Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
File: 1-qe1orkHCRPTSTKBX-tH42Mf318.mft (raw, json)
Hash identifier: EaGp2KOJ+AGpr5rymjwvk/A3J47M3CJRAdi6w6USw6g=
Subject key identifier: F0:4F:99:4E:52:1B:B5:51:30:00:96:E2:6F:1A:51:6C:BC:51:BB:EF
Authority key identifier: FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
Certificate issuer: /CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Certificate serial: 019A24E58732217856039B02AA2A9965A007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
Manifest number: 14D2
Signing time: Mon 27 Oct 2025 09:00:13 +0000
Manifest this update: Mon 27 Oct 2025 09:00:13 +0000
Manifest next update: Tue 28 Oct 2025 09:00:13 +0000
Files and hashes: 1: 1-qe1orkHCRPTSTKBX-tH42Mf318.crl (hash: hCF+w64sV9Y9TiSxn6YAFuadb9c30pCmaGAEdZ4Ow/I=)
2: gHlRquCMx6iwfFhK1AbziJf-SOA.roa (hash: vGvXkm75uZ6w5eWBxSl4fiUVkztcBJ6xWRWL2h8kjfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 09:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e5:87:32:21:78:56:03:9b:02:aa:2a:99:65:a0:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa7b5a2b9070913d34932815feb47e3631fdf5f
Validity
Not Before: Oct 27 09:00:13 2025 GMT
Not After : Oct 28 09:00:13 2025 GMT
Subject: CN=f04f994e521bb551300096e26f1a516cbc51bbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:9a:39:43:88:fe:11:7e:41:d0:a6:d6:db:
76:3c:b0:c0:8c:c1:00:17:bb:7b:08:a5:81:03:94:
28:41:67:14:97:85:10:a9:58:47:ba:bb:a7:bd:08:
eb:c2:79:b0:4d:52:30:a7:4d:f4:d6:ac:56:6e:48:
e3:99:06:f1:c9:2d:e9:6e:79:81:6f:ed:b9:6d:ea:
14:df:c8:3d:6e:a8:74:ec:c1:d1:a0:10:36:de:a4:
49:80:57:14:b6:64:95:2c:10:bc:f7:e7:de:89:ff:
ed:14:76:0b:8a:57:40:e5:85:e9:49:95:76:76:8a:
42:65:5b:0f:9a:c7:6e:dc:f3:88:a2:f3:86:fd:07:
71:9a:45:3f:67:69:cf:b7:ab:f4:8e:df:8e:8c:10:
b9:fa:11:62:16:a1:d6:52:2a:9f:22:c1:18:47:2f:
35:40:60:06:b4:dc:49:21:37:e8:7f:4a:66:a7:91:
0d:b9:7c:7e:ed:5e:da:f7:c4:23:c0:7f:18:ea:e7:
26:f7:51:da:35:42:8b:a4:4c:43:fc:5f:b5:fa:5a:
2e:d7:cc:f1:9d:41:76:10:39:9a:63:f0:d4:3f:2a:
30:ec:08:dd:d2:56:bb:c2:59:d9:a8:7d:18:0a:1c:
4a:c3:7a:03:38:32:b7:3a:7d:fd:26:a4:e9:a3:9a:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4F:99:4E:52:1B:B5:51:30:00:96:E2:6F:1A:51:6C:BC:51:BB:EF
X509v3 Authority Key Identifier:
keyid:FA:A7:B5:A2:B9:07:09:13:D3:49:32:81:5F:EB:47:E3:63:1F:DF:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qe1orkHCRPTSTKBX-tH42Mf318.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/51ad54-dd30-4f35-906c-811dcb7c44fc/1/1-qe1orkHCRPTSTKBX-tH42Mf318.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e5:16:e8:cd:32:5e:f7:5c:61:44:82:d6:ac:05:36:69:58:
37:a9:8d:8f:18:f4:b0:f5:26:8f:6a:94:04:f5:5e:24:70:59:
24:0c:5b:c0:ba:51:58:1f:7f:46:b8:f5:42:9a:a3:83:a4:ad:
39:aa:e6:9d:c5:a8:8d:c7:a7:71:49:c1:12:b6:ae:ad:29:b3:
78:a7:bf:b9:6d:41:0a:23:c9:a4:72:a7:48:4d:39:46:f4:50:
d2:d4:b4:79:07:d5:19:30:d2:71:a2:17:e2:be:0e:5e:a0:64:
0f:83:3e:23:9d:02:a2:48:2b:47:33:3c:3a:a1:24:51:27:5a:
d3:25:39:aa:7b:1c:11:75:29:dd:8e:9b:ee:dd:44:8c:a7:13:
40:79:11:bd:70:96:0d:7c:a6:da:07:1e:f3:d1:16:ff:45:e8:
bc:aa:af:6c:ca:64:15:97:76:de:32:3e:80:42:82:e8:1b:e8:
38:89:50:a7:d1:d1:1a:44:94:2b:6a:23:64:51:c5:ec:15:51:
e5:ba:34:9c:d5:4c:47:65:0e:c9:df:5d:55:2b:bd:64:6f:de:
2f:a0:c3:d5:38:eb:b4:40:1f:2c:53:62:f2:0e:5d:69:cf:68:
e8:f5:9d:26:a9:2d:a6:7a:3d:ab:5a:da:51:4d:81:c3:f5:53:
13:0c:5e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:48 2025 by rpki-client