
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
File: 1qo_vHjjEikVfHi20jpl6y41Pc4.mft (raw, json)
Hash identifier: dPMTaIjyVe2i1QtELVM/rkN+So2xIeNkYiwhCW5PXoE=
Subject key identifier: 62:0D:82:BE:31:34:91:E9:35:8A:34:EE:11:6C:BF:83:C5:BF:47:E1
Authority key identifier: D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
Certificate issuer: /CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Certificate serial: 019A2DE89AF01892734DD51016BF5EE78373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
Manifest number: 0666
Signing time: Wed 29 Oct 2025 03:00:09 +0000
Manifest this update: Wed 29 Oct 2025 03:00:09 +0000
Manifest next update: Thu 30 Oct 2025 03:00:09 +0000
Files and hashes: 1: 1qo_vHjjEikVfHi20jpl6y41Pc4.crl (hash: ggHBlx2yg778f/9kn1HFblLUFHeI23WPonTOE/hrHaA=)
2: 7iFKRLth1Zm4UheUp7tUenlx6tU.roa (hash: y4tZzIay0AgtGP5YoKVVSCeeZFYasXEYu2JLlwWG/oU=)
3: 9B7naTDbTfBC3f0Su46QWyrhOAU.roa (hash: EuLTR97eLUOnyJBm+T95P0s0ZZVOErLTXd4saTTHgqg=)
4: Ej8KsK3ekpSAuBzyfoaBTrkE254.roa (hash: W6V0L2A/Di1Ma4bsmI96DmEyiw9w5QmMthcncjOX6q4=)
5: F3TFrLyovb8XvAopBK7JOYa2mwI.roa (hash: pEvX4onxvm1t0Llqu8JqybLkNG3FnmVsK+ePV2bdtbk=)
6: LZcNgygFBKx2IuLtD2ktQpXW4Ps.roa (hash: I7tPfrwHzB0UAJOseFDltlGuyXCQ69zHCcehJNGrXZI=)
7: M9m5ciKZUlugxrd6zs79XHL4dD4.roa (hash: 5TehzUmwbp1N2JUN9csCq1NNReNAH4jUA6HYU4FBVG0=)
8: OEVx3wt-afSCjQoq4CCBGEYZ0-0.roa (hash: RZxMVkxGx/ioX0a/f6t/tDg0YGbR5g3ZOXjOM4aJF6g=)
9: TN5asrP-O_svuOzye5lJGogWzMo.roa (hash: rh9STD4IRIWTtIYMAcynIA4v5v5kpJ3eCDcSGZQerzs=)
10: V0NyGBzeNeiAwnkgDdus_1vA7a8.roa (hash: RKgBfoEec6XrdZ6UCnyyORQQ1M5776wgDHM2EvtO4bU=)
11: VEzRmKCthg0N9znr0nEC6lBX2SE.roa (hash: uFDhugUUw1ANaPXsl+IH/rhPDlcZVp0gQ5Plq/UIw9k=)
12: XnSGdaCJ3eKb4i-6Nu6dhvAlrx4.roa (hash: wQcutn0UQG9+UbR3j8U6CVNcG7YhBuHIXfvYXpQN+ao=)
13: YZ34ohn7UHU7vWLuHkxIWGq6VME.roa (hash: 0GMkUY1h4araSisikiq5dkNU327B8IVoamMuZRli6ao=)
14: Yw1DL4n3FWC67KL8P9tumDcnyZE.roa (hash: kPAh3h9z93w4ldeG3DZ18aXthzPwd8/sa1w8KSR09RU=)
15: krwPzjnTtCEOQgP9EXp1WO-kgx0.roa (hash: Jq2f8YMj3fJWLcxBtjZ9CHuZ6W1PxUoBmS3CD2sax2Q=)
16: rZ3f2ghlIlMmEeLut9WQeMpv_SI.roa (hash: /O3dwETcjlHRpfy4ApMsXsWCRk5nnssK+ipGTgIqiqA=)
17: svXrG3QIK1PSpFAJHEHHGRbfEO0.roa (hash: 7T2NVDjV6DcXy4mWtWp/NMapveCETPUIEEYMdpJqHYk=)
18: uJPBnwCQe4pWBPSakttM1tJFVcw.roa (hash: SlkGHJE+y8/3ykMchDghQk+vAt9Ko0/kJI2Pi7OwLbY=)
