Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
File: Mq_f-s-cNpjvejay5gvne4DmLQE.mft (raw, json)
Hash identifier: 45thF4lSp8FR3DmqkkfC5TWAshoqagN4ThOB9iRItHc=
Subject key identifier: 75:11:03:B1:71:D8:F1:99:1C:7A:0E:D2:9A:9E:9B:39:58:CF:AD:0C
Authority key identifier: 32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
Certificate issuer: /CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Certificate serial: 019A4EF5140C4465FAF940F039798460360A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:15 +0000
Manifest this update: Tue 04 Nov 2025 13:01:15 +0000
Manifest next update: Wed 05 Nov 2025 13:01:15 +0000
Files and hashes: 1: Mq_f-s-cNpjvejay5gvne4DmLQE.crl (hash: OxRv3j4PLLG41JfGo0OCfVzGGGlfiIE+Qec0F07mh9s=)
2: m-mgeij2s-izZmoG2EJOGobZRbs.roa (hash: 50Vl722SlJE3RG+BG14L6AWHGFv4OwGxsav/vScZL0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:14:0c:44:65:fa:f9:40:f0:39:79:84:60:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32afdffacf9c3698ef7a36b2e60be77b80e62d01
Validity
Not Before: Nov 4 13:01:15 2025 GMT
Not After : Nov 5 13:01:15 2025 GMT
Subject: CN=751103b171d8f1991c7a0ed29a9e9b3958cfad0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:94:ad:5a:c1:32:2d:70:52:27:ef:af:1f:dc:
08:a0:5a:8c:5a:4f:0d:7e:c6:5b:b7:75:8e:e1:d9:
8a:26:fc:00:ba:89:c3:0b:a7:f0:bf:b7:a8:30:3d:
dc:fd:0a:c8:c0:12:d8:2f:19:ef:6c:19:a7:3f:44:
d6:09:30:01:42:13:d5:e1:ce:60:c8:ab:a5:73:d7:
f7:85:3f:9e:a0:86:6a:f4:87:c5:3b:00:2a:60:35:
bc:94:f0:58:00:dc:da:b3:8a:15:97:db:56:aa:6b:
25:af:e3:04:a2:6f:5f:2c:ba:cd:87:65:d8:06:ad:
0f:65:3d:38:cf:0d:f0:6c:8d:37:10:34:26:0c:bd:
e5:3e:5a:dd:17:c8:79:d6:8e:d9:5f:8a:c3:ce:da:
b4:9d:2a:f5:e7:40:6b:45:1b:6b:f5:33:b9:5c:88:
fb:f1:ef:28:42:d6:a5:79:49:a5:8e:fa:c4:72:f7:
17:27:2d:01:62:b1:1a:54:f8:1b:58:0c:62:cd:cf:
6e:9e:82:7c:ee:2b:27:07:53:5a:a5:18:ac:60:2f:
fc:69:4c:9a:5e:3e:d0:6f:f6:56:65:bf:c7:57:ed:
86:36:21:71:34:8c:74:ff:fe:02:d3:89:9e:ce:5a:
89:c4:3f:9c:c6:7e:2c:95:ec:b1:62:26:2f:2f:82:
f6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:11:03:B1:71:D8:F1:99:1C:7A:0E:D2:9A:9E:9B:39:58:CF:AD:0C
X509v3 Authority Key Identifier:
keyid:32:AF:DF:FA:CF:9C:36:98:EF:7A:36:B2:E6:0B:E7:7B:80:E6:2D:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq_f-s-cNpjvejay5gvne4DmLQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/eaeb83-a20c-4fd8-9314-25d30ebcfcad/1/Mq_f-s-cNpjvejay5gvne4DmLQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:31:a1:d5:44:36:2c:4b:d9:44:b3:12:ab:10:4e:e8:5a:69:
b9:e6:3d:b3:df:c8:b3:03:6b:80:41:b5:b5:87:6a:88:ce:45:
20:aa:c7:8f:52:e0:11:f7:2a:be:a1:2f:fd:ba:2e:1f:12:1d:
9b:66:a5:66:4d:29:24:c4:13:cd:9d:96:d4:f8:20:30:30:be:
63:c0:77:ae:be:4b:a5:53:c6:d7:f7:a1:fc:89:4c:04:8d:b8:
e8:b9:ee:94:74:41:a7:8d:29:e6:2a:26:dd:17:d9:03:9b:3a:
58:3c:5c:05:54:9a:3e:e3:3a:a2:d6:74:bd:d4:f3:79:c4:bb:
20:4f:08:f7:28:e3:15:9b:3d:51:7b:cd:fc:02:f9:50:fc:9d:
93:b9:87:9b:5a:6a:06:ca:df:fc:53:b4:7e:3b:61:99:6e:4e:
75:d9:0b:8b:73:14:18:46:5e:26:03:79:68:43:bb:f4:02:69:
1a:b9:e4:ff:d7:19:a2:a4:c0:45:c6:46:a1:be:5b:7b:46:f6:
3b:28:cd:b5:45:1c:91:2a:02:ad:27:67:72:9a:0b:5c:77:01:
7d:c3:77:e2:7b:a9:22:9d:72:59:42:e2:68:7d:53:49:24:1c:
6a:e7:12:65:1a:ac:e0:5d:b4:23:44:8b:08:ad:90:4e:38:9b:
44:81:06:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:32:54 2025 by rpki-client