Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
File: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft (raw, json)
Hash identifier: d8gxxxPedB7cvXsbYBguHyc1lMngt3eaQSts09qRmIw=
Subject key identifier: E7:A2:8C:C4:67:F0:17:FB:9A:36:87:9F:42:12:74:9C:96:3F:BF:2D
Authority key identifier: 98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
Certificate issuer: /CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Certificate serial: 019A503DE1780134F9504A1ECEBFB35E78A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
Manifest number: 0E42
Signing time: Tue 04 Nov 2025 19:00:23 +0000
Manifest this update: Tue 04 Nov 2025 19:00:23 +0000
Manifest next update: Wed 05 Nov 2025 19:00:23 +0000
Files and hashes: 1: mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl (hash: H9yK4IQPIZEc0IxzL12XvVxm0mVDY9ASxAtL/I+G+ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:e1:78:01:34:f9:50:4a:1e:ce:bf:b3:5e:78:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98241aac9eda7bef69089f647b5d8f774ff43a26
Validity
Not Before: Nov 4 19:00:23 2025 GMT
Not After : Nov 5 19:00:23 2025 GMT
Subject: CN=e7a28cc467f017fb9a36879f4212749c963fbf2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:89:bd:59:b8:bc:9b:ea:5a:85:82:69:31:
2f:b8:8b:33:e4:97:83:f6:9f:cb:b6:9d:69:8f:f1:
d8:0c:40:de:ab:ef:b5:30:25:b5:7e:c5:d5:cb:b0:
d1:77:c6:85:06:04:3c:e6:8c:cd:7e:eb:fd:13:e9:
96:50:19:06:21:7c:7c:de:5b:c9:bb:ce:94:5e:94:
06:d1:98:7a:6b:cc:dd:43:7c:11:51:20:a2:05:bf:
c0:2e:4a:74:9e:53:fd:17:0a:a0:70:71:d5:23:ec:
44:8e:20:92:60:d4:70:73:c4:b9:1f:2f:12:75:2b:
a5:ea:82:77:08:87:1e:cf:e9:bb:e4:bb:9d:46:9e:
32:44:58:5c:57:c0:b7:37:56:ee:33:c4:05:46:34:
5d:ed:59:35:5b:a8:c6:85:a2:dd:e0:f5:f1:ae:36:
a8:29:90:5b:ef:69:de:2a:3e:b4:3d:a2:99:f8:9f:
c0:fe:df:28:96:1a:ea:bf:8a:0b:37:a7:1f:79:bb:
9b:b1:65:fb:d3:d8:b6:1a:1d:74:e7:f3:92:9b:25:
e1:d0:29:1c:33:db:04:91:bf:a0:7b:0a:e0:4d:ab:
7f:9d:4c:cd:ee:59:c3:f4:92:bb:e1:93:e6:62:f2:
57:a9:03:68:08:9f:d0:00:59:15:fa:04:d9:65:3c:
d8:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A2:8C:C4:67:F0:17:FB:9A:36:87:9F:42:12:74:9C:96:3F:BF:2D
X509v3 Authority Key Identifier:
keyid:98:24:1A:AC:9E:DA:7B:EF:69:08:9F:64:7B:5D:8F:77:4F:F4:3A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cda958-3cab-4b23-916c-35de384c0982/1/mCQarJ7ae-9pCJ9ke12Pd0_0OiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:1e:30:16:78:9d:97:f4:11:33:0f:32:a5:6b:b4:97:59:a6:
b6:0b:0b:66:a1:cb:27:ef:ed:9e:e7:0a:6a:00:bc:0a:21:35:
9b:21:da:2e:86:d5:07:f3:e1:ad:e1:74:c4:4f:40:9e:00:f1:
30:e5:ae:77:9e:3f:e4:4b:d2:32:99:12:4f:f8:5f:ac:1f:f2:
fa:ca:c3:5a:ac:a0:90:40:84:d7:cc:4b:66:8a:13:a3:39:62:
58:7e:4c:e5:9d:00:b8:34:aa:de:1f:ca:88:0f:39:32:43:66:
7f:ad:76:ae:d7:48:fb:91:a4:45:c7:7c:df:4b:f4:3e:ed:2b:
75:80:b4:38:57:24:91:dc:84:9b:8d:2e:d7:4d:81:e6:24:97:
14:ee:d4:fa:44:f3:79:91:a9:0d:d7:6d:72:e4:7b:2b:34:6d:
c2:08:c8:20:c3:6d:2f:bf:66:49:ba:9e:21:03:53:30:7d:4a:
c2:69:6f:b2:ee:4a:53:c6:12:65:ec:b1:ce:f6:7c:b2:55:7f:
22:56:84:92:38:a3:54:54:73:cf:dd:2f:9a:5e:18:ae:0d:69:
f2:85:91:33:86:f0:7a:99:56:6f:eb:fa:f3:8a:62:bd:44:c7:
0c:5c:17:e6:4c:40:fd:39:ae:37:3d:e1:a0:94:53:0b:7c:59:
4f:cd:64:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:18 2025 by rpki-client