Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
File: Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft (raw, json)
Hash identifier: Sy3xOApB+QQj9LtEUyEO06IAqcFKUoqJWWAxoP6fjpo=
Subject key identifier: F7:CE:E4:43:C6:F0:59:C5:FC:90:09:38:EA:C6:F9:85:1F:94:3F:1D
Authority key identifier: 43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
Certificate issuer: /CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Certificate serial: 019A0147A4A4B883B464048AF9ACDF82BAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
Manifest number: 0175
Signing time: Mon 20 Oct 2025 11:01:03 +0000
Manifest this update: Mon 20 Oct 2025 11:01:03 +0000
Manifest next update: Tue 21 Oct 2025 11:01:03 +0000
Files and hashes: 1: Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl (hash: KXTko8H1wBEvoAqt+ApdZVX5daM7ovUVNV02WqshMNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 11:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:a4:a4:b8:83:b4:64:04:8a:f9:ac:df:82:ba:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=437f166afb3f102fb12543b927097c96b6ba9dc2
Validity
Not Before: Oct 20 11:01:03 2025 GMT
Not After : Oct 21 11:01:03 2025 GMT
Subject: CN=f7cee443c6f059c5fc900938eac6f9851f943f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:13:4c:79:c8:7f:a3:37:5a:e8:95:25:4b:f5:
13:f7:1f:8c:e5:89:c9:a8:07:ff:67:f0:69:b0:72:
d1:71:51:aa:c6:83:97:e4:71:7c:5e:aa:12:b0:e0:
e9:3f:3c:af:82:d5:c8:47:df:41:16:b8:f0:f6:1e:
74:07:61:b3:d3:43:33:67:6b:b7:03:b6:87:28:89:
52:63:e6:c9:14:9c:8a:f0:95:cc:79:bf:8b:fa:bc:
15:45:54:3e:51:b2:90:4f:eb:07:b0:33:25:35:a0:
ee:58:f9:08:17:11:c8:45:98:ee:7e:0b:a3:b2:84:
cc:18:94:89:9c:75:bc:54:bd:11:47:da:7f:ca:76:
89:87:89:33:ce:39:d7:7a:eb:6c:3a:55:3b:99:5d:
b6:15:37:e7:0e:4b:23:86:e7:90:dc:b3:78:8e:2d:
77:95:e6:98:08:15:92:15:b4:e1:99:58:39:d0:df:
07:71:ba:89:1b:d3:45:e7:a0:99:a2:50:8a:ba:13:
2a:87:be:34:89:8d:1d:c9:9e:d1:90:e0:a0:da:b5:
17:a3:cd:9d:49:b9:3e:87:45:ea:ff:4f:19:a8:4d:
14:6d:1b:ec:62:ac:ae:09:c0:e0:4e:36:11:ee:69:
d1:d3:57:ec:3c:25:9f:45:50:2f:24:88:3f:72:7a:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CE:E4:43:C6:F0:59:C5:FC:90:09:38:EA:C6:F9:85:1F:94:3F:1D
X509v3 Authority Key Identifier:
keyid:43:7F:16:6A:FB:3F:10:2F:B1:25:43:B9:27:09:7C:96:B6:BA:9D:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q38Wavs_EC-xJUO5Jwl8lra6ncI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fa11a7-2426-428e-9d87-03e1d3513c14/1/Q38Wavs_EC-xJUO5Jwl8lra6ncI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:e6:32:97:8f:0a:ab:94:4b:fe:52:f3:7f:57:81:81:80:
04:4f:71:70:10:4f:d0:c2:01:f1:5d:d2:56:cc:a6:1d:e2:b0:
cc:95:9a:7e:17:e3:3e:93:9d:ff:36:09:51:21:d8:89:c0:45:
d7:56:f6:cd:9e:de:6c:23:a1:91:52:c8:08:28:b0:d6:92:18:
8d:18:d8:e8:31:82:79:97:74:d3:98:93:98:04:ab:dc:31:d1:
d8:f3:f4:c0:47:e0:66:64:e6:cb:9c:c0:df:51:b9:9f:15:28:
2a:fe:1c:a5:51:3f:e8:fc:18:07:5a:61:f7:13:ee:93:a0:a9:
06:c5:b8:0a:df:2f:3e:d6:40:34:39:cf:fa:7a:8b:0a:bb:c8:
7c:1b:69:5e:3d:4e:26:90:19:22:25:17:f1:a1:eb:a8:68:a4:
ba:d8:d7:b3:ab:59:87:c8:8c:39:2d:55:a4:ab:c6:76:6b:e6:
c3:e6:33:18:47:de:6f:7f:b3:2a:d8:2e:1e:14:b3:b0:c8:15:
f4:87:51:47:cf:f9:de:1d:4e:4f:92:4c:b3:80:e4:6e:95:95:
d8:59:97:59:d6:c7:b0:da:b0:51:76:fa:3f:53:d8:12:3b:ce:
f6:82:46:51:67:f8:f6:90:f0:cb:6e:62:22:59:bf:06:1d:ea:
e3:30:28:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:42 2025 by rpki-client