Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
File: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft (raw, json)
Hash identifier: hKEELhy3WZCxw2sFR58b9Yr014sm4rj5zMZuJ3sI6sw=
Subject key identifier: E8:81:00:10:E5:17:6D:FD:15:D5:29:99:1C:3E:9C:4E:DE:8E:C6:4B
Authority key identifier: 43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
Certificate issuer: /CN=43a2ef27472a9604bf626fea0e187f8db624134a
Certificate serial: 019A05C8C1502D795C77A674D14AA10811E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
Manifest number: 0E85
Signing time: Tue 21 Oct 2025 08:00:34 +0000
Manifest this update: Tue 21 Oct 2025 08:00:34 +0000
Manifest next update: Wed 22 Oct 2025 08:00:34 +0000
Files and hashes: 1: Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl (hash: CCwViVBECHKw8mCY66pY3CN3jiXbqkLP80D8eO1IRkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:c8:c1:50:2d:79:5c:77:a6:74:d1:4a:a1:08:11:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a2ef27472a9604bf626fea0e187f8db624134a
Validity
Not Before: Oct 21 08:00:34 2025 GMT
Not After : Oct 22 08:00:34 2025 GMT
Subject: CN=e8810010e5176dfd15d529991c3e9c4ede8ec64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:1d:56:f5:79:f5:e2:d3:d4:80:86:cf:07:5f:
47:95:72:bf:e9:a3:23:0b:63:a2:f8:27:ae:3c:ae:
7e:5a:ce:db:b0:f5:c6:33:6e:23:ed:25:01:44:63:
0e:df:da:2b:e3:01:e8:f7:ae:7e:bf:fc:ab:16:e7:
4c:71:7d:ac:4b:55:55:3c:06:90:bb:c8:92:5a:d8:
11:cd:79:f6:73:6c:5e:17:94:2a:ab:1c:e6:e9:d6:
51:2d:29:d9:e9:04:2a:68:da:fb:30:1d:12:5f:17:
ed:d1:9b:43:0c:e0:4b:aa:87:4d:f7:53:67:8d:1d:
f0:c4:2f:84:2a:6c:90:39:44:50:ad:69:9e:7a:71:
23:86:2a:08:7c:8b:1c:56:fc:93:7a:57:ea:6a:ad:
63:68:1c:c3:3e:0e:1b:fd:47:91:af:04:80:f7:e9:
22:c8:45:7e:6f:bc:99:29:ab:32:c8:d7:c7:90:ff:
e0:d0:01:0b:82:3f:9b:07:8b:ac:6f:1c:e7:7c:d2:
f3:49:89:a7:34:0a:b4:4e:21:4f:89:19:c5:99:c6:
de:88:e6:ad:94:d6:b4:e9:92:bf:bd:18:96:f4:3c:
e2:68:f3:64:1e:08:36:06:0d:e3:c0:79:28:db:48:
a4:f0:32:6d:1e:cf:51:36:81:b9:55:a0:83:0f:79:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:81:00:10:E5:17:6D:FD:15:D5:29:99:1C:3E:9C:4E:DE:8E:C6:4B
X509v3 Authority Key Identifier:
keyid:43:A2:EF:27:47:2A:96:04:BF:62:6F:EA:0E:18:7F:8D:B6:24:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/92f6fb-6791-4bfd-9e68-20e1b29c0c12/1/Q6LvJ0cqlgS_Ym_qDhh_jbYkE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:35:db:1b:09:ab:bc:ad:37:2b:25:80:d6:1f:1c:34:d8:a4:
be:ce:13:b0:55:16:e6:9d:e1:38:cf:d2:50:09:61:32:38:84:
57:6f:40:85:c4:43:2e:65:7e:29:17:a9:7c:a2:79:8a:b6:1d:
99:2f:42:43:43:a3:a2:9f:5b:61:8d:42:33:2d:25:6a:57:0b:
47:1e:d4:d1:4a:df:fb:7f:ff:13:1a:08:57:1c:d7:1c:84:21:
91:f9:62:a6:08:8b:96:a8:61:8b:3a:dd:70:80:ad:7e:53:f6:
1c:e9:39:02:cc:38:8f:86:6b:ac:5e:fc:a3:e2:c7:eb:be:99:
1f:f5:58:15:7a:95:20:a1:a3:fe:89:66:a8:3d:20:2a:56:ce:
2a:f8:d7:d1:38:a5:56:3e:7c:c5:00:ea:bb:41:89:e6:28:75:
d8:3a:bd:e3:a8:63:20:95:e7:bb:d0:af:9c:df:6b:5d:6f:6c:
78:16:e0:ca:d4:07:fb:36:1c:b1:40:e4:03:d3:a1:6d:73:cc:
d4:e3:66:fd:ae:2d:aa:1c:96:e0:1b:dc:1a:67:2a:e7:a1:b8:
d5:32:37:05:e5:f0:2e:06:17:f3:bb:20:1b:0f:ad:68:44:55:
20:6f:89:19:e1:5f:71:8d:5e:09:50:8e:bb:bf:7d:2b:26:1a:
15:ec:8d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:12:29 2025 by rpki-client