Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
File: 1-q6U9bfurTpdhIMHiAmi7_ooOA.mft (raw, json)
Hash identifier: 9govY/IFpLpC6f4lkpR7NIiTI/zolkxