
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
File: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft (raw, json)
Hash identifier: 3HbdwXNqlTDO4mReWK00FPW3tmhQL2+SyFGnYsy0qDI=
Subject key identifier: 8A:BD:98:8E:18:4A:EC:41:8C:42:2B:C2:1C:1A:5C:CB:FE:7E:F2:DF
Authority key identifier: D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
Certificate issuer: /CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Certificate serial: 019A32A155A52D988481A591F7AB13807BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
Manifest number: 1700
Signing time: Thu 30 Oct 2025 01:00:25 +0000
Manifest this update: Thu 30 Oct 2025 01:00:25 +0000
Manifest next update: Fri 31 Oct 2025 01:00:25 +0000
Files and hashes: 1: 0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl (hash: 6PKB06zDzZF5d1k9BvrI1wl35NoEuVfq5iHXQfjgWpY=)
2: MJ3Ujpsu932Kq9qToC3uCXh54hU.roa (hash: l3V5KY6EuXVHlgG1l6ReQGHr0W/s/8NEtWYweJ7lAL4=)
3: P_fOQuoMuGlAOPCmfzTnkjBIl1I.roa (hash: 7StdsKvi1Pne8B1xArTjZazqt8/ZqEM0Iq/sVM/3q5k=)
4: hrAYR0420UBtvUw-GSTKs3FQjCk.roa (hash: EUwZ4vaZd8b1hNex2hrQ4tIUkpR7m+MzQOOzSNGo02A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:32:a1:55:a5:2d:98:84:81:a5:91:f7:ab:13:80:7b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a4452602c9df977c9d5dd8dc13b6661df40136
Validity
Not Before: Oct 30 01:00:25 2025 GMT
Not After : Oct 31 01:00:25 2025 GMT
Subject: CN=8abd988e184aec418c422bc21c1a5ccbfe7ef2df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:84:b8:55:af:96:e0:cf:ca:4d:9a:eb:81:e9:
27:a9:4c:e4:2f:77:04:a3:ec:48:26:b4:83:b2:f6:
0d:e1:e0:77:14:40:06:5c:48:8b:08:61:79:22:09:
8d:43:b1:a6:02:31:55:aa:0e:5a:66:5a:1e:8b:86:
4b:54:52:ab:78:84:bd:cf:0b:9e:f5:3a:3f:7b:c5:
12:8f:74:b2:c4:7a:80:2b:36:9b:c9:0c:b1:8f:3d:
d4:13:12:be:56:fb:d3:9b:e4:cf:44:d4:92:80:42:
a9:e6:3f:6f:3e:dc:2b:05:30:8e:64:ab:18:bd:d0:
00:94:a0:e6:e6:39:26:2c:a4:f0:30:c3:e7:e8:ff:
a8:57:3b:a1:00:c2:90:1e:2b:ea:15:1a:c1:dd:37:
d0:22:ec:44:66:f3:5b:22:55:a2:bc:39:01:15:4f:
67:20:6c:d5:73:fc:0e:48:da:98:da:ef:3e:76:03:
72:b0:6f:ca:b1:cd:b2:e7:68:00:e9:4e:bb:b4:02:
62:8a:60:51:ab:6b:e7:97:90:d7:97:33:a2:94:23:
6f:95:0a:dd:6c:21:24:f1:62:36:98:60:1f:1e:48:
15:c6:08:1b:e7:ed:5a:73:57:76:8b:61:e9:34:67:
e8:45:e3:06:21:bb:17:de:43:93:76:0d:62:7c:46:
95:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BD:98:8E:18:4A:EC:41:8C:42:2B:C2:1C:1A:5C:CB:FE:7E:F2:DF
X509v3 Authority Key Identifier:
keyid:D2:A4:45:26:02:C9:DF:97:7C:9D:5D:D8:DC:13:B6:66:1D:F4:01:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d5fd99-8ae0-4ae0-b6b4-fe74ef7aac95/1/0qRFJgLJ35d8nV3Y3BO2Zh30ATY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:1f:aa:5a:61:ae:6d:a0:0e:91:23:82:c0:d7:8f:0f:e8:
27:5b:e9:5b:d0:5e:d1:fd:7b:fa:dc:ba:54:44:fb:46:42:a9:
26:9a:b2:f6:fd:b6:9a:7c:cd:c0:82:03:5c:4c:9c:11:1e:6b:
8e:5c:cf:e0:31:9d:0b:c5:ee:51:e4:7c:af:4b:23:dc:dd:a1:
34:9b:56:fe:42:68:4d:19:16:e3:87:04:96:ed:5a:fe:1d:dd:
13:82:99:46:4e:61:9a:58:62:7d:2f:a1:d5:19:b3:37:4b:e5:
00:56:e3:d5:ee:3d:4e:ba:65:1c:27:81:e4:e1:4c:1c:0c:30:
cb:c4:f7:64:e8:92:e3:2c:5c:ac:95:cc:c1:e1:bd:03:60:e3:
b2:62:93:8a:d6:5b:09:3e:0c:d7:ea:cf:58:ba:5b:b2:f7:18:
92:01:2f:1b:c1:75:05:d8:12:e1:5d:c6:a0:16:98:e2:6f:c0:
8f:81:ba:74:97:15:32:13:4a:0d:ed:72:1e:fd:18:31:20:b0:
53:b0:f3:c6:aa:97:34:4c:9a:9f:a2:00:c6:48:76:2e:91:d1:
7f:f6:ba:68:22:8e:d4:12:e5:54:e2:70:ef:5a:b5:8b:6a:2a:
af:c5:a0:28:b4:c3:0e:b6:91:7e:60:71:d0:ef:b1:12:c7:f6:
62:db:28:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 03:25:10 2025 by rpki-client