Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
File: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft (raw, json)
Hash identifier: oeni0GzHeE5SK/m712l9oBAVz5o19L4c0t56lNErcvg=
Subject key identifier: 71:A3:00:34:E9:50:D5:C9:C6:52:E4:E0:4C:45:84:16:26:FB:BB:92
Authority key identifier: D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
Certificate issuer: /CN=d50697943676399ac5cac6a3e476545af0df49dd
Certificate serial: 019A24AF34D29CA86D3DBAE97A90C90499DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
Manifest number: 093F
Signing time: Mon 27 Oct 2025 08:00:53 +0000
Manifest this update: Mon 27 Oct 2025 08:00:53 +0000
Manifest next update: Tue 28 Oct 2025 08:00:53 +0000
Files and hashes: 1: 1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl (hash: tQlSVnHADTpA26B9js+tZ/YZiZzE8O6w9aT3sUbF98I=)
2: BoO9SwQEMHsLwB3D3d0QdThU64M.roa (hash: xEZ0t9PxPtT9JsjJCaQCvAAhYcQDNvD5JhyTg8dedDI=)
3: FC4K9cci-eXwiNdvRsWeBHRaYMw.roa (hash: f+O7sFGh04yGJ7kTRgAPiUe07FsxKS0OK4hnUOJ1gWU=)
4: HUjG5wlXIs_S_8BTLmPoqHtpE_8.roa (hash: n0+Gv3Td1KV66vO7s/EA+fLLoF/hxd3hZyfSfNcw3NA=)
5: UNVV8q9mxHzj40ukB0dOp3qehFE.roa (hash: BXbVtWFAEKhtBygy5e3mBPkEaoCOBDieBmzKaOr8eAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:34:d2:9c:a8:6d:3d:ba:e9:7a:90:c9:04:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50697943676399ac5cac6a3e476545af0df49dd
Validity
Not Before: Oct 27 08:00:53 2025 GMT
Not After : Oct 28 08:00:53 2025 GMT
Subject: CN=71a30034e950d5c9c652e4e04c45841626fbbb92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:91:aa:93:cc:1a:82:1a:82:e0:dd:92:f0:27:
d1:42:8d:e6:c1:93:0d:25:6e:e6:06:63:27:d0:9f:
55:1d:f5:ed:fd:79:69:6d:5f:2a:36:d1:1a:cb:a7:
45:96:1e:6d:61:bd:e2:75:07:a5:b6:16:c2:c7:79:
2d:13:8a:8c:92:08:ff:ef:ea:3b:91:93:e4:37:26:
e6:96:f6:43:09:37:44:45:65:1e:6e:06:c0:21:74:
d7:66:2e:3c:5e:fe:28:00:38:f2:f1:47:c7:67:39:
53:05:e0:05:b9:e7:ec:bc:f5:f6:58:df:11:23:3f:
e6:5c:e2:16:ee:81:44:28:fc:29:f4:4a:85:1a:37:
79:3c:d2:a1:d1:59:c3:47:2a:2a:cf:0b:cc:26:9c:
69:e1:e3:74:14:29:9f:70:33:13:2e:08:b2:48:3a:
d9:8f:f4:42:8b:3e:6b:fc:1c:75:f8:f5:63:87:7b:
df:78:7d:63:9c:c5:8d:39:09:e6:27:74:e8:92:4b:
18:34:a5:44:4c:84:88:4a:dd:bd:fa:9e:60:65:d8:
ae:c6:0a:75:03:6e:f3:45:f1:f7:cb:59:f1:66:02:
5b:bd:09:fb:d1:2a:05:45:61:5a:7d:31:eb:73:9a:
a7:25:fd:e7:c0:9c:89:47:ad:e6:10:de:67:de:23:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A3:00:34:E9:50:D5:C9:C6:52:E4:E0:4C:45:84:16:26:FB:BB:92
X509v3 Authority Key Identifier:
keyid:D5:06:97:94:36:76:39:9A:C5:CA:C6:A3:E4:76:54:5A:F0:DF:49:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QaXlDZ2OZrFysaj5HZUWvDfSd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/5f6aff-13bb-4db8-957f-8d23ac5cb502/1/1QaXlDZ2OZrFysaj5HZUWvDfSd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3a:7b:49:ff:43:89:ea:07:4b:37:fb:0f:37:97:28:42:5f:
7d:6c:3c:97:2a:05:23:71:32:9e:85:98:0a:2a:0c:d0:1b:7b:
ed:97:36:f9:b5:4f:5a:78:72:c5:45:e6:7b:b3:45:13:af:9a:
65:42:06:1f:3c:61:6e:a3:0d:a6:7c:7e:3b:99:5a:2d:b8:a6:
1f:7b:42:73:8d:1a:d3:1f:ac:44:bb:f0:b8:e0:3b:9c:cd:21:
ca:31:d4:34:1d:dc:84:c6:2e:e7:e4:73:d4:47:77:ae:51:22:
cf:db:5a:43:68:f4:23:52:94:2a:ff:81:3a:fe:a8:e5:3d:2e:
4c:7d:70:a2:a3:43:db:7f:df:e2:67:9a:d2:cc:c6:17:cb:71:
e6:d9:de:10:1a:a9:2a:b8:6e:2d:80:cd:85:5c:1d:ca:f9:a5:
cf:98:9e:99:a0:41:a1:ac:e5:25:2a:fe:13:70:21:d0:20:b5:
d8:02:51:09:c6:af:d2:32:29:28:01:f6:07:bd:36:ce:08:98:
83:0c:d3:c1:e4:a9:9d:3e:a6:1e:b4:be:92:7d:f0:3a:58:3e:
0b:4c:6d:12:8f:3a:f5:ca:21:be:cc:ed:59:fc:ed:5b:f0:e7:
9b:c0:7f:a6:9b:d8:e5:b2:5d:2b:63:42:23:8f:86:19:e9:4d:
8e:45:e0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:05 2025 by rpki-client