Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: iAr1cLVi5OGwbb29oYQcyspNUPue9wO0qZgiHzB1YVg=
Subject key identifier: D9:7F:B9:EC:10:8D:97:F4:E9:4A:14:8D:2F:51:A8:35:B4:63:22:B0
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019A71B82223E92A82A9224893B70E6AEACA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: 24r73vVNbVHKcSNjogPy7uJ0uvTtR1s06CU4xgxutAY=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:22:23:e9:2a:82:a9:22:48:93:b7:0e:6a:ea:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=d97fb9ec108d97f4e94a148d2f51a835b46322b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6d:80:09:c9:fe:13:63:6c:0e:69:3f:c1:30:
7e:3d:80:56:71:bd:14:3f:09:24:a5:bd:27:d1:7c:
8b:96:3d:83:bc:58:b7:37:5e:de:3c:71:34:7e:03:
e7:8e:e6:2f:f8:f6:5a:95:69:39:ab:c9:10:0a:06:
15:26:0a:f8:a5:05:ce:ae:58:5e:aa:7f:06:bd:32:
d8:bc:cf:84:48:78:e0:de:86:7d:9a:3d:f4:aa:3e:
58:46:e1:76:6c:0c:d5:07:13:94:3d:c6:85:b9:1d:
ce:5c:76:4b:94:ab:5f:0a:6b:56:45:0a:2c:a1:ba:
77:df:0d:08:64:5e:60:8e:15:0a:ac:4e:61:ed:24:
0b:cc:4b:0c:52:ac:45:a6:95:18:d8:44:e2:2f:64:
1a:0a:d9:6a:37:e1:7e:26:67:ca:e9:7c:c4:3c:5d:
ee:3d:15:09:5d:2b:41:e9:8e:dd:aa:b3:1b:1d:b8:
b0:b9:4c:68:f2:00:4f:52:18:18:01:35:8f:8c:4a:
af:9f:d3:a5:55:e8:64:1e:5c:08:e6:ec:1a:75:d7:
7f:76:47:54:81:e4:ad:c1:30:0a:11:ed:6e:78:a6:
1e:4f:5a:1a:83:c9:58:80:7e:a8:83:a5:86:23:c9:
36:be:dd:1a:50:c3:87:88:20:eb:28:d9:2f:4c:6f:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7F:B9:EC:10:8D:97:F4:E9:4A:14:8D:2F:51:A8:35:B4:63:22:B0
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:45:d2:a7:21:0f:7e:08:2d:26:e4:96:38:2b:e5:1c:a4:01:
26:d1:3d:a3:77:1f:49:05:86:5f:cd:50:ef:fc:b8:35:32:17:
b9:52:a9:2a:0e:4a:25:0b:15:3b:a5:d5:af:ef:c5:c1:a7:72:
fa:9f:5f:82:a7:98:8c:91:ee:8a:50:69:d8:01:ca:d6:c3:ce:
4f:fc:44:a4:df:eb:6b:41:2a:eb:71:aa:8d:81:64:72:62:fa:
c1:e7:5a:42:0a:7e:49:14:3d:4d:f6:ed:4b:f4:ec:18:ff:2b:
15:2e:02:a8:05:ff:71:88:dd:a3:f1:38:c2:fd:1f:0e:0e:54:
c6:68:93:ec:a1:c0:b1:57:f6:7f:d4:d3:53:e8:85:7d:f9:c3:
a9:2b:07:30:39:07:7a:a7:4c:0e:b0:b0:18:5d:97:70:5a:36:
0e:b9:44:7f:34:ff:c8:7a:6a:37:19:e8:d2:0f:f4:92:8c:52:
a6:e4:d4:ce:6c:72:e9:74:33:bf:f3:bf:1c:e6:f0:7d:3a:88:
bd:0c:87:cd:d4:3d:8d:1c:7d:4a:9d:1b:1a:e9:d3:20:93:76:
b9:13:26:e5:5b:7f:f2:65:00:e9:cc:63:df:a0:1a:7e:0b:74:
d5:dc:d8:31:3b:91:1a:d3:59:a4:41:bb:b5:70:6a:65:88:cd:
c1:19:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:55 2025 by rpki-client