Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier: 4XHarPANByxNUpXd5qKipUQ4gXduNJT698Rwcc8lVLs=
Subject key identifier: 70:82:70:D9:A2:0F:90:9B:21:23:5E:7D:2E:7A:2E:32:93:91:26:29
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial: 019A72CA412DAF292956123325C118C8E6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number: 0985
Signing time: Tue 11 Nov 2025 12:00:48 +0000
Manifest this update: Tue 11 Nov 2025 12:00:48 +0000
Manifest next update: Wed 12 Nov 2025 12:00:48 +0000
Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: Rdpy8NwapKPnngi3UcvPEVRAIdZGfxPYL5za6zZkEG8=)
2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:41:2d:af:29:29:56:12:33:25:c1:18:c8:e6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Validity
Not Before: Nov 11 12:00:48 2025 GMT
Not After : Nov 12 12:00:48 2025 GMT
Subject: CN=708270d9a20f909b21235e7d2e7a2e3293912629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:98:68:96:30:36:9c:f8:17:87:db:7e:bb:
e2:8c:fa:57:36:36:c6:16:64:0d:dc:d8:fe:55:92:
db:99:85:00:2e:a0:cf:3a:f0:15:fa:b2:be:5f:3e:
0e:00:5d:f7:82:a0:2f:11:31:b7:a2:aa:93:e9:73:
ce:71:69:d4:b6:29:d3:9d:21:f0:d7:40:46:e1:8c:
23:b3:7d:75:31:5c:47:c1:33:dc:f4:c9:50:34:f7:
b6:46:28:38:bf:ae:1a:e5:54:f2:c3:f7:b4:0d:87:
6f:45:3f:ff:f5:90:70:c0:a0:61:1b:ea:ab:9a:9c:
0a:05:d5:70:55:18:77:bb:6e:95:e5:e0:12:bd:02:
3d:dc:dc:90:6c:c0:f0:3c:fd:44:7c:e6:74:ee:01:
a9:d7:39:3d:65:3d:98:12:c5:70:71:b4:53:5b:0b:
d5:41:cf:00:9b:3a:c2:e1:b4:c4:ba:2c:af:e4:e6:
74:30:8d:bb:d3:9f:46:73:2c:8b:32:b6:ab:ea:ed:
94:f7:d7:57:9b:f8:66:33:b1:71:59:02:b2:ac:58:
db:cc:6f:ff:f2:51:52:50:d7:d4:5e:df:cc:8d:ac:
96:cb:04:08:7f:f6:97:8f:15:9a:4a:40:db:5f:93:
d2:66:63:3d:19:a9:4f:24:63:79:01:db:23:c9:39:
fc:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:82:70:D9:A2:0F:90:9B:21:23:5E:7D:2E:7A:2E:32:93:91:26:29
X509v3 Authority Key Identifier:
keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:ca:14:eb:9a:c0:b2:3c:61:b3:ec:97:d4:f5:09:cf:4d:a5:
2a:8a:2f:4e:f7:1a:61:03:58:7a:55:c4:bc:ba:fd:65:f9:1e:
ff:cf:7a:83:f4:49:6b:5a:64:dd:2e:d7:0e:ec:ab:5f:91:fe:
40:73:91:39:28:44:5d:86:c1:74:e3:cb:24:3d:26:c0:92:7a:
56:02:67:dd:aa:57:2f:15:c6:f1:75:8a:ef:26:60:c7:0e:60:
c6:ed:bb:6a:f4:e1:70:78:ff:01:b3:b0:51:f7:b1:74:d4:02:
a5:b4:f3:8a:18:a0:41:ac:ee:7b:c3:81:ed:23:86:15:8e:5d:
7c:37:0f:21:04:b1:26:b4:b5:46:ea:12:2a:c9:43:e8:4e:1a:
cf:60:6f:82:94:c5:5c:7d:1e:19:50:8f:b5:99:b1:80:ba:42:
74:24:e0:4b:83:58:6a:69:5f:2d:d9:cd:98:66:3d:e0:c0:d9:
bc:d2:98:b7:53:de:48:13:cb:83:ed:c2:eb:37:1b:f0:65:c2:
4b:58:44:86:7b:97:91:91:7e:cb:01:9a:e2:85:21:dc:7e:92:
02:bd:80:b6:9c:30:96:03:3f:e1:3c:48:6d:a4:6e:9e:88:36:
ed:2b:d3:e1:e1:d8:12:2c:ac:10:4d:f9:bc:07:aa:b9:cd:5d:
f3:80:13:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyykEtrykpVhIzJcEYyOalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NjQzM2ZiMGZiZGRjYzk3ZWIwMTU2NjkyOGQ2MDcwNmNj
YzY2MjMwHhcNMjUxMTExMTIwMDQ4WhcNMjUxMTEyMTIwMDQ4WjAzMTEwLwYDVQQD
Eyg3MDgyNzBkOWEyMGY5MDliMjEyMzVlN2QyZTdhMmUzMjkzOTEyNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/WYaJYwNpz4F4fbfrvijPpXNjbG
FmQN3Nj+VZLbmYUALqDPOvAV+rK+Xz4OAF33gqAvETG3oqqT6XPOcWnUtinTnSHw
10BG4Ywjs311MVxHwTPc9MlQNPe2Rig4v64a5VTyw/e0DYdvRT//9ZBwwKBhG+qr
mpwKBdVwVRh3u26V5eASvQI93NyQbMDwPP1EfOZ07gGp1zk9ZT2YEsVwcbRTWwvV
Qc8AmzrC4bTEuiyv5OZ0MI27059GcyyLMrar6u2U99dXm/hmM7FxWQKyrFjbzG//
8lFSUNfUXt/MjayWywQIf/aXjxWaSkDbX5PSZmM9GalPJGN5AdsjyTn8SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCCcNmiD5CbISNefS56LjKTkSYpMB8GA1UdIwQY
MBaAFNZkM/sPvdzJfrAVZpKNYHBszGYjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDkt
MDVkMmNkZmExNmE2LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zMGU2ZmUtZGFmZC00YzBlLWIyMDktMDVkMmNkZmExNmE2
LzEvMW1Rei13LTkzTWwtc0JWbWtvMWdjR3pNWmlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdMoU65rA
sjxhs+yX1PUJz02lKoovTvcaYQNYelXEvLr9Zfke/896g/RJa1pk3S7XDuyrX5H+
QHOROShEXYbBdOPLJD0mwJJ6VgJn3apXLxXG8XWK7yZgxw5gxu27avThcHj/AbOw
UfexdNQCpbTzihigQazue8OB7SOGFY5dfDcPIQSxJrS1RuoSKslD6E4az2BvgpTF
XH0eGVCPtZmxgLpCdCTgS4NYamlfLdnNmGY94MDZvNKYt1PeSBPLg+3C6zcb8GXC
S1hEhnuXkZF+ywGa4oUh3H6SAr2AtpwwlgM/4TxIbaRunog27SvT4eHYEiysEE35
vAequc1d84ATpA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 17:06:05 2025 by rpki-client