Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: JcyyZwRQ/nHNdM1hIniPLVFjPPFInCw80PQ0oG4RAW4=
Subject key identifier: 25:E6:C1:CD:58:EB:93:28:5B:05:F2:66:81:41:15:0A:FE:1A:9C:FB
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 0199C456ACC42B15673966EF6D19EFB916E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 11B9
Signing time: Wed 08 Oct 2025 15:00:38 +0000
Manifest this update: Wed 08 Oct 2025 15:00:38 +0000
Manifest next update: Thu 09 Oct 2025 15:00:38 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: 6xWEcnjRBJotrc75o9EbqGZbFfEqHdOvzZJgOuLXjKw=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:56:ac:c4:2b:15:67:39:66:ef:6d:19:ef:b9:16:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Oct 8 15:00:38 2025 GMT
Not After : Oct 9 15:00:38 2025 GMT
Subject: CN=25e6c1cd58eb93285b05f2668141150afe1a9cfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:45:ea:48:4b:56:06:9f:c0:7c:73:d4:bb:
2c:29:cb:99:1e:4a:2a:f4:6b:d6:cf:33:42:df:f9:
8d:24:f4:02:93:37:67:5e:df:05:8a:56:4e:af:b6:
8f:39:d8:76:13:72:89:08:78:4e:bc:30:b2:76:af:
d7:82:c7:22:75:5e:8c:2f:70:25:11:c0:32:a4:7a:
1e:9a:28:af:65:2c:35:17:f7:ba:35:6a:4e:11:9b:
93:54:8f:4b:c8:af:94:ad:08:7e:57:72:d7:27:9f:
1c:7c:01:5f:6e:36:48:2c:5d:1d:5f:16:ea:ff:c0:
50:6d:35:a8:70:fb:76:a3:40:7f:fe:cf:a4:c2:78:
9a:7d:b9:14:4f:15:28:bb:e9:12:ce:b4:e6:eb:46:
35:9f:cd:0b:97:2f:a0:80:7f:ca:11:81:4f:8a:33:
78:90:50:fb:08:3a:eb:16:4d:c9:bd:bb:8a:26:95:
8b:dd:07:88:fb:68:70:46:13:16:6d:fd:ed:f4:cf:
5f:c0:72:01:47:ec:35:33:6b:8f:de:6f:89:fa:0c:
7f:76:7b:b4:29:91:2c:28:0a:ed:05:35:51:e1:bc:
41:13:d7:7b:b1:fd:89:b4:e5:19:e2:59:4c:98:d7:
56:2c:fe:99:4a:01:c5:9e:28:91:e9:e8:be:11:cd:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E6:C1:CD:58:EB:93:28:5B:05:F2:66:81:41:15:0A:FE:1A:9C:FB
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:2c:35:64:04:d9:b2:c5:d6:20:a0:b9:aa:d7:ac:69:4c:
d5:4a:bb:e7:17:92:2f:03:a2:e9:1f:1b:d9:ca:9f:fa:2c:97:
49:ae:33:58:4b:06:a5:99:5e:3e:52:46:45:01:d7:70:45:3e:
bb:31:ac:5a:63:93:d3:39:dd:a8:2c:56:3d:5f:9a:af:03:b9:
e9:a6:77:da:96:c4:23:51:6f:7b:e5:1b:16:25:70:fd:3f:aa:
67:3f:4c:cb:3d:ee:9a:b3:b1:ef:ff:42:64:1d:d0:24:90:5e:
68:42:2b:37:f9:a8:82:60:4f:65:a2:88:a3:f8:39:ca:ce:24:
ae:b6:cd:49:67:31:4f:86:7f:b6:3a:6e:c9:cb:77:7c:1b:69:
15:7f:1d:33:dc:18:8d:de:6b:25:7b:26:80:61:ad:61:7f:86:
63:e0:24:53:2f:a5:50:48:ed:df:20:81:b8:ec:16:cc:e6:43:
b9:91:10:23:09:f9:16:9e:e9:f2:fa:2f:f5:54:35:80:fe:00:
87:be:07:c8:24:90:a6:0a:9d:e6:97:f6:9e:a5:17:34:b8:9f:
d8:d0:4b:4b:e7:13:6b:6a:2b:d7:3d:30:d9:e7:04:20:72:21:
dd:42:f0:a8:af:6e:ed:65:7d:88:91:78:2d:6c:5b:f3:c3:af:
65:4c:8a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:33:34 2025 by rpki-client