Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: 3yqnlmFrzfG+FUgk8dZ1+wCWg1tbncwhJ5B2+c+0MyA=
Subject key identifier: B6:F7:35:0E:20:DC:A0:63:52:D3:84:67:E3:44:22:F9:D3:78:E7:20
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019A722681AD080F3BE20FF3785A81493038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 10D1
Signing time: Tue 11 Nov 2025 09:01:57 +0000
Manifest this update: Tue 11 Nov 2025 09:01:57 +0000
Manifest next update: Wed 12 Nov 2025 09:01:57 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: RIhRQFX7cqo7lmChlZCFyi5R6BM++UCklWWwxfKtIWA=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:81:ad:08:0f:3b:e2:0f:f3:78:5a:81:49:30:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Nov 11 09:01:57 2025 GMT
Not After : Nov 12 09:01:57 2025 GMT
Subject: CN=b6f7350e20dca06352d38467e34422f9d378e720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:f5:2f:90:ff:b8:3b:46:b8:33:53:c7:21:
76:4a:c9:0d:ee:07:79:5f:a8:8e:e4:e9:26:99:b3:
83:33:1a:b8:a2:54:75:5a:77:5b:5c:31:9b:56:b4:
e2:18:92:b8:f2:4b:79:31:01:16:1b:7e:42:fe:9f:
95:4a:12:e0:57:9b:35:b0:ba:2f:0a:ff:33:15:1f:
3c:c0:7a:66:f8:4a:d3:8d:3f:11:e7:9d:47:29:bc:
90:98:9f:72:aa:21:8e:de:2f:b2:f9:13:9c:14:b2:
28:b1:24:2e:66:94:c3:d8:34:3c:0e:4f:ff:a1:60:
fd:ae:cd:d8:c8:f9:e5:d2:4a:a7:e8:a5:37:6c:95:
a8:5c:25:19:8c:d9:ad:74:1f:c3:9e:71:50:67:ce:
17:3c:0c:8b:8a:19:65:e5:c8:65:20:58:a3:72:b8:
1e:79:73:76:64:83:6d:ff:ec:56:db:ce:ba:b8:57:
2e:47:e6:40:aa:f2:23:f4:3c:c8:03:8e:e9:ac:3b:
e0:ec:67:62:5f:f3:67:45:e1:e9:b5:cb:ca:a2:c7:
e5:13:4b:10:ca:b1:25:49:53:d6:75:7c:1e:02:09:
f2:4a:5b:83:4c:c6:fc:da:44:b9:c4:1e:d6:90:c1:
e0:61:7b:2e:3b:d5:52:ff:cc:d7:2a:8c:12:d8:79:
42:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F7:35:0E:20:DC:A0:63:52:D3:84:67:E3:44:22:F9:D3:78:E7:20
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:62:66:93:ee:0a:81:3b:dc:2f:1b:0c:0e:74:84:0f:48:ad:
e2:4f:53:4a:75:54:82:60:bf:e2:57:3d:88:3b:7e:28:75:1e:
db:6d:8d:f9:2d:b7:c6:82:d7:18:25:7e:4e:8f:05:c4:6e:df:
28:d8:01:d8:13:e3:65:9d:34:b3:65:40:e9:db:f6:ff:48:e0:
3a:d1:7b:10:84:1d:fa:94:22:a1:16:ef:24:fb:6f:8f:c0:8c:
53:cb:a0:11:2f:90:3e:12:aa:80:83:3d:12:60:44:57:59:33:
2d:23:9d:13:55:b9:3f:39:d9:c7:2b:2b:c1:f4:e2:1f:aa:59:
8d:0c:cf:e8:c4:06:c0:45:88:1d:dd:64:ea:dd:86:fd:d3:99:
c2:24:47:8e:b7:4d:82:92:9d:5c:9f:e3:37:19:a0:0f:af:c8:
9f:fa:9c:c8:1e:3c:5e:32:63:16:49:47:bf:fd:29:3d:90:2a:
ee:0b:70:5d:af:15:c0:a7:a9:c4:26:02:f8:92:a7:eb:e3:59:
a8:bc:cd:8a:1e:e4:aa:bf:bc:7c:71:86:7d:58:97:41:1b:b1:
4c:29:bb:ca:6e:82:8c:c8:aa:f9:09:a6:3f:82:fa:f6:b3:c7:
24:9b:04:02:4d:52:a0:38:44:9c:c3:70:27:bd:2c:c1:ff:cc:
8a:57:f7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:58 2025 by rpki-client