Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: mpmZWWEnmpfnJxEkToA0IMmU9vNNwjCBtwW++rcX9i0=
Subject key identifier: 05:AD:B7:84:FC:8D:16:10:DA:03:49:72:BE:96:6F:86:5B:21:EA:C6
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 0199FD34942329E4B33BCE7599218DAE5FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 1438
Signing time: Sun 19 Oct 2025 16:01:45 +0000
Manifest this update: Sun 19 Oct 2025 16:01:45 +0000
Manifest next update: Mon 20 Oct 2025 16:01:45 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: JOEf1Kku5enY0PsK4EYt++WcS4bt3q6PdcJlmvuPUws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:94:23:29:e4:b3:3b:ce:75:99:21:8d:ae:5f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Oct 19 16:01:45 2025 GMT
Not After : Oct 20 16:01:45 2025 GMT
Subject: CN=05adb784fc8d1610da034972be966f865b21eac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:72:77:48:1c:7d:5d:54:21:49:aa:c0:ab:50:
90:d4:62:3f:37:1d:1a:6f:4e:51:07:27:cb:f5:18:
60:ff:8c:de:11:dd:11:9a:e4:27:24:e2:9d:0a:c7:
a5:46:75:41:e7:fe:69:7b:9a:b2:4c:b9:60:08:1a:
da:0b:a8:91:3b:12:09:72:fb:31:b7:49:d4:f1:20:
e6:37:b5:69:df:c3:94:4b:1f:9e:57:f2:2c:87:ef:
42:f8:f2:13:d3:b4:cb:c7:c0:15:cd:e1:b2:ab:03:
15:01:e0:e9:e6:bc:c5:1f:07:ee:13:06:80:89:83:
10:a5:c3:28:6d:88:d9:82:ab:25:d9:24:e6:8b:24:
04:6b:ba:20:24:44:9a:79:f6:a8:47:4f:a3:39:b0:
a1:c2:bf:ed:8d:ea:97:a6:05:85:5a:c2:3f:32:b3:
00:e4:74:5b:8f:d9:a2:e8:98:d8:1c:29:64:77:d6:
ce:5a:45:08:bb:c8:e7:e0:f8:57:d5:66:eb:9b:8b:
25:3b:d6:55:0d:0b:e0:79:f1:97:3e:65:87:5a:7b:
34:39:db:b5:5c:7e:2f:77:94:77:f2:c4:51:c5:cb:
fd:74:8d:25:d7:b1:61:f6:a0:84:7f:3a:c7:17:ad:
e2:e0:a7:5d:5f:a3:56:e8:5b:ef:36:cc:79:3d:a9:
38:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:B7:84:FC:8D:16:10:DA:03:49:72:BE:96:6F:86:5B:21:EA:C6
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:3f:18:e3:b6:46:37:04:e9:76:39:04:05:af:48:3c:51:83:
aa:01:44:fd:9d:4e:57:ad:9b:0f:c4:c0:78:f4:2c:5f:6e:39:
8a:0c:23:e3:4e:6d:c8:fb:fd:d3:e5:b2:ab:19:d9:4d:96:e7:
47:c4:00:39:ad:a2:68:1e:89:4c:25:f6:a1:3c:13:57:1e:f1:
29:c5:81:93:d1:e1:53:9e:e7:d5:f5:9e:42:bc:35:b8:fa:3e:
fc:75:85:7f:62:da:ad:f7:d7:46:3f:0c:f2:68:fb:a3:93:7e:
8b:08:84:39:4b:15:5b:4a:8a:4f:8b:c0:f4:39:dd:ba:a8:bf:
c9:c9:e2:68:a6:28:25:22:eb:cc:d2:1f:56:33:6c:f0:de:46:
47:ac:43:42:6e:90:d4:79:f9:08:b4:4f:f7:d8:e4:55:5a:c1:
f9:66:0a:bb:88:1f:99:b6:99:32:ef:38:90:fe:b8:cf:fd:50:
d2:2e:b7:ef:cf:36:ec:14:67:c2:22:e8:3d:45:77:67:3c:90:
0e:d6:86:57:46:55:09:40:cf:18:3a:fb:4f:5f:6e:5c:f3:c2:
e8:b9:b1:57:e6:35:ab:e7:5b:6a:77:9d:e5:ad:ca:ef:7a:73:
72:7d:e6:7e:09:00:d9:5c:9a:39:1b:97:6b:18:6e:4f:75:f7:
dd:64:92:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:17 2025 by rpki-client