Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: eF/PgZtIyZeUzbK+pTZOPNkJzWQ+/f7SoxHKwstCW4k=
Subject key identifier: D5:19:2E:FB:DD:A8:22:31:00:AC:39:24:6B:03:2B:F9:4C:04:20:8A
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 019A52D16C6152498FDB09902F7E6BEFD5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 170C
Signing time: Wed 05 Nov 2025 07:00:47 +0000
Manifest this update: Wed 05 Nov 2025 07:00:47 +0000
Manifest next update: Thu 06 Nov 2025 07:00:47 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: D21hGcaE7zLcap4S3jDoKh4iEOsvew/5hlueOuAQSt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:6c:61:52:49:8f:db:09:90:2f:7e:6b:ef:d5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Nov 5 07:00:47 2025 GMT
Not After : Nov 6 07:00:47 2025 GMT
Subject: CN=d5192efbdda8223100ac39246b032bf94c04208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3d:c6:71:13:b9:1b:dc:c1:d6:89:5d:0a:60:
e9:c8:bb:46:d2:2a:9e:85:27:69:db:f0:ec:c9:9a:
f7:72:e8:7b:db:49:d2:4b:d4:5b:c1:d8:31:92:d6:
84:08:cd:cb:30:85:2d:f8:b3:e6:f5:4f:36:b5:f4:
01:18:b2:d4:f1:fb:75:66:84:90:1a:fd:6c:f6:bf:
62:79:36:69:6c:87:cc:8b:8e:6c:4a:49:94:1d:c6:
18:c7:3b:07:65:9f:5b:4d:8c:4a:34:5c:ae:f7:6a:
a5:ca:b4:a1:75:07:cf:70:ad:6d:87:f0:1c:ba:cc:
bb:e7:32:89:a5:bc:f6:09:95:a1:bc:65:41:97:61:
a6:33:e1:fa:53:14:67:8c:39:28:ff:f8:fc:f8:a1:
4a:6d:4a:db:1c:81:f3:75:d9:3c:e5:4f:8f:1e:41:
b9:40:f9:79:b2:ae:7f:6f:3e:d1:b5:34:c6:ef:bb:
92:49:47:7f:9e:5b:62:75:57:4b:6e:e8:68:0d:12:
cf:b9:2f:32:3b:0e:a9:27:7c:60:25:1a:53:b2:fd:
5d:36:7a:0d:e9:d1:6c:14:0e:1d:43:1c:3e:e6:62:
ef:2d:79:09:f4:5d:9b:0f:49:80:7e:fe:2f:35:e7:
3c:bb:32:a6:a2:bb:27:65:6f:60:79:56:1f:6d:f3:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:19:2E:FB:DD:A8:22:31:00:AC:39:24:6B:03:2B:F9:4C:04:20:8A
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:41:72:9d:40:18:99:29:62:93:60:ab:f6:d4:9b:9a:5b:3c:
d1:8f:11:63:8b:21:69:83:34:5c:62:cc:a5:c7:bd:0f:e9:07:
e9:9a:1d:fb:82:86:9f:e9:4a:ea:18:0a:46:bb:36:e6:23:98:
8e:ef:2a:7d:4c:69:a1:f8:97:d5:c6:f9:06:43:e6:47:80:d1:
e3:00:26:98:5b:64:6a:f3:6b:a8:85:53:00:ce:24:b4:15:3c:
77:e1:ee:74:55:18:f0:38:b1:4a:f7:13:2c:76:40:e1:01:3a:
cb:6d:8a:02:0a:79:64:cd:46:76:6f:b7:44:a3:63:79:c8:3d:
94:c9:fa:fc:a3:dc:83:0d:da:4e:8b:94:9c:4a:dd:dd:a7:d8:
01:6a:62:dc:54:b4:b1:fb:43:0c:c3:b0:92:d4:7d:1c:c4:d1:
b5:30:53:40:49:87:37:50:a8:57:a9:f8:16:2c:47:6c:73:36:
4a:57:73:88:b6:cc:79:74:b0:63:8f:cc:e1:ed:dc:66:c9:3e:
41:4a:7d:8a:16:f4:6a:02:8d:0e:ea:32:a5:5f:4e:1d:bc:99:
d2:32:ed:38:18:b3:2d:4f:08:3b:8d:fd:de:cc:15:4d:da:64:
98:cb:65:1f:58:e5:2d:3a:fb:df:f0:38:f1:f3:bc:8c:d5:59:
70:a5:8b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:59:40 2025 by rpki-client