Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
File: Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft (raw, json)
Hash identifier: x7LtFPY3VbpzsEYQij8ztU+bcUAVlg1kCZ+M0aWBb48=
Subject key identifier: 65:70:44:C6:D6:D0:2B:73:3C:E9:40:FE:41:A9:96:B6:10:C5:51:A9
Authority key identifier: 32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
Certificate issuer: /CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Certificate serial: 0199FBEC2FD28B0A99C75F2FE96DFB2B72EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl (hash: l/X0udTDFMuGVKKQtMCdc8lSOoJqnqe3lKwXPvbfLa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2f:d2:8b:0a:99:c7:5f:2f:e9:6d:fb:2b:72:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ad7f7d838485a19e00279968a9b98683a4c56e
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=657044c6d6d02b733ce940fe41a996b610c551a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:92:e1:c8:04:80:db:75:c7:91:b8:64:c2:9e:
c8:62:0c:a5:91:ff:53:05:33:d0:c4:a1:db:97:a3:
fe:27:ba:89:6f:6f:c2:31:7b:e4:ba:97:46:9d:97:
7f:f8:6a:94:16:f5:fa:45:67:1d:41:4e:8b:4d:a4:
7f:53:2f:03:e1:28:2a:f8:88:5c:84:a1:97:38:e4:
fb:44:94:3f:84:ec:1c:78:e3:96:dc:b6:84:fa:e7:
c1:af:a4:8a:69:65:36:a3:51:f0:1b:8b:39:e6:06:
58:fa:a5:52:45:df:ab:cd:a1:26:53:ca:a2:33:b5:
87:e9:8c:f2:4c:7a:84:76:ca:c9:d6:9d:9f:a9:75:
b8:a0:1c:30:da:b7:8f:f6:3a:bd:58:c0:9e:52:09:
1a:b8:1a:0f:87:47:69:75:d4:9f:65:95:c3:d2:78:
91:46:cb:71:f6:89:e2:11:77:86:d7:ce:ba:c7:19:
16:b2:13:21:3a:2c:68:14:7b:b5:52:48:cf:d0:3f:
87:2f:d5:49:8b:73:5d:70:b9:3d:23:b8:2b:8f:cf:
a5:2d:af:d9:d4:5a:d8:eb:60:d8:07:c7:49:d9:84:
12:a5:76:f4:3f:04:ec:10:c8:65:9d:9b:73:3f:b3:
64:e5:41:7d:34:37:78:84:ae:6e:e8:26:18:9e:a7:
71:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:70:44:C6:D6:D0:2B:73:3C:E9:40:FE:41:A9:96:B6:10:C5:51:A9
X509v3 Authority Key Identifier:
keyid:32:AD:7F:7D:83:84:85:A1:9E:00:27:99:68:A9:B9:86:83:A4:C5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mq1_fYOEhaGeACeZaKm5hoOkxW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53b750-6916-4c3f-bdfb-94c4e4ebcd41/1/Mq1_fYOEhaGeACeZaKm5hoOkxW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:fb:81:a6:dc:74:b0:08:75:a8:94:b3:b9:c3:0f:b4:d2:48:
54:55:f3:fd:1f:bd:5d:a1:02:b7:b2:cb:3b:64:b1:4c:30:9f:
fa:44:70:93:8d:2c:fd:6c:e2:e4:17:45:e9:9c:b7:4a:1d:de:
a2:49:fc:d5:9f:e3:7c:4c:bd:8e:2f:83:9f:5b:a5:56:d1:b3:
32:40:c2:cf:be:cf:d3:0f:5f:59:cd:28:ae:d8:a3:83:24:af:
0b:7a:3c:58:43:4e:e3:e0:12:ff:2d:78:c1:ba:4b:c5:3a:f8:
72:b0:63:9e:0a:55:52:2d:0c:e1:58:35:07:6c:d7:e4:28:5f:
bc:0e:a0:21:6b:6b:af:84:50:a6:e6:af:f5:6b:7e:b1:ef:15:
29:2b:78:4c:00:11:98:7b:77:5f:0e:70:47:89:44:20:a1:19:
14:ea:08:49:65:91:06:fa:04:f5:9d:97:25:38:b5:05:4f:5f:
0c:33:bc:af:4f:5a:02:60:92:cb:0c:f6:b5:63:7f:64:6e:85:
49:ce:3d:a5:99:00:2c:a4:47:d1:70:3b:1f:bf:35:e4:94:ca:
81:b4:71:a8:2a:3a:04:b3:6b:d2:4f:52:86:ff:22:30:dc:19:
0a:9d:cd:3c:a8:bd:19:14:9d:e1:9f:03:3d:77:27:3d:ed:c0:
c0:78:46:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:53 2025 by rpki-client