Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: NJQnh+NneNfgOnCMdHZVWnxg/QlxGU/fA+2X5U3lcd8=
Subject key identifier: 42:4A:D3:5B:6C:E7:DD:75:7A:3C:57:F7:98:73:96:57:10:FA:02:F3
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01995C0E95F85D1EDC54520CE95BB9AB311F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1041
Signing time: Thu 18 Sep 2025 09:01:23 +0000
Manifest this update: Thu 18 Sep 2025 09:01:23 +0000
Manifest next update: Fri 19 Sep 2025 09:01:23 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: MY6laQ8cqSmj1w0hAfQXA6O3vnk+TiRwRNQp29rT4bw=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 09:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5c:0e:95:f8:5d:1e:dc:54:52:0c:e9:5b:b9:ab:31:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Sep 18 09:01:23 2025 GMT
Not After : Sep 19 09:01:23 2025 GMT
Subject: CN=424ad35b6ce7dd757a3c57f79873965710fa02f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:39:dc:f3:0e:6a:a8:23:24:78:82:b1:b4:
a6:aa:35:9a:35:73:b2:e4:72:ec:7d:70:d0:cc:3c:
24:8b:7f:fb:69:32:61:3a:ca:4f:9c:06:65:0e:ae:
36:34:10:31:1d:05:01:cf:b4:53:54:c5:1b:72:44:
6f:4b:6d:73:46:07:05:1b:77:a4:75:a8:30:03:da:
0b:90:c7:98:1d:6f:67:34:20:fd:81:48:72:2d:f6:
22:df:79:73:67:3e:d7:c6:13:8c:15:4a:3c:a7:d8:
62:bc:1a:eb:cf:8d:4b:81:46:13:f6:cd:aa:86:6f:
fa:00:1b:b2:bf:13:26:22:cd:e6:02:61:fa:3e:0a:
a7:64:18:fd:43:96:84:c9:63:f4:eb:8b:10:e5:d5:
7a:47:e4:64:a4:2f:e9:c4:a0:b7:e9:d3:6c:f1:8e:
dc:de:af:d2:30:7a:8d:4a:f1:10:cd:98:f4:fd:52:
b5:87:fb:b6:28:3a:3e:30:bd:ce:d2:96:05:be:a0:
cd:87:f9:68:b2:94:a7:33:71:23:e1:20:20:11:16:
69:4d:2c:b5:ba:0e:28:17:d7:7f:8b:ae:66:c1:a5:
f5:45:99:b2:f2:70:3e:a4:e8:2d:40:d2:39:f7:14:
50:ff:cd:b7:5b:66:59:5a:80:69:89:24:8c:e6:ee:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4A:D3:5B:6C:E7:DD:75:7A:3C:57:F7:98:73:96:57:10:FA:02:F3
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:31:f8:1c:0c:36:d8:61:40:f8:5d:cd:64:f0:2d:5d:fd:
77:68:59:b9:f2:76:86:49:b5:56:e9:fc:5d:2c:e8:dc:bb:43:
2b:9e:98:04:3e:56:08:d9:72:2b:c6:16:17:ca:e9:70:91:a1:
6b:24:1e:15:d5:10:a3:8e:e4:b9:f7:87:0a:ab:0b:7f:3b:12:
b3:d5:9b:71:5f:42:13:8a:d1:35:f1:6f:cb:44:36:96:bf:08:
e8:8c:68:45:0d:1d:b9:4d:be:ef:e8:f5:77:7f:88:59:b4:f4:
c9:f7:d3:44:83:6f:85:dc:a9:53:b5:ae:50:c7:85:c1:ad:4b:
ca:63:58:50:fd:4f:31:13:61:4c:c8:44:6f:af:d6:3a:81:d6:
1e:b0:77:04:22:3b:84:cf:5e:65:67:f6:b4:eb:3c:89:7d:1a:
85:dc:25:a1:b3:00:5e:c5:51:6a:58:e1:ed:82:25:77:93:2c:
13:ac:ab:e8:29:25:f2:c4:03:e3:76:96:c5:63:fb:bb:2f:8e:
5f:5a:ef:f1:4c:17:28:e5:ba:af:36:c0:ad:f9:c5:9d:05:5c:
9e:b1:24:80:c1:03:01:6a:1b:b1:40:cf:28:e8:ea:9c:95:db:
b3:35:6f:0b:21:54:a8:00:4e:67:c2:d9:51:70:38:ff:be:0b:
c4:80:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 17:43:10 2025 by rpki-client