19: yWS3DxYlEa286j-Oj-MizHyB7tQ.roa (hash: ThzwUBysD3Pp4+LTCcV1XKNGgsfv+MNlctzHUQSZ/t0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2d:e8:9a:f0:18:92:73:4d:d5:10:16:bf:5e:e7:83:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa3fbc78e31229157c78b6d23a65eb2e353dce
Validity
Not Before: Oct 29 03:00:09 2025 GMT
Not After : Oct 30 03:00:09 2025 GMT
Subject: CN=620d82be313491e9358a34ee116cbf83c5bf47e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:73:ae:76:fb:33:77:29:a4:0e:0f:2c:f7:
f4:77:b0:2d:1d:ca:b3:89:0f:14:24:6b:fc:09:93:
79:05:ff:79:57:9e:3a:70:6d:e2:9b:9e:b3:e4:46:
48:b8:db:1f:33:e1:84:9c:d7:2d:4b:72:17:65:ad:
51:23:bf:ca:e9:76:ac:aa:24:72:0a:72:88:c2:7b:
78:1e:eb:27:0e:4e:73:2b:1c:1a:1e:58:18:f0:c2:
8a:ad:cb:e6:5c:5b:0e:cf:91:49:bb:0d:7c:bb:0b:
66:27:e9:93:f3:6f:87:81:76:77:49:a9:8c:31:21:
98:ce:02:fb:7c:d0:f3:11:14:9e:06:ac:8d:50:f1:
ec:7e:f3:a8:01:28:32:6b:41:aa:79:bc:c9:7c:c9:
89:8b:ab:be:5b:94:4b:6f:87:eb:03:9c:c3:0b:54:
c8:91:f0:82:76:9b:f6:72:d6:45:15:02:35:b8:44:
44:45:d2:dc:b7:6d:f3:da:43:66:eb:7f:de:38:5b:
ed:30:7d:08:4b:53:54:1f:23:2f:d7:62:92:30:c8:
8b:f3:ec:40:94:34:19:c6:15:0c:e2:74:9d:5f:e8:
37:59:a4:60:08:fa:f6:14:d5:f4:f3:7b:a7:d0:44:
a0:91:7b:15:11:1f:df:31:8f:2c:6b:2f:9b:82:0b:
50:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:82:BE:31:34:91:E9:35:8A:34:EE:11:6C:BF:83:C5:BF:47:E1
X509v3 Authority Key Identifier:
keyid:D6:AA:3F:BC:78:E3:12:29:15:7C:78:B6:D2:3A:65:EB:2E:35:3D:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qo_vHjjEikVfHi20jpl6y41Pc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/6cf8be-253d-46d5-ab7c-8276c8aac50e/1/1qo_vHjjEikVfHi20jpl6y41Pc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b9:30:61:52:a2:44:82:85:51:b0:e2:06:35:51:fd:61:86:
9f:06:e1:e6:b1:66:7b:b6:1a:51:5a:4f:fe:df:c8:78:90:04:
5f:38:91:f1:08:4d:f8:62:8c:8c:1b:07:41:86:72:e6:79:c2:
b3:c2:bb:4b:b3:9c:b3:47:96:f5:de:61:18:7b:80:79:8b:36:
92:75:72:5f:c2:67:63:f4:de:91:39:58:9e:db:7e:30:6a:ea:
3e:f5:c6:4f:fb:00:a1:22:de:2b:88:6b:27:87:a8:71:17:61:
b5:6e:96:e0:72:95:ed:21:2d:de:4f:2c:a7:21:3b:18:80:b4:
fb:05:b8:0e:c9:f9:09:7f:30:18:44:46:5c:23:da:9e:ce:81:
d4:a3:5f:1d:3d:72:5c:f6:07:b9:77:01:79:f7:39:ff:48:17:
d3:1e:bc:77:ee:60:32:dd:b4:48:37:64:88:e3:22:d9:1e:83:
3c:65:56:9e:be:f4:58:e7:e2:6e:02:de:8e:99:3a:ec:ca:de:
79:95:a7:7e:39:84:16:b4:b6:39:b7:3c:30:40:58:8e:45:d6:
92:3d:8c:7e:d7:fb:76:78:9c:6a:cf:4f:e9:81:28:ae:6c:71:
46:56:34:6c:18:78:29:04:91:ed:16:f4:4e:df:a4:01:23:9d:
df:a2:f0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:45:02 2025 by rpki-client