Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
File: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft (raw, json)
Hash identifier: lRzhP3ZsvB034gXFAGVgKXzCkoVkZON+vCoSN3XIMzY=
Subject key identifier: 1E:D0:4A:FC:59:20:59:5F:FD:84:5D:3E:9D:94:9C:2F:BB:3D:1A:4E
Authority key identifier: 6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
Certificate issuer: /CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Certificate serial: 019A70DC778824A107D46F8DE229C0962C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:27 +0000
Manifest this update: Tue 11 Nov 2025 03:01:27 +0000
Manifest next update: Wed 12 Nov 2025 03:01:27 +0000
Files and hashes: 1: a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl (hash: DEcxw7OtMmjnL8iqk2L8KcR0uYVCRBgu9CaWg8U9A48=)
2: iOsVPSzZeKu_GpAxh4HElCaSMFU.roa (hash: AzLs0VLFJkqJP3rzT9WbseTSbDWK38sW9aaDyk0oNy4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:77:88:24:a1:07:d4:6f:8d:e2:29:c0:96:2c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4aa1e3d8cf43a36b41bbb25dc8fa2ba71c3584
Validity
Not Before: Nov 11 03:01:27 2025 GMT
Not After : Nov 12 03:01:27 2025 GMT
Subject: CN=1ed04afc5920595ffd845d3e9d949c2fbb3d1a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:47:9c:91:c5:13:d2:76:32:41:af:33:12:c6:
9d:0f:8a:87:a6:ca:c9:08:5c:3d:2e:2e:c1:8f:84:
63:23:0f:6f:65:ff:bd:2a:1a:e4:83:6c:00:bc:42:
06:c9:54:73:f3:bc:fe:30:4e:35:ad:fb:1b:b8:b0:
5b:62:02:97:82:9d:31:30:2c:2d:ee:68:a3:b9:9a:
25:46:20:c9:ae:7a:93:50:d2:6e:1d:2c:8f:74:98:
0f:6b:ca:5a:1e:82:54:4e:32:1c:20:55:81:70:2c:
bb:d0:6a:07:d0:d6:0d:c9:34:18:83:2a:5f:d6:ef:
1d:98:55:db:78:1f:ae:4f:f2:c4:18:2a:69:a5:9f:
15:74:fa:84:4e:3e:31:30:fb:f8:e4:19:d4:cc:1f:
f8:78:90:6a:e3:8a:7f:f8:c3:68:01:ff:d8:4f:23:
5e:59:e5:09:9f:a8:ca:89:bb:46:c9:c2:50:7c:34:
77:2c:71:f3:a3:19:95:a1:38:52:26:ac:9d:96:5c:
ba:1b:d1:cb:a2:f3:e4:8c:82:de:3e:d4:97:41:6b:
a5:ac:73:1c:9b:51:6b:8d:f5:43:f4:de:95:65:3e:
c6:77:82:46:e6:2f:af:75:dd:1e:94:6d:1e:98:74:
88:ad:75:a5:1c:7f:23:35:c4:e2:a5:43:df:01:04:
14:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D0:4A:FC:59:20:59:5F:FD:84:5D:3E:9D:94:9C:2F:BB:3D:1A:4E
X509v3 Authority Key Identifier:
keyid:6B:4A:A1:E3:D8:CF:43:A3:6B:41:BB:B2:5D:C8:FA:2B:A7:1C:35:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b05268-8d18-4521-abb6-4b29e9dc74c5/1/a0qh49jPQ6NrQbuyXcj6K6ccNYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:48:18:44:6a:15:ff:6e:5d:86:cd:83:81:b0:18:7c:c4:31:
6d:83:cc:e3:fc:e8:b6:8a:dc:2b:42:2a:8e:af:d8:25:a1:22:
05:7b:43:f5:2d:eb:f4:7c:12:69:27:5c:87:52:1c:dc:43:63:
f8:82:2e:16:2a:8d:68:60:29:95:ad:64:e0:54:28:c3:a7:7d:
4c:37:82:ec:92:30:73:02:cf:c2:6b:df:ac:f8:e9:5b:fc:15:
4d:9a:d3:b6:8e:50:60:19:45:4a:bd:26:39:2f:97:b0:70:fb:
4f:2b:47:f6:ff:db:38:0a:20:db:88:12:76:10:38:19:ff:ed:
cb:89:d2:f9:1b:01:79:e3:b1:24:99:1f:db:28:ab:78:b9:0f:
d8:5b:00:94:f8:1f:89:00:4f:dc:22:b8:56:0c:3c:55:c2:b7:
b7:9d:5d:33:e8:33:b1:ba:82:2f:37:eb:5d:3a:f4:4f:f2:76:
71:5a:d0:f1:94:8c:3b:4d:bb:98:e8:07:48:d6:62:1a:a9:ed:
f5:cc:98:28:f9:89:02:0d:19:34:97:ed:89:0e:c8:1e:c6:0c:
e5:e0:4b:21:ec:cc:f0:42:c7:03:a4:4f:51:c3:eb:fd:f3:30:
32:f0:50:0a:80:d6:58:dd:ac:b6:e9:35:7b:0f:0d:7b:b9:d4:
3b:d5:e8:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:30 2025 by rpki-client