Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
File: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft (raw, json)
Hash identifier: qstkwpE+MRWTmo359ZXuerDF2w3XsQzJVd5MRisckqo=
Subject key identifier: 69:37:CE:10:F4:2E:3C:4C:74:B4:E2:09:01:35:42:08:C0:50:EA:2A
Authority key identifier: F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
Certificate issuer: /CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Certificate serial: 019A72CA90FDBAAB929ED0D1415A85FD81DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
Manifest number: 132A
Signing time: Tue 11 Nov 2025 12:01:09 +0000
Manifest this update: Tue 11 Nov 2025 12:01:09 +0000
Manifest next update: Wed 12 Nov 2025 12:01:09 +0000
Files and hashes: 1: 1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl (hash: d8bRWw85EdLR2BXvkVEGDJsT+IOZ24B83MgYQd8ReVk=)
2: kgzoK8BF6aDaCA7s2y2-oNomvaU.roa (hash: thv0x/fHxG1HTXAqa1M1DqYuduWmIxV8jm8IAHJKruM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:90:fd:ba:ab:92:9e:d0:d1:41:5a:85:fd:81:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a41594a92a9ae05c65a04f803d411a4f88423f
Validity
Not Before: Nov 11 12:01:09 2025 GMT
Not After : Nov 12 12:01:09 2025 GMT
Subject: CN=6937ce10f42e3c4c74b4e20901354208c050ea2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:93:c5:f5:95:bb:d3:ea:bb:1f:64:b0:57:
15:9d:a7:8c:33:0b:a2:ef:58:20:7a:7e:be:3c:30:
30:d1:cf:c1:8e:c4:2f:9b:af:e0:dc:8d:95:84:42:
c4:f2:85:b5:71:19:04:b4:d8:71:63:22:d0:4f:54:
3b:72:73:83:ad:2b:a2:69:0d:32:4c:de:8e:dc:58:
13:ca:65:ca:1f:44:32:fe:df:f2:91:e1:aa:b8:86:
c1:b9:cc:61:f5:6a:3b:62:5a:b7:e5:4b:ee:f7:f9:
65:4f:b7:2e:d3:b0:45:1d:54:f9:45:60:60:42:29:
c3:c2:c0:fe:69:72:1d:0b:e3:02:f7:d2:75:51:33:
50:2f:f5:a3:fe:f6:59:a2:f5:74:7b:d3:69:2e:9c:
b9:aa:1e:e8:cf:34:b7:b1:09:9c:79:c1:ac:04:55:
3a:54:92:60:34:92:1f:4f:e8:21:33:56:f4:a8:d0:
42:00:65:01:e1:8a:ca:ee:20:bc:60:74:18:96:72:
f3:88:71:23:ec:ce:f8:91:11:e6:36:cb:d5:f5:41:
d3:4f:3c:35:31:91:bd:c1:22:3a:36:3f:26:2a:10:
58:2f:e7:22:42:79:e4:fe:9c:18:e5:a4:dd:05:c0:
ed:5d:60:9e:e2:bb:35:93:33:77:b4:4e:a0:3f:76:
8d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:37:CE:10:F4:2E:3C:4C:74:B4:E2:09:01:35:42:08:C0:50:EA:2A
X509v3 Authority Key Identifier:
keyid:F8:A4:15:94:A9:2A:9A:E0:5C:65:A0:4F:80:3D:41:1A:4F:88:42:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/630362-290f-46bc-8446-6a7c3ba31410/1/1-KQVlKkqmuBcZaBPgD1BGk-IQj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:8e:67:74:66:0c:bd:a9:e7:2b:20:7c:fd:6b:ff:99:9e:51:
86:b9:f1:5a:c0:c7:02:cf:0d:c6:f8:98:b1:48:0e:24:15:66:
3f:8a:c6:2d:94:7c:ab:10:20:35:ce:41:d7:37:2c:5f:27:5f:
ac:3e:73:22:08:3c:0b:ef:64:ea:31:e1:22:3e:04:c2:e7:27:
d2:eb:63:24:41:ff:d5:23:58:a6:ee:55:43:96:c4:27:6d:f4:
6d:33:9e:77:64:b5:a1:82:69:97:51:3c:50:34:a2:29:64:34:
75:c8:35:09:d2:f1:fa:05:23:46:c7:74:e1:d0:e4:e7:7a:01:
73:28:84:56:b5:aa:be:9b:40:36:c9:a2:d2:18:b1:ec:31:49:
c2:ae:6b:1c:7d:9b:a3:60:90:79:1e:29:5d:0a:b8:9b:0c:0c:
1c:ed:11:34:d5:7a:37:45:df:76:7e:f6:e0:d3:c6:c0:25:27:
d1:7f:fc:2b:04:17:ce:5a:76:ca:49:c3:11:4e:1b:d6:65:89:
ac:2d:28:34:5f:33:3e:19:6f:3e:07:2b:8f:62:9a:8f:f1:98:
ed:50:cb:57:6b:bf:65:84:63:d6:d5:c4:4f:ff:6e:9d:d5:76:
cf:77:52:be:78:1f:a9:7a:19:ef:03:92:63:ce:c7:2f:9b:f5:
6e:e3:b9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:02 2025 by rpki-client