15:93:de:b8:
fb:80:0a:d0:90:a2:7a:92:72:d1:8c:97:0a:ff:ea:
a8:9b:bd:b1:27:34:61:5f:62:0b:a7:ec:e1:d0:0f:
21:64:d7:43:b3:e2:c9:8b:4f:08:3a:cb:23:0a:d8:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A2:58:D7:E4:10:CF:D8:60:21:64:69:E3:24:86:97:01:E0:17:1E
X509v3 Authority Key Identifier:
keyid:A9:24:0F:02:7A:94:09:22:9C:59:FF:63:0A:A2:A8:0F:93:78:A9:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qSQPAnqUCSKcWf9jCqKoD5N4qT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/bfcf7f-930c-4ed4-96cd-3d1b3a86ce87/1/qSQPAnqUCSKcWf9jCqKoD5N4qT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:48:d7:86:c0:f6:37:7d:50:ac:00:65:9d:28:e7:19:bb:59:
63:23:5e:f6:5e:b6:83:60:34:8e:53:4d:55:27:51:a9:21:84:
ba:25:fd:7b:c2:95:56:a5:0f:89:fe:cb:69:63:cc:ab:41:61:
45:2d:0e:c6:0b:e2:02:94:f8:87:6a:1b:90:07:4f:d9:3b:90:
08:5d:3f:a4:ae:11:ef:be:51:ae:93:bc:ff:e2:a2:1d:63:57:
7a:ca:32:91:18:ca:91:14:ae:3a:37:63:fc:67:48:4a:ad:52:
54:6d:ff:89:9f:ce:3a:73:e6:1f:0b:9a:fd:77:74:c3:d9:e7:
5b:52:ab:b5:80:61:ca:d2:7b:e8:8e:e2:1a:7b:96:77:cf:09:
2c:66:99:9d:11:79:18:cc:bd:0b:f8:aa:a6:46:e8:bc:d3:00:
08:ab:5c:bb:f2:02:4a:21:c9:a2:30:c8:3a:49:cc:d9:99:d2:
0e:b3:da:ac:85:93:12:4b:4c:7a:15:6b:3f:94:fd:3f:f9:87:
55:80:01:d4:8c:14:e7:db:86:65:c3:09:54:27:67:58:ff:2e:
1e:3f:83:43:6c:e1:d4:27:57:93:66:fa:a4:a8:89:78:81:dc:
f9:51:fa:04:e1:fa:df:8b:99:11:01:dc:6f:1f:78:c9:1f:47:
87:fd:bf:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:47:07 2025 by rpki-client