Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: i0V9NO0ld1zojRtb63k+5MmZOS2HOMa/7t8BdNZbS58=
Subject key identifier: 13:B3:D2:AF:5D:37:6A:B9:2B:69:26:5B:03:0A:64:94:94:1A:F8:F1
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 019A209C75264D287B459302B3981ED4ED98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 02F9
Signing time: Sun 26 Oct 2025 13:01:55 +0000
Manifest this update: Sun 26 Oct 2025 13:01:55 +0000
Manifest next update: Mon 27 Oct 2025 13:01:55 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: pQ5Yn1weJOSPYA9/SRUWIUZvOuYdDXbxkWe6lEZMT4I=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9c:75:26:4d:28:7b:45:93:02:b3:98:1e:d4:ed:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Oct 26 13:01:55 2025 GMT
Not After : Oct 27 13:01:55 2025 GMT
Subject: CN=13b3d2af5d376ab92b69265b030a6494941af8f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:f5:5d:d2:80:3b:ec:00:e4:d8:6c:75:f1:
3c:a9:dc:df:3d:ff:3e:9f:0a:cb:fb:31:83:b7:18:
e6:af:a1:ea:bb:37:7b:c3:ae:a4:6d:ce:87:e5:7f:
45:0f:21:d5:d3:f3:99:09:ab:15:3d:7a:32:62:6e:
3d:e4:da:aa:bb:d9:db:b6:ec:a8:99:d4:d0:20:1d:
9a:91:38:0a:af:8b:b7:38:f0:5c:a2:94:35:af:7e:
2b:44:9c:20:29:c2:f5:5b:27:85:c6:44:32:49:8e:
21:ec:c0:9e:72:8e:1d:68:fc:1b:ec:4c:9b:bf:e9:
2a:90:ac:70:a5:56:1a:55:c0:e3:17:9d:ca:05:c4:
76:a2:df:c8:ba:85:0f:f3:da:55:40:ef:7c:68:5a:
ea:8b:28:b8:80:88:f7:5a:3f:ae:11:12:90:d9:67:
4b:b7:e0:83:65:b1:24:07:af:f0:bf:ce:7e:2a:a5:
fd:ae:67:e4:4d:94:a2:12:87:80:e8:e3:72:bc:53:
51:6c:3c:c8:4f:55:8a:c6:8d:22:ad:70:4a:7b:3b:
42:ee:79:ed:d2:5f:5c:fa:e7:49:a3:fb:c3:ee:9a:
b4:2e:13:0a:e8:76:75:e2:6f:ba:0a:9d:65:e7:3c:
f9:d6:e2:8a:21:4e:35:77:42:ad:d7:73:f1:57:7d:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:D2:AF:5D:37:6A:B9:2B:69:26:5B:03:0A:64:94:94:1A:F8:F1
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:91:fb:f5:85:73:0f:27:66:88:ed:71:69:82:56:29:94:04:
ea:bd:6f:20:e8:32:84:53:99:1a:3d:e4:84:f8:4f:d5:2d:ca:
a9:5a:3e:85:92:72:bc:f3:71:c8:ae:d4:5d:93:2d:23:17:6b:
64:45:74:99:e9:a4:91:9b:ac:5a:f8:c5:a7:2e:cd:a0:d1:af:
f9:e1:34:50:80:98:ca:68:c2:4e:b1:f8:ed:9e:61:7a:ac:b4:
67:9b:d3:37:8e:28:d6:d1:ea:7c:a4:50:74:51:3d:df:a0:0f:
1c:d1:51:e0:2f:5f:8d:2e:dd:71:b1:94:0c:6f:02:94:ff:34:
92:0b:60:38:fe:83:4f:c9:94:07:f7:67:f5:35:c4:65:8c:d3:
2b:df:5f:b8:94:cd:34:1e:78:41:e1:0f:b6:39:43:7f:f8:ed:
47:b1:07:e4:ab:3f:23:e2:90:6d:12:25:fe:16:3c:5e:db:27:
e2:a4:31:13:24:34:46:6a:c8:cb:22:f0:45:a9:4a:b3:fb:e0:
8c:ba:1e:36:8f:b4:01:94:eb:f2:eb:9a:5e:35:36:c4:0e:2e:
5f:48:ce:aa:c5:f0:54:c2:ca:0a:af:e8:5f:c0:91:8e:8d:7e:
9a:db:06:67:44:5d:ea:59:b5:62:05:da:7b:eb:33:0a:39:00:
be:39:4d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:43:36 2025 by rpki-client