Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: dOhXqMzUoWIu6Yjk9RPiKEtFUNwPq7n+rmftrdG+xHM=
Subject key identifier: DE:2E:24:A9:BB:FF:52:48:83:8E:03:60:E0:33:07:7F:6A:8F:78:FB
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019A71B811CE04C47F7F15868425672E5D27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: V9TPXOXscu9FEQD7RU2GU+xukIHdwUzv/mFsXrxzZww=)
2: c4ZXKHEEWbDTWPlUmqmsKLah8L0.roa (hash: F1WOSma/c9vioH3acUcPAtmz6J5nLcuBuR+41Bzl7HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:ce:04:c4:7f:7f:15:86:84:25:67:2e:5d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=de2e24a9bbff5248838e0360e033077f6a8f78fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6a:c9:6d:14:ad:1a:65:1a:e6:bd:52:f6:5f:
c0:de:f6:23:a7:58:b7:78:ec:19:fb:55:0d:4e:51:
f2:ef:22:01:67:af:68:be:7b:09:dd:13:76:86:36:
62:92:12:d2:46:72:47:84:3d:3f:a6:67:0c:c8:18:
0a:1f:92:22:25:b0:72:68:68:41:08:17:38:47:9a:
f4:6d:5e:58:26:4b:01:12:eb:4e:5a:ca:47:f7:3f:
03:3e:36:8a:58:0a:fd:28:56:bb:bc:7f:f0:64:06:
3e:15:75:d7:19:4b:cf:fd:55:40:47:67:d5:65:88:
b3:57:a2:f4:dc:9b:7f:82:52:ca:f1:e4:0b:66:75:
92:77:04:c6:bf:87:d0:8f:3e:6a:a4:24:07:cc:ad:
23:65:a5:97:f9:6a:bd:59:36:cc:da:1e:d1:02:17:
29:5b:f5:71:08:f2:19:dd:69:1c:f8:86:b2:f2:f1:
a4:00:e0:18:ff:1f:f7:93:a9:f8:37:0b:0f:ef:40:
51:a5:5a:81:80:92:2b:24:2d:80:c3:d1:1d:0a:84:
d7:4c:6d:73:c5:8f:93:76:23:4a:9c:c9:e4:4a:de:
21:05:18:d8:53:14:82:ef:d8:8e:b6:59:3b:63:f2:
bf:c4:9d:61:a3:1f:c1:a1:f5:c7:03:fd:91:9e:ef:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:2E:24:A9:BB:FF:52:48:83:8E:03:60:E0:33:07:7F:6A:8F:78:FB
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a0:3d:94:e1:9f:5d:36:19:60:cf:b1:00:52:fc:76:ad:07:
b4:59:6c:2d:b9:84:4d:28:05:e3:a1:db:82:31:bb:a1:b1:ca:
5b:94:5f:19:ef:b2:29:3d:01:52:99:91:ff:7b:5f:d3:76:13:
f7:34:11:9c:13:40:c3:ed:ee:ef:a0:87:9c:b4:58:eb:21:4b:
de:69:45:20:d1:1e:4b:54:be:15:0e:71:4d:16:e3:91:4f:8d:
84:67:cf:d4:ad:43:25:f9:c3:6b:2b:a8:92:84:aa:e7:3b:8c:
24:71:33:06:b2:1a:da:8e:bc:5f:ea:43:de:96:f5:bc:40:22:
57:41:f1:9f:29:dc:69:a3:cb:5d:c2:5a:38:8c:74:79:db:eb:
5a:56:a3:34:08:1b:18:17:44:d7:0f:4b:de:98:3c:b4:fe:97:
3f:05:59:81:e0:ee:72:25:64:82:ea:88:09:9b:fe:d6:8f:0f:
aa:89:d5:d9:e0:e7:c7:bb:e2:55:be:37:51:44:05:22:17:7a:
65:93:64:40:b1:e5:99:ee:01:9b:f0:5f:45:af:f4:36:b9:37:
2f:6a:ff:e7:dc:ce:c9:3c:22:82:dd:46:02:3c:88:a4:fc:f1:
23:d7:d7:aa:37:66:41:66:73:0b:08:cf:33:50:18:03:5b:fd:
39:23:f0:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:11 2025 by rpki-client