Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
File: QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft (raw, json)
Hash identifier: 00X8mqrYQNlUIomefMhGNrt6YpVcmBh30e6lYdIiG4M=
Subject key identifier: 70:C7:32:31:82:99:1D:5D:42:D9:A1:77:1F:A4:79:FE:B3:6A:96:2D
Authority key identifier: 43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
Certificate issuer: /CN=431c57e1921d31a34aebd12e507a136fe04598c6
Certificate serial: 0199FB4605E33AAD8A210455DA82F351D6DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
Manifest number: 049E
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl (hash: ASboQXwv3qybtMKqv+5guXSwZRnXrc//FasI6DubMOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:05:e3:3a:ad:8a:21:04:55:da:82:f3:51:d6:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=431c57e1921d31a34aebd12e507a136fe04598c6
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=70c7323182991d5d42d9a1771fa479feb36a962d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cb:b1:13:9e:b5:e4:1d:32:31:84:b6:79:59:
41:0a:e4:0e:04:db:5a:c7:94:13:6e:3e:44:f1:49:
5d:82:70:58:26:2e:61:c4:52:05:d9:0c:80:c3:91:
c4:c2:82:08:c0:53:fd:bf:51:97:c4:c8:c8:5c:e1:
ef:ca:75:d5:37:2c:c8:33:73:c9:b1:39:6e:13:a8:
c8:a4:00:d0:b8:37:2e:aa:a6:b2:a2:b4:51:38:8d:
82:76:9a:ce:a8:21:b8:46:98:d5:5c:36:0a:1e:31:
ae:bb:3a:11:b9:cd:9d:4b:61:3f:ed:25:5e:f1:d3:
76:9a:7f:ec:46:a7:cd:62:b2:9d:5b:36:dc:89:c0:
f1:fb:6f:12:1d:68:d7:d5:e7:3a:d8:a8:ab:57:1f:
c8:df:1e:7a:8a:13:8f:5f:2d:e7:ea:15:a1:d5:e7:
a4:e8:f7:6f:63:cc:44:d2:fe:dc:f3:fc:48:90:5b:
3b:e9:bd:27:d3:60:f3:b1:87:68:fe:2b:7c:5c:83:
ef:da:92:69:12:e5:6f:9e:be:17:ab:5c:76:40:fe:
54:4b:b8:4e:19:68:66:a1:5d:5c:05:1e:f0:af:35:
52:eb:16:23:81:92:64:89:5c:57:81:2d:bc:04:70:
a3:fd:d9:d1:a6:dd:f5:53:6f:a6:80:b2:8e:c5:f7:
52:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:32:31:82:99:1D:5D:42:D9:A1:77:1F:A4:79:FE:B3:6A:96:2D
X509v3 Authority Key Identifier:
keyid:43:1C:57:E1:92:1D:31:A3:4A:EB:D1:2E:50:7A:13:6F:E0:45:98:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QxxX4ZIdMaNK69EuUHoTb-BFmMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/0f1aaf-b173-4ce1-bcba-cc353ebacba6/1/QxxX4ZIdMaNK69EuUHoTb-BFmMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:19:af:a3:b6:53:fb:9a:2a:ba:31:79:f1:b2:93:90:bd:ac:
e9:ba:36:89:87:b7:23:59:21:7e:06:98:7b:9d:49:86:b3:8f:
b5:7d:2d:dd:75:83:c0:38:ea:53:97:92:2f:7f:45:11:ee:81:
1c:98:f8:bf:11:14:da:17:7f:43:6c:13:d0:8f:98:ef:cf:39:
b8:5c:5a:9c:e5:14:2c:e0:59:71:cb:27:eb:a5:7c:49:0f:9d:
9d:2e:96:92:f3:f0:43:ea:6c:93:c2:2a:94:75:32:9a:27:18:
e2:7d:63:89:dc:e5:6f:cc:a8:6a:45:72:77:cd:d0:6d:15:f9:
4e:3b:b3:d4:cc:01:60:e4:42:8d:c7:09:e9:85:c8:ff:a0:c3:
32:2d:e3:7d:61:5e:0f:b0:30:b6:75:53:0c:94:e0:16:9f:0d:
fe:2c:c7:a3:b7:9b:bf:fc:d1:f5:22:70:56:3f:20:29:21:b3:
7a:eb:12:96:c3:76:ec:3d:ba:ea:39:22:72:ba:a5:ef:55:0a:
3c:bc:10:73:65:1a:83:34:5d:23:18:23:3d:f1:63:50:20:45:
c0:79:8a:ec:b7:db:92:1d:86:3e:35:8e:de:28:4b:12:db:3e:
96:6c:2c:42:33:64:c8:38:5b:9e:c1:64:6b:63:db:e5:01:4f:
c0:c2:db:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client