Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
File: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft (raw, json)
Hash identifier: DgFoP8DRWc1n+veHyNNunAca1BOy14aIAt7Jxc+RJMo=
Subject key identifier: 50:38:A6:50:E3:91:56:A4:C9:F3:6A:7E:23:D7:18:1B:29:3C:B7:57
Authority key identifier: D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
Certificate issuer: /CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Certificate serial: 019A71B8378B4B5209FA30F0BA023AE8F688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
Manifest number: 0314
Signing time: Tue 11 Nov 2025 07:01:29 +0000
Manifest this update: Tue 11 Nov 2025 07:01:29 +0000
Manifest next update: Wed 12 Nov 2025 07:01:29 +0000
Files and hashes: 1: 1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl (hash: BmUokkushoTQUvwWICYOK9uK0zbvVrmQxqhJ6UpboIo=)
2: CG9KoNDYQYANjw8jkpEMfgifFYg.roa (hash: a/8GNnkxdjWR/BpDGvDmUNc0bdNHqrlCI9YD9Z7wQW0=)
3: cZUoXKNyODDdYDJJ689IFt9l7Fg.roa (hash: 2dlPle1Oc1/h21vw5YqVsut1uxLZie17Tr86ybW+M80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:37:8b:4b:52:09:fa:30:f0:ba:02:3a:e8:f6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6843cd61d8fff1f6cfb380ae243be0b1d9435ab
Validity
Not Before: Nov 11 07:01:29 2025 GMT
Not After : Nov 12 07:01:29 2025 GMT
Subject: CN=5038a650e39156a4c9f36a7e23d7181b293cb757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ed:fe:86:f0:ff:4a:57:6c:ed:ff:cd:43:6f:
04:13:f4:a2:90:72:dd:07:2b:4d:3f:6d:07:34:8f:
12:ff:d3:c9:4b:74:9c:23:c7:70:8a:1c:b5:ab:77:
a3:cd:9d:05:01:67:38:cc:6e:09:a2:6d:62:01:0b:
2b:38:c0:84:16:73:3d:9b:b8:72:0e:48:63:cc:1e:
7e:06:f2:85:c8:8c:a3:e1:e2:50:4e:6f:30:67:29:
27:55:b1:fa:b6:13:4f:2e:37:fb:64:04:25:81:8e:
47:57:4d:fd:a2:79:89:58:77:58:bd:74:f8:32:8a:
85:41:0d:e4:32:55:5a:f5:16:c8:ac:7b:ff:87:a9:
28:b9:f6:d2:37:7f:79:ec:87:6b:87:82:a8:71:92:
4a:75:44:9f:44:94:60:f3:d9:d3:29:09:46:77:44:
4d:17:10:39:18:87:5c:92:c0:27:5b:31:b2:c0:33:
86:58:24:d4:b1:05:7c:03:9f:91:1c:e7:89:ef:9c:
e9:4a:e8:40:03:b3:4f:ec:d0:77:da:29:e2:9c:f4:
a3:61:85:45:5b:b8:88:2d:b8:c7:40:2f:56:1a:6e:
07:81:e6:5c:ae:82:0d:f6:ca:bc:22:60:81:d2:97:
bd:3d:83:68:30:42:b0:ec:65:e1:d3:6c:6c:e6:a1:
ee:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:38:A6:50:E3:91:56:A4:C9:F3:6A:7E:23:D7:18:1B:29:3C:B7:57
X509v3 Authority Key Identifier:
keyid:D6:84:3C:D6:1D:8F:FF:1F:6C:FB:38:0A:E2:43:BE:0B:1D:94:35:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oQ81h2P_x9s-zgK4kO-Cx2UNas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/44cc7c-a6b5-4da6-af8e-eecd09d90c65/1/1oQ81h2P_x9s-zgK4kO-Cx2UNas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b1:19:0a:a6:60:d2:62:fb:19:6c:e5:d3:e5:70:f5:41:80:
1f:61:e6:ce:18:b7:dd:09:05:00:de:e0:06:94:0d:13:2a:29:
5c:5e:c3:b2:5b:0e:6a:be:0e:56:91:ba:ba:9c:af:bc:b9:1e:
4c:34:46:09:65:c2:a3:70:af:81:1f:ff:93:50:c6:d4:ce:f9:
69:76:54:d1:21:12:80:c3:1a:94:cb:1a:a9:18:30:91:fa:29:
f7:bb:c9:8d:40:3c:9b:08:81:d3:48:7f:09:17:79:17:39:8b:
6d:3f:c2:4a:96:57:7e:e2:54:89:ed:40:e6:9b:7f:69:71:bd:
58:8c:ac:92:af:a3:ee:2b:52:21:5c:4e:5b:8f:2b:05:f1:6c:
75:25:cd:d4:18:fe:39:d8:56:f0:3b:ce:ce:52:a9:52:28:b8:
44:85:cd:2b:94:45:91:32:76:40:c4:8f:85:ce:28:1e:59:db:
a3:cf:7f:63:4d:f1:72:7e:1d:79:c1:2b:a3:d5:f2:0a:98:3d:
9c:ab:60:b4:2f:e0:ee:06:c6:97:1f:c9:5b:8e:a7:59:0b:73:
d4:b2:55:3a:51:0e:7e:d9:8c:6a:61:c2:d4:6d:25:6d:26:1a:
f1:63:e9:9b:8d:05:96:42:09:28:e7:1c:52:95:9c:cd:61:03:
09:30:5e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:23 2025 by rpki-client