Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: PejUt64jxVnhN7mfHct/U5eXdI9wgCh52/1FCXlIA+M=
Subject key identifier: 14:A6:32:3B:DE:09:65:C7:D3:A2:C4:70:E2:38:E7:33:97:63:A7:DF
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 019A50E3CB3E3CC031959963AD7DA27B482D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 07E2
Signing time: Tue 04 Nov 2025 22:01:37 +0000
Manifest this update: Tue 04 Nov 2025 22:01:37 +0000
Manifest next update: Wed 05 Nov 2025 22:01:37 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: FMko+YullpKmJ7YalR7SL9LVWLl2/kWzLhsaVPlzkyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:cb:3e:3c:c0:31:95:99:63:ad:7d:a2:7b:48:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Nov 4 22:01:37 2025 GMT
Not After : Nov 5 22:01:37 2025 GMT
Subject: CN=14a6323bde0965c7d3a2c470e238e7339763a7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:ff:13:bd:b6:3f:77:bc:1c:46:fc:6b:b8:
b8:33:fd:86:82:44:cf:b3:07:59:03:8b:52:e6:d6:
da:cb:b7:3b:3c:b3:ce:43:bb:85:d8:8d:2d:a9:e0:
02:37:d6:8c:d5:3b:a9:00:6c:19:76:a5:8e:1d:aa:
1d:80:63:70:3c:cb:16:a6:8f:c5:35:54:17:fe:23:
28:99:9d:6b:af:67:86:f2:d7:79:4a:5c:8f:44:51:
d7:d9:05:29:9a:c2:94:72:3e:94:4f:74:3d:ae:44:
6a:86:de:7b:88:60:9b:67:0c:3f:50:bd:9c:44:1c:
23:a7:00:9f:d0:44:c4:35:53:88:43:05:af:17:b4:
df:e2:c5:ff:e6:2a:1c:c1:81:a4:97:09:29:c1:f6:
37:3c:d6:e6:85:e0:f2:b4:b4:01:1c:03:67:da:a1:
8f:5e:d7:07:b7:b7:7a:82:72:d8:cd:2f:bd:67:e5:
73:1c:b1:e2:ff:ff:15:c7:07:40:a2:bd:36:2c:29:
9a:e6:6d:22:e2:65:8b:cd:0a:21:fa:09:e4:1f:0a:
2e:2a:78:46:43:e4:66:f6:7f:f0:4c:71:b0:f2:74:
af:05:43:0c:ea:bc:77:ed:73:4d:f2:00:e4:db:c0:
45:59:f0:17:1c:8a:9b:6d:e7:70:7c:76:36:2c:dd:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:32:3B:DE:09:65:C7:D3:A2:C4:70:E2:38:E7:33:97:63:A7:DF
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:ac:94:45:66:bf:9c:d3:0b:68:78:79:c4:af:8e:fa:99:
a4:93:a7:b3:ad:bc:3f:35:b4:ae:28:3d:62:4e:e0:9c:0f:e4:
fb:2e:e8:65:57:c3:72:76:9d:a6:13:7c:29:a6:0e:eb:a9:78:
64:f3:e6:42:19:9a:7a:4c:53:fa:f8:5e:e3:65:9c:bf:77:8d:
5f:61:af:59:0f:39:2c:56:56:3b:8e:63:b8:3f:b5:2b:fd:69:
7c:52:aa:6d:86:7d:72:28:a5:34:39:7a:a9:dc:3a:02:63:6f:
aa:4d:de:42:bb:c1:da:fc:ee:8b:c5:25:05:23:6d:c7:d6:f6:
cb:2b:20:be:82:60:12:94:18:68:84:f0:32:6b:90:a4:45:8d:
bc:04:84:49:23:c1:64:ae:d6:d9:a4:67:73:53:e3:90:6d:c1:
9d:19:1f:e8:38:bb:c4:98:8e:a4:e4:1c:f1:d2:bd:60:00:f9:
9d:25:8e:ca:b8:d2:d0:e3:58:9f:22:fc:a6:97:05:1d:74:a6:
c4:06:36:a0:6d:df:65:29:7d:b9:08:d7:26:a8:6c:b0:24:8b:
b8:49:6b:47:3c:75:ad:18:8d:bb:5e:d1:2f:1d:6f:d5:9d:9a:
86:b5:3a:e7:73:15:d9:33:ce:1b:56:46:60:50:05:c0:fb:99:
77:ed:0f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:05:11 2025 by rpki-client