Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: zNJjwLv5INK/aLE4TcsFnqc8hCsSR6E3dJ1FatIoZ9E=
Subject key identifier: 05:6F:CF:35:8C:2F:85:BB:DF:1E:1D:83:0A:48:38:AC:A7:CD:B9:9B
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019A21091BBF7CBAF4A8A33469F89B479CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 15:00:36 +0000
Manifest this update: Sun 26 Oct 2025 15:00:36 +0000
Manifest next update: Mon 27 Oct 2025 15:00:36 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: fj+EhFU8wJf8KiacKvceAymoD5ETDtRCoMcXGhtAxhw=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:1b:bf:7c:ba:f4:a8:a3:34:69:f8:9b:47:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Oct 26 15:00:36 2025 GMT
Not After : Oct 27 15:00:36 2025 GMT
Subject: CN=056fcf358c2f85bbdf1e1d830a4838aca7cdb99b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:23:c5:4e:33:47:3a:6a:b3:de:4f:9e:91:2b:
52:0c:47:92:8a:76:51:0e:c6:32:cc:40:e4:26:af:
7d:75:7c:e7:5c:08:f6:78:a1:c7:fe:92:d7:37:dd:
55:1b:d9:f5:75:86:09:30:ba:fd:2d:ed:02:aa:21:
b6:d2:12:84:f1:9d:74:65:37:08:46:0c:0f:08:1f:
7c:d5:d2:07:49:44:b4:3d:63:83:ef:9f:a2:41:36:
fb:80:e5:b7:4b:05:52:3d:bd:7f:52:32:52:2f:5a:
a7:9e:ea:1f:1d:ba:08:ec:3f:f0:f6:42:25:c9:46:
bd:f3:68:73:2c:b9:ea:49:5b:fb:33:9e:55:59:ef:
44:05:6b:8b:5c:71:c2:49:cb:7b:ac:f5:f4:f6:8d:
d8:5b:7e:c1:d9:c5:57:86:20:8f:3b:cf:a1:2f:aa:
2a:92:d5:da:db:99:33:cf:4d:9c:5b:40:04:3e:3c:
72:b2:da:b6:64:9d:5a:1e:fe:4d:1a:3e:dc:de:3e:
42:b9:58:bd:95:73:ca:42:10:e5:8e:4d:08:93:c3:
62:ca:23:9f:73:d4:87:53:d0:50:33:8d:de:54:0a:
6e:50:36:7e:08:36:43:e5:00:9b:b8:75:f8:c3:1c:
4c:2f:34:54:18:d0:7a:3a:bd:fa:2e:70:c3:12:a9:
eb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:6F:CF:35:8C:2F:85:BB:DF:1E:1D:83:0A:48:38:AC:A7:CD:B9:9B
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:64:f3:f9:93:4f:12:11:d4:4e:0a:b6:6a:02:21:42:b4:39:
6b:59:1b:b3:e1:b7:f3:68:c4:ec:7b:8f:df:2a:32:b1:c0:1f:
bc:51:89:7c:a4:bb:bd:7d:e8:b1:10:b4:e2:0a:09:9a:77:82:
dc:41:72:1c:84:88:6d:38:2d:a8:89:2e:80:e1:30:59:ab:82:
11:2a:b3:7b:3e:a1:38:2c:69:02:bc:80:6e:fe:a8:3e:f1:e5:
79:8c:d0:da:d6:65:cf:95:42:d6:89:7a:da:6e:d7:d3:88:6f:
93:06:4e:b2:4f:f4:d5:6e:38:29:41:36:de:03:a0:df:7e:38:
d3:37:94:67:60:48:f6:5e:15:ee:64:00:f4:3d:8e:3d:5b:d7:
55:d5:e6:05:d0:f5:9b:bd:88:8a:21:d0:2d:a9:b3:54:dc:48:
47:16:bb:cb:2e:60:96:6a:b8:f3:df:b1:a4:de:80:6b:64:b0:
5f:48:ff:c1:9a:0f:eb:92:cc:dc:44:7b:3e:7a:d2:32:00:e2:
b5:40:4f:76:b8:1c:32:fe:b3:08:a2:f6:88:d4:6a:4c:14:05:
34:66:68:20:17:36:8c:9d:d9:36:11:d6:a0:97:56:bc:72:76:
7d:11:0c:5d:3e:2f:be:02:c3:2e:e0:b3:58:01:d1:d9:c7:62:
6b:a0:8b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:39:23 2025 by rpki-client