Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: 5nL9fn3dLQ+/J0M6bjxKx7wHz0Dfkzpo8cUDXUXsA7I=
Subject key identifier: 3C:AB:4B:86:0B:A3:6D:C2:9D:7B:9C:67:B7:DC:18:C9:2C:30:DB:CE
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 0199307EAE93A77BB57F169408C9A62B27A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 08BE
Signing time: Tue 09 Sep 2025 22:00:32 +0000
Manifest this update: Tue 09 Sep 2025 22:00:32 +0000
Manifest next update: Wed 10 Sep 2025 22:00:32 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: 8wszEq34oJkyNbzJ++Z/sRQjbSrqSqq5gEB4k4ijqXU=)
2: BoO9SwQEMHsLwB3D3d0QdThU64M.roa (hash: xEZ0t9PxPtT9JsjJCaQCvAAhYcQDNvD5JhyTg8dedDI=)
3: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
4: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
5: oWax_s3rEBvHabBS48m5jkL-sS8.roa (hash: xlEwLhmITk7/mkpqEIY5+075rzKtLyDjCvF9OixjCdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:30:7e:ae:93:a7:7b:b5:7f:16:94:08:c9:a6:2b:27:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Sep 9 22:00:32 2025 GMT
Not After : Sep 10 22:00:32 2025 GMT
Subject: CN=3cab4b860ba36dc29d7b9c67b7dc18c92c30dbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:7a:c3:c5:00:2b:38:a1:4d:f6:a6:d5:95:
d1:39:9d:87:9c:38:7c:9b:71:1d:87:13:f4:eb:b7:
31:21:8a:d3:c9:c3:29:97:1f:b0:ad:6d:fc:28:a0:
cc:9e:5e:95:43:39:ec:fe:af:b4:0a:70:19:cf:09:
75:5a:32:d2:c9:14:d3:35:fb:34:d2:5e:7b:d4:50:
52:c8:70:c0:0a:08:8d:d7:c3:f1:3c:47:40:2f:99:
de:0c:df:c0:30:61:76:68:91:f1:ee:0e:c8:2b:de:
25:98:aa:10:7b:2f:ac:82:c9:ee:ff:df:37:58:ae:
5d:e3:de:d0:9c:ac:0f:fb:c7:d0:5e:22:ae:af:d3:
82:05:8f:b4:c5:23:00:df:55:60:23:e1:3a:fe:50:
4b:d4:8d:b9:6f:dd:a7:bd:b7:08:3f:88:18:12:a0:
7a:25:20:76:23:c6:e0:e9:1f:77:96:1d:9d:cc:f0:
3b:ee:be:f3:63:44:af:1e:59:76:90:4b:21:89:a9:
38:62:89:cb:83:b7:2f:e0:2d:75:b3:90:4d:a6:cb:
5e:84:a2:d5:12:26:dd:4b:dc:e5:57:af:d3:78:82:
e9:93:c9:46:00:08:81:bf:c8:30:04:5d:b3:68:6a:
11:67:a1:dc:67:d8:50:a8:16:5d:48:6d:b4:04:42:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AB:4B:86:0B:A3:6D:C2:9D:7B:9C:67:B7:DC:18:C9:2C:30:DB:CE
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:20:d9:17:ee:f8:7f:a7:d5:d8:82:ea:2d:95:0e:df:20:2b:
4d:04:29:b3:66:a9:1b:14:d9:07:ee:e1:f4:88:5a:d8:a6:1d:
a2:96:5c:38:75:26:60:d6:c0:9a:cc:00:95:3a:3d:c3:17:7f:
d5:12:dd:6a:5c:bd:56:ab:91:ec:d1:47:ed:73:5c:9a:7a:9d:
3a:b9:46:f8:70:56:45:82:c3:05:a9:bc:bb:9b:ba:ee:e5:2f:
5b:8b:34:ab:db:0b:c0:f7:de:8d:d6:11:ab:1f:3d:50:0d:93:
e8:46:13:03:4c:b1:a7:ec:9c:f9:19:bb:36:a4:7d:dc:17:dd:
0d:7b:eb:88:cf:5b:ef:38:7f:bb:52:3d:2b:e3:2c:a0:e4:17:
2e:1f:a2:78:85:75:e0:65:38:65:7e:47:d6:ce:16:37:9b:70:
d0:f6:1b:4c:13:29:8d:d8:4c:2a:e6:dc:c9:0e:fb:ea:53:1f:
de:3b:d5:25:0f:cc:92:9e:fd:37:1f:ae:9b:0d:4d:37:17:18:
53:51:52:06:af:d6:98:51:06:5b:e5:d2:e8:ef:05:6d:b4:ca:
31:bc:e2:9f:27:b0:e4:b5:69:1c:a0:82:5e:03:ee:46:ff:9f:
3e:37:9b:07:b1:98:38:46:7a:53:59:76:ac:63:78:52:95:9e:
fb:98:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 03:11:26 2025 by rpki-client