Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: w291anBZgntIg21h0VE2+V7HbGBXtfQ6mNEMnlKrB1U=
Subject key identifier: 91:01:6B:92:FC:8C:1C:73:E2:4C:38:F3:35:79:4C:90:03:B2:FE:FB
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019A7149F0359F20023962E1CA1B0C275808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:01:02 +0000
Manifest this update: Tue 11 Nov 2025 05:01:02 +0000
Manifest next update: Wed 12 Nov 2025 05:01:02 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: zV76BEMWxnkdIIjnPppvpW6J81BnEzjaAuNKXxNIssY=)
2: Cw8lON9cQpyLxWLsB7DBvYnd2Bo.roa (hash: c1sm3zXHf/J5zcMO21JKPte22JewQndWNsFvlD4ZQmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:f0:35:9f:20:02:39:62:e1:ca:1b:0c:27:58:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Nov 11 05:01:02 2025 GMT
Not After : Nov 12 05:01:02 2025 GMT
Subject: CN=91016b92fc8c1c73e24c38f335794c9003b2fefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8d:6a:5f:83:2b:a7:18:a2:94:c3:7b:32:70:
75:13:8d:d3:e0:35:d5:10:a4:a8:96:ef:23:ed:75:
33:8c:be:26:91:69:fc:30:3a:4e:93:9a:2e:0e:1f:
32:cd:d0:f0:20:15:5d:a6:be:f9:1d:70:73:ad:37:
e1:c6:56:f4:67:cd:36:d4:98:8c:30:21:51:73:a8:
9e:5a:fd:ee:c9:25:db:19:cd:75:c6:fc:31:4e:c0:
7d:8f:55:ee:13:ef:83:70:e1:ca:99:bf:b3:34:49:
07:d6:86:ed:ad:e8:bc:a0:4d:a8:19:2e:05:4a:2c:
d8:67:05:be:cb:ed:71:0c:c3:e6:b1:b8:d6:5e:82:
ae:67:bf:ab:36:e4:ee:d6:71:4d:53:27:a1:09:17:
1c:19:aa:00:17:97:bb:58:b6:37:fb:7e:59:50:8a:
f5:d5:ad:73:05:13:7a:32:86:bf:0c:7a:ab:0d:29:
25:0c:d3:cd:9f:fe:10:fe:4f:42:b4:01:c6:5d:62:
45:56:da:71:96:ab:76:9b:ae:e8:3a:4f:8f:fd:dd:
95:a6:2b:8c:6e:af:48:dd:ed:2d:13:cc:78:9d:3e:
78:ac:41:73:3e:1d:6f:b4:92:29:99:2c:ac:86:e7:
b9:5a:fe:d4:85:71:d6:e2:47:ff:7d:21:70:ba:c9:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:01:6B:92:FC:8C:1C:73:E2:4C:38:F3:35:79:4C:90:03:B2:FE:FB
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:84:4f:54:ed:75:6c:d7:bf:5e:b7:ef:4b:77:d2:29:1d:55:
63:1d:ae:b3:fc:69:5b:0d:f8:a4:a5:e4:3d:37:4c:26:16:fb:
a9:53:68:bb:4a:aa:c7:6b:e3:16:28:e4:7d:18:37:b6:1a:e4:
6c:7e:bb:a1:d7:fe:ac:b4:c2:3d:16:c5:92:44:74:42:53:32:
80:d4:cf:9f:b9:44:01:a9:f1:9f:e2:07:6d:15:c6:78:74:aa:
6f:8f:d2:e1:11:81:5d:fe:3b:79:ff:a0:bd:0c:84:89:fc:cf:
ec:22:0c:ec:30:5b:33:37:da:87:65:ba:18:2f:04:15:75:16:
22:51:b2:1b:79:34:ad:41:ef:38:39:be:3f:cd:c5:04:15:55:
42:94:df:2c:b6:91:a2:95:80:e7:af:4c:22:3b:d4:c6:cf:79:
27:ee:db:d0:b6:21:0a:be:1c:ac:af:f4:e4:b2:10:71:4a:f0:
8d:00:bd:bb:22:99:02:51:d0:47:b3:52:41:aa:ac:c3:a0:d3:
33:f1:fb:16:d1:4f:81:cb:c8:38:c1:c2:f9:11:9b:03:03:4b:
27:5a:0d:98:bf:11:e1:ea:0e:7b:b1:ef:cd:8e:ea:6c:5c:a9:
bb:41:3e:ff:38:ba:53:79:24:fd:08:ed:b3:5d:8f:4b:dc:f7:
11:35:41:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:15 2025 by rpki-client