Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: 5rvUoR/suSXEqx1ZwmXkJdst0ZFVB+Vg710UOQRjPYo=
Subject key identifier: F3:9B:11:63:4B:37:62:11:0E:66:34:85:DD:CB:59:0D:C1:04:B4:71
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 0199FBEBDE28140C9B51C96B03E8C938D1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 0411
Signing time: Sun 19 Oct 2025 10:02:43 +0000
Manifest this update: Sun 19 Oct 2025 10:02:43 +0000
Manifest next update: Mon 20 Oct 2025 10:02:43 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: D14kYYhPBc0gVaGTggN/Z6iQndv2bEgKltoyoD5E8S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:de:28:14:0c:9b:51:c9:6b:03:e8:c9:38:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Oct 19 10:02:43 2025 GMT
Not After : Oct 20 10:02:43 2025 GMT
Subject: CN=f39b11634b3762110e663485ddcb590dc104b471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6e:4d:69:75:ac:f1:72:31:2a:a3:ec:11:26:
5b:60:24:49:1e:4d:d7:68:66:7a:d7:17:c9:5d:31:
41:54:cd:95:31:a4:14:0d:a3:02:71:23:d2:60:d6:
72:f8:ac:65:39:73:14:55:e3:0e:25:96:c6:69:ac:
9c:42:c4:21:30:bd:fa:10:72:b7:af:8f:2b:e0:8b:
0a:f8:75:45:24:24:4e:eb:15:ea:82:5a:b8:fc:0c:
bd:5e:c4:2e:32:14:c0:cc:69:5b:35:7a:67:45:bc:
16:be:2b:2d:9a:2a:87:41:a7:91:5a:40:30:63:06:
91:92:d6:00:1c:59:f4:99:22:46:8a:9e:2c:ba:1c:
98:c5:02:2d:91:97:0c:a2:a3:d2:1a:48:66:29:60:
31:a8:2f:2d:9e:45:3c:9f:9a:67:58:07:ea:ea:d7:
d3:2b:4a:17:fc:11:45:cf:d4:2c:19:0b:20:a1:ce:
0b:ec:cd:96:96:2b:4f:93:ab:f3:b3:bc:0e:76:43:
a8:63:f1:f5:01:94:d7:b6:cf:58:6e:b6:59:fc:93:
f8:16:47:0a:dc:1e:9a:dd:e6:68:20:f2:dc:ae:3e:
63:95:6e:37:ba:02:16:c8:cf:e2:94:05:70:3a:3d:
1b:be:3b:2b:5f:5a:5d:8a:33:d8:f9:ba:37:6b:00:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9B:11:63:4B:37:62:11:0E:66:34:85:DD:CB:59:0D:C1:04:B4:71
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:d7:ec:41:d3:bf:93:47:ba:c6:d7:5f:33:0a:77:4b:2f:a7:
ad:30:7c:6a:b0:df:cb:4f:bc:e0:81:cc:67:0a:71:4a:aa:c4:
43:cd:6f:36:06:9b:4f:21:fe:a3:ae:25:50:b5:b2:c4:a9:72:
90:82:47:2e:de:f5:83:76:75:50:fc:54:1a:62:1f:0e:9d:d1:
d5:0b:69:13:91:06:7d:ce:96:42:21:eb:8a:9c:33:8a:55:46:
03:00:dd:d6:7d:f6:99:99:e4:d7:ce:a9:69:f6:26:bb:db:2c:
b8:e7:3e:6e:84:00:8b:b9:d7:49:bb:42:92:0b:a9:8f:eb:ab:
53:0d:07:21:e0:d7:51:70:c9:50:3e:1f:83:3a:bf:60:6f:49:
9e:41:32:d3:ac:a9:50:5b:0b:e1:be:53:ef:3d:75:7c:e1:81:
1f:f6:02:3c:91:68:08:95:10:a0:0f:8b:f2:2c:18:83:49:a8:
ae:41:e6:98:c0:b7:c2:5e:55:84:93:c6:90:4f:ef:b2:5b:f4:
a6:97:92:1b:3d:de:67:2f:45:26:99:ff:36:1a:5f:a8:e7:d6:
55:be:af:37:6d:9b:bc:03:42:3d:2a:37:fe:6a:bf:b0:fd:fe:
b0:36:d2:bb:1a:d2:99:19:fb:5b:fa:ae:50:10:a2:87:b8:72:
be:f9:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client