Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
File: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft (raw, json)
Hash identifier: mF2tX/z+IzI8W6AUNZomur4WFwaisXk8IVLJCxgB598=
Subject key identifier: DA:22:0C:E9:61:C3:DB:B4:2A:7D:2F:64:22:A9:3E:57:DB:B7:DE:FB
Authority key identifier: F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
Certificate issuer: /CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Certificate serial: 019A72258AAEBBB2F82D8F7A9850F83AA69F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
Manifest number: 124C
Signing time: Tue 11 Nov 2025 09:00:54 +0000
Manifest this update: Tue 11 Nov 2025 09:00:54 +0000
Manifest next update: Wed 12 Nov 2025 09:00:54 +0000
Files and hashes: 1: 1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl (hash: CwzqOM5RIGs8V0s71XD/Cja69SoP6jiYK8xEk731XGY=)
2: hFyZQJl9hpSR8MJm5zkkVJyeSKs.roa (hash: dBm/3kMdhPMhsMOkCigtCWUETZQaJ96SgQ6JbE9wZAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8a:ae:bb:b2:f8:2d:8f:7a:98:50:f8:3a:a6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8caa797b900fc355fc2412467751eeb2c1c64be
Validity
Not Before: Nov 11 09:00:54 2025 GMT
Not After : Nov 12 09:00:54 2025 GMT
Subject: CN=da220ce961c3dbb42a7d2f6422a93e57dbb7defb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:f9:d6:5f:02:7f:6a:d4:9b:7d:98:a1:98:
a3:98:19:58:1e:7b:bd:89:b3:34:53:05:d9:bc:08:
72:bd:5e:e2:bd:be:74:3c:25:1a:77:40:ba:d4:25:
f1:34:3f:aa:11:99:f4:38:13:e8:08:15:52:4e:a1:
6a:bb:11:ee:2b:bb:e3:23:10:46:67:0b:42:54:cf:
1c:bf:ef:2c:27:df:25:cb:be:ae:be:38:68:33:cc:
bc:3e:b9:36:d6:3f:7d:a6:e1:61:83:18:e8:5e:43:
b6:38:f5:8c:6f:29:34:59:b6:e0:c4:43:e6:81:9d:
fd:07:4b:6c:65:c9:ad:41:fe:11:a1:cc:d0:39:b5:
aa:10:33:4f:71:31:b2:49:5b:ed:97:6b:55:5d:cd:
3f:30:20:15:4b:39:d0:9e:6c:6f:ef:39:b2:27:89:
00:6b:a3:fd:98:55:e9:d0:47:37:59:a6:eb:a0:f3:
d0:24:8e:29:dc:0d:1b:cc:6c:c8:6b:56:0c:bf:db:
9c:8a:4f:3f:55:43:ee:d4:f9:dd:78:d5:e5:23:90:
4e:af:43:77:d7:05:41:cc:8e:28:dc:ad:4d:a9:62:
94:64:e2:24:d8:df:5b:1b:4f:38:bd:da:2f:05:f6:
67:f0:e3:36:d7:5f:af:30:65:ad:bd:1d:bd:be:fb:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:0C:E9:61:C3:DB:B4:2A:7D:2F:64:22:A9:3E:57:DB:B7:DE:FB
X509v3 Authority Key Identifier:
keyid:F8:CA:A7:97:B9:00:FC:35:5F:C2:41:24:67:75:1E:EB:2C:1C:64:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/1b55cf-be94-49ad-9eb8-9db3d44c6d2f/1/1-Mqnl7kA_DVfwkEkZ3Ue6ywcZL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b8:d3:78:b4:69:a0:c6:3b:cc:78:63:da:cc:8a:b2:ef:8f:
57:bd:d8:7c:e0:fb:a1:36:8e:c9:d0:9b:53:da:72:4f:92:d1:
44:94:a6:ef:0a:0c:f7:4d:a1:8f:e9:b3:a9:c0:7e:c0:b5:17:
6d:64:ea:c3:1f:63:f5:bf:e9:9e:a3:7a:3e:78:31:46:59:98:
b1:0b:39:61:91:cb:e2:ac:fd:38:68:70:c5:9e:d1:8d:f5:4d:
df:11:fa:81:b4:a4:14:33:fa:83:f2:2e:e7:85:2a:f3:8b:5d:
bc:f6:3e:34:a2:57:ed:c2:56:d7:d6:99:4f:63:4f:31:56:8f:
78:e1:ee:30:31:31:5b:7e:35:a9:be:fb:e0:50:92:59:52:56:
ef:dd:90:e5:df:a2:5b:73:c2:ba:9f:fc:0c:05:d7:13:06:7e:
34:59:a3:d6:27:1d:6e:86:ee:e6:03:a7:3b:f5:b8:82:62:f5:
38:84:79:c0:06:91:47:9c:f5:a9:b9:ce:bc:4b:1a:5b:2a:c0:
5f:6d:07:46:25:68:fc:ac:51:65:25:85:98:e3:f4:26:f9:35:
2b:da:60:87:b8:40:bf:20:a1:c1:3c:87:39:ec:8a:6b:0b:c9:
41:34:af:cc:f1:c9:bb:12:db:0e:5e:9f:cb:25:2c:f5:cb:a2:
bd:6a:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:41 2025 by rpki-client