Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json)
Hash identifier: Ceqx/jqkUVuenaxJPkzn+oTsLdlqu/IibeL+4uijMMA=
Subject key identifier: A9:4F:27:5B:53:FE:07:33:00:74:32:63:C4:57:28:29:C4:3A:BC:1F
Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Certificate serial: 019A50E27B6D44A955AA918E68722623B4C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
Manifest number: 0E52
Signing time: Tue 04 Nov 2025 22:00:11 +0000
Manifest this update: Tue 04 Nov 2025 22:00:11 +0000
Manifest next update: Wed 05 Nov 2025 22:00:11 +0000
Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: c9ihm5Ty01rIT5rlhe2hhbJRv9N/SGhvPeUrkDxKhgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:7b:6d:44:a9:55:aa:91:8e:68:72:26:23:b4:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c
Validity
Not Before: Nov 4 22:00:11 2025 GMT
Not After : Nov 5 22:00:11 2025 GMT
Subject: CN=a94f275b53fe073300743263c4572829c43abc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c3:0f:87:78:39:6a:86:3a:00:23:23:ed:e5:
36:53:fa:37:5a:b3:7a:48:4c:fd:06:38:67:d0:97:
84:00:52:17:c6:b9:53:eb:27:30:c2:a2:9c:3b:03:
92:77:fd:f4:cb:c7:ee:26:6d:3f:14:31:e0:dd:f1:
ec:c4:72:65:0d:d9:1f:26:7b:e7:a4:18:f8:fd:eb:
d7:61:d9:e1:d5:40:32:d8:1b:dd:13:b5:03:de:c2:
dd:cd:9f:79:2e:9a:a3:94:91:4c:b4:87:99:8f:34:
33:54:88:57:49:67:b6:6f:a7:93:7f:f7:61:70:5d:
36:b3:88:43:41:96:c2:4d:f1:51:d3:b5:9f:09:67:
18:4c:17:82:8b:2a:c4:17:8b:33:d7:db:fe:10:fb:
96:ab:48:ae:7c:5f:3f:35:c7:03:87:97:74:60:bd:
c3:3e:3b:44:bc:37:bb:24:9a:71:83:b8:6f:c0:96:
8e:77:f5:92:e7:d3:67:39:f3:02:bf:c6:b0:a5:a6:
d8:2b:4c:63:a4:a5:e2:38:c0:dd:fa:1b:dd:65:f0:
93:11:7f:5b:e4:78:41:2f:f8:c3:e2:de:78:25:db:
13:65:52:e7:94:c8:10:12:1c:b0:73:70:d8:9e:7d:
b8:66:d7:86:70:92:47:3a:d6:e5:9d:55:b7:d7:47:
a3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4F:27:5B:53:FE:07:33:00:74:32:63:C4:57:28:29:C4:3A:BC:1F
X509v3 Authority Key Identifier:
keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9a:f3:df:1b:63:8b:2e:92:10:c9:82:8c:7b:62:c5:62:02:
7f:f9:06:1f:2a:f1:2c:0d:f9:26:5b:09:30:c8:23:86:07:74:
b5:e2:aa:9a:52:d5:66:ce:29:e5:34:8c:55:03:e1:a9:e5:7f:
4e:89:ae:78:c7:dd:52:77:7e:2b:19:4d:fe:e9:02:1a:ca:09:
2b:1f:66:97:fb:46:c5:46:80:4b:c0:48:35:d5:e2:98:86:ae:
ac:3d:f4:d1:d4:8b:fe:86:07:60:d2:82:4b:53:a6:88:f0:65:
7e:ea:d5:2b:2e:2f:b2:ba:0c:8e:88:05:e3:7e:f5:ca:12:8e:
28:4c:5e:09:b4:9f:f7:0d:98:46:e3:f4:9a:4d:aa:9f:3e:73:
49:92:47:4a:1e:3e:6a:a4:46:50:70:24:5c:8d:9c:a5:8f:94:
c5:60:9d:d7:8c:a4:8b:c3:28:c5:cd:e3:fc:49:bd:a1:47:a6:
e7:d4:7f:8f:e2:7c:f6:a4:11:f3:a6:3d:d3:29:04:4f:09:00:
84:78:c2:8b:08:b0:59:a6:07:a7:85:fa:aa:ee:ea:bb:81:56:
c9:c6:07:3c:c0:16:07:68:4a:b4:3d:47:45:0f:b1:73:7c:a8:
bb:ee:9e:6f:31:bb:fa:f9:a4:b4:8b:a5:43:3f:85:ed:63:2f:
01:79:03:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:50 2025 by rpki-client