Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: AvhGJ9Yz0tovT3R1VlIbw5S7bAByst6xRMiDY7moFhw=
Subject key identifier: 9D:AE:1B:DF:25:07:B5:D1:08:3B:F8:8F:FD:E2:26:B8:E6:31:AB:98
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019A2CD61180976D0D85946DA91F4154A4A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 149D
Signing time: Tue 28 Oct 2025 22:00:17 +0000
Manifest this update: Tue 28 Oct 2025 22:00:17 +0000
Manifest next update: Wed 29 Oct 2025 22:00:17 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 6t+Yh/yl+YY+Bf4kZ/6UFQR3w0C8UsDugo4Mr8BiWWg=)
2: uamuqQFO1RITJ5dk81fUrUR6XPQ.roa (hash: 1C1t+rXqVF/ZLbA2JmjtUkNNdPmBmSQrsPid9bwQzME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:d6:11:80:97:6d:0d:85:94:6d:a9:1f:41:54:a4:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Oct 28 22:00:17 2025 GMT
Not After : Oct 29 22:00:17 2025 GMT
Subject: CN=9dae1bdf2507b5d1083bf88ffde226b8e631ab98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:77:3a:91:43:01:d5:c8:60:4a:69:35:e9:
f9:2c:ea:7e:7b:53:af:4f:02:3c:5f:63:bd:e2:7e:
7f:1c:82:ab:62:a3:47:53:f2:7e:21:b3:30:32:c0:
c6:ae:b9:f7:ff:62:e1:43:87:ae:ca:0f:63:b0:44:
9a:49:08:9d:f6:2d:03:4c:bf:ea:90:7e:6b:b7:61:
00:eb:86:9e:d2:cb:50:ff:05:6a:1a:8c:ff:56:72:
b9:64:90:74:7d:4c:76:cf:91:7f:7f:0b:c3:4a:31:
d8:73:62:f7:be:ac:2a:12:d9:4d:83:da:1f:b2:ca:
cf:d9:88:46:ab:b9:ee:9b:56:79:27:df:19:85:d9:
62:f3:da:e9:93:e8:80:a9:3d:99:65:ad:57:69:96:
ce:e4:6c:f8:32:ae:49:c5:48:8c:b8:5b:84:09:50:
a7:35:de:71:70:08:46:a2:32:49:c7:31:91:4e:a1:
1e:ac:4f:0c:f8:9c:86:ab:37:e8:b6:a7:c2:f6:f8:
79:1e:be:a4:83:cc:5b:39:e8:e3:cd:17:36:38:18:
62:5a:34:f9:aa:23:82:4b:3e:3c:5e:f3:e4:74:9a:
a2:75:d5:3c:cd:12:1c:53:7e:3e:76:bf:99:f6:00:
10:b7:d4:a4:3d:e9:1e:2f:a0:29:2e:9b:ec:45:86:
a7:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AE:1B:DF:25:07:B5:D1:08:3B:F8:8F:FD:E2:26:B8:E6:31:AB:98
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:89:4f:93:be:20:16:ef:9a:b6:47:10:74:4c:a7:9f:4e:
ba:97:c9:6b:e7:d3:05:0d:de:aa:70:85:99:cb:af:1d:cc:de:
7b:9d:df:7a:c6:dc:2f:59:58:95:36:66:40:c6:70:6c:6b:c8:
e4:61:4a:be:c1:98:1f:b8:f2:0c:42:f7:9c:bf:68:18:c6:6a:
c7:3e:b0:26:d3:30:62:7a:6c:af:8b:e4:65:15:cb:06:e2:3a:
5c:c5:e8:f0:da:48:14:44:52:15:3b:1d:40:04:17:71:64:19:
5c:7c:22:90:b3:ed:ff:62:8d:e0:c9:a9:35:27:6f:60:e2:c5:
f1:20:67:00:d1:60:3b:44:31:5e:ab:91:74:33:95:85:ad:b7:
18:fc:50:b2:c5:3a:a3:72:74:d0:08:4e:1f:9a:fc:4c:d0:54:
47:87:1c:30:91:33:37:1d:8d:f3:b0:10:df:6c:36:2f:8f:96:
10:42:b6:97:f3:f7:38:3b:46:d4:3b:e6:5d:44:e6:f8:63:59:
56:8b:89:41:6c:41:50:06:30:04:e6:e8:79:46:06:41:53:13:
fc:c0:08:2f:6a:8e:2f:8e:44:d4:ac:61:8d:b4:75:19:9f:ba:
63:73:66:97:b6:e2:70:6e:32:7a:50:0a:2b:0e:25:41:1d:0b:
1c:4c:91:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 06:35:04 2025 by rpki-client