Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
File: QFphtYwdUt5SLgQQCcv80fflK3w.mft (raw, json)
Hash identifier: yT39UGKpdaeGxDyTfaN0RY2+ygUv+rFzl0pbL6Ji2us=
Subject key identifier: 92:B9:9B:8B:63:53:32:57:1A:E2:D6:4E:11:3D:92:ED:36:63:AB:8E
Authority key identifier: 40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
Certificate issuer: /CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Certificate serial: 0199FBEB4A9FBAFCB23E932AF5DFE6045180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
Manifest number: 11DC
Signing time: Sun 19 Oct 2025 10:02:05 +0000
Manifest this update: Sun 19 Oct 2025 10:02:05 +0000
Manifest next update: Mon 20 Oct 2025 10:02:05 +0000
Files and hashes: 1: QFphtYwdUt5SLgQQCcv80fflK3w.crl (hash: zMHJPUyZTVzFjZhy4ZVvf84wUbgqgMprT3r0dVFDYLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:4a:9f:ba:fc:b2:3e:93:2a:f5:df:e6:04:51:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=405a61b58c1d52de522e041009cbfcd1f7e52b7c
Validity
Not Before: Oct 19 10:02:05 2025 GMT
Not After : Oct 20 10:02:05 2025 GMT
Subject: CN=92b99b8b635332571ae2d64e113d92ed3663ab8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:53:96:8f:85:ff:7a:1b:d7:07:eb:66:b3:d5:
1f:5f:92:e9:16:8d:35:e2:10:d0:9c:00:ac:c7:23:
3b:60:7b:c5:bd:5b:30:52:08:a1:c1:49:af:a2:97:
ae:ca:64:38:cc:2c:d5:e1:bc:54:eb:b0:51:83:4f:
a8:ec:af:0b:8d:9e:69:b5:d5:6e:b5:a6:8a:89:5a:
14:94:21:ec:d3:90:de:67:04:de:6e:48:3a:8b:c8:
15:bf:38:d3:e0:b7:49:9e:27:51:ca:6e:34:46:7c:
96:b4:da:9a:5a:4a:50:97:82:03:dd:04:1d:de:50:
db:92:a4:e3:01:f6:15:28:4b:b7:73:29:2b:17:13:
5d:a9:24:5f:25:4c:5d:65:e6:13:3a:87:e2:84:ef:
c7:20:f4:dc:30:19:12:bc:a1:9b:cd:f1:e2:44:cb:
10:5c:89:a1:80:da:51:e1:04:9d:8e:1a:54:62:75:
5f:74:6f:2e:dc:5a:09:37:56:2b:85:41:66:14:12:
85:db:84:b1:f1:a2:4f:be:65:19:c7:bb:c0:a3:8f:
7d:3f:1f:e3:f6:65:59:8d:ab:1c:cb:4d:83:2d:53:
f0:1f:57:d5:ad:13:f8:95:a7:71:6a:0b:1c:ba:65:
79:e7:e8:25:b0:57:74:e6:dc:17:a2:1d:12:c2:e5:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:B9:9B:8B:63:53:32:57:1A:E2:D6:4E:11:3D:92:ED:36:63:AB:8E
X509v3 Authority Key Identifier:
keyid:40:5A:61:B5:8C:1D:52:DE:52:2E:04:10:09:CB:FC:D1:F7:E5:2B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QFphtYwdUt5SLgQQCcv80fflK3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/81306a-f1dd-4040-8357-fe0133cda535/1/QFphtYwdUt5SLgQQCcv80fflK3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:be:23:6c:0d:24:6f:45:21:ea:e3:7b:f3:70:b3:cd:58:e3:
e0:77:87:5a:e2:00:41:89:cc:ea:8f:aa:bc:bc:8b:ff:c3:23:
63:91:32:d5:f5:99:1b:f8:69:29:ea:4b:ef:f5:fc:e2:34:fe:
ae:64:5b:84:56:cf:b8:36:66:b0:7b:10:64:fb:6c:41:6e:bf:
c7:26:38:d9:18:06:31:cb:64:79:68:d1:0c:da:db:48:cc:5d:
4d:0b:03:6f:b9:89:a6:72:8d:8b:49:09:88:ea:d5:c6:a6:ff:
91:5b:ae:be:2d:b2:ba:16:e7:07:89:c4:22:1c:49:e9:71:ca:
da:6a:ab:9b:7a:b8:4d:e1:1c:19:14:2c:9d:f8:b6:89:c8:a1:
e4:54:a7:d0:89:3b:a3:30:8f:82:45:e9:46:73:a7:ef:10:1d:
48:3c:e1:5c:d2:91:2f:69:a1:3f:b2:ab:3e:38:49:39:73:69:
00:28:c4:99:c7:75:9e:ee:65:a4:5a:63:6b:1f:f9:6b:1a:5a:
12:21:bf:05:17:76:a5:f4:79:fd:26:c6:20:fe:90:c9:ad:8a:
4a:e4:13:19:ff:a4:c9:aa:8a:89:3d:be:6c:ac:9b:6d:db:43:
da:d6:6f:ac:d5:8c:d3:fd:da:ec:77:2b:e6:79:41:1c:9e:28:
fa:43:de:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:10 2025 by rpki-client