Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: QvsSoZD6XwS8ctSMkcC2FB30tl3ivlPzyQccHmCDMEA=
Subject key identifier: ED:E7:0E:EE:5F:41:1B:E9:DF:F1:7B:89:6D:D1:51:E7:6D:CE:F5:3E
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 019A71B89B77FDB4E94E71B54BA8E066F44D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0B2C
Signing time: Tue 11 Nov 2025 07:01:54 +0000
Manifest this update: Tue 11 Nov 2025 07:01:54 +0000
Manifest next update: Wed 12 Nov 2025 07:01:54 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: kJya2LEgMdiil3FnjGE5nspynnIUTWWFvymaTD9ZEms=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:9b:77:fd:b4:e9:4e:71:b5:4b:a8:e0:66:f4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Nov 11 07:01:54 2025 GMT
Not After : Nov 12 07:01:54 2025 GMT
Subject: CN=ede70eee5f411be9dff17b896dd151e76dcef53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:54:74:2d:e0:6b:47:55:a0:68:bf:73:dc:3e:
ab:69:86:e2:ea:87:e9:7c:a0:77:05:17:ed:c2:bb:
16:bd:4e:19:70:34:40:14:cd:a8:62:99:12:12:ba:
93:f3:71:01:20:bf:04:e1:13:06:e0:3b:c2:c8:e2:
1a:d4:2f:5c:d7:de:43:b9:d1:f8:38:44:db:80:e6:
8f:16:33:58:7e:50:08:81:e4:3b:1d:53:41:02:3a:
d3:f2:36:22:b4:dc:ea:33:1b:85:30:b6:b3:92:98:
cf:7e:4c:68:86:01:83:72:59:8f:0a:2d:42:aa:6e:
26:0f:83:3e:be:ed:0d:7c:5b:ee:7e:2e:49:eb:f1:
4f:58:44:48:ef:b4:28:82:6c:75:e5:41:fc:c4:6f:
40:94:68:45:a6:84:3f:7b:97:15:64:c8:b0:0b:bc:
cc:d4:fa:7b:39:50:6e:77:ac:46:de:22:f4:0a:17:
54:0d:01:18:e0:5d:6d:9a:bd:b9:93:ca:a0:2e:c8:
0d:7f:5f:13:1c:4e:fc:ac:ae:20:38:07:48:9e:72:
d2:97:20:98:da:ec:1f:05:8c:c6:d0:01:85:44:52:
50:c4:9b:25:db:a8:52:c5:79:f6:ff:00:f3:15:8d:
31:3d:ca:11:1a:8a:dc:29:40:2c:40:93:29:00:2d:
9d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E7:0E:EE:5F:41:1B:E9:DF:F1:7B:89:6D:D1:51:E7:6D:CE:F5:3E
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:50:2f:86:36:80:6a:e7:03:c0:ab:2b:ec:09:ae:16:25:97:
7b:5c:d1:eb:c3:52:cc:82:15:e4:fe:af:eb:b3:c2:45:cb:18:
ad:8f:54:08:1d:f9:dc:2b:4f:38:93:db:e0:76:17:04:74:eb:
02:a3:ca:86:f1:0f:80:ee:f6:2d:66:5f:99:c3:a5:94:ff:57:
1b:fd:34:31:71:68:a0:ef:c2:6e:69:de:99:0a:c1:dd:89:d9:
0e:a0:1a:40:52:cf:16:fe:f0:a9:0c:59:80:b1:8d:be:ce:67:
c6:79:a7:77:bd:f5:49:1c:bc:17:ed:a0:4b:a8:fc:f9:a3:d2:
d9:56:5d:c9:80:45:8b:4b:92:b7:20:02:ed:73:5f:82:83:44:
d2:9a:01:43:7c:79:55:02:68:88:05:a3:ef:a1:47:bf:16:8e:
b7:2b:29:43:25:b1:35:33:00:ee:9f:ac:8e:93:c1:aa:11:ad:
5c:1e:fa:49:b3:87:7c:fc:a1:a1:32:bb:a0:9b:b6:e0:4b:fa:
44:d5:db:8e:5d:1d:6a:27:50:1a:51:97:d4:23:93:ef:27:c8:
e3:18:1b:4b:ee:b3:45:bd:ac:70:e6:b7:88:62:b5:15:72:48:
e6:5f:2d:cc:66:4f:d6:5a:68:31:8f:b2:e4:25:ef:ed:27:b7:
47:e7:1e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:49 2025 by rpki-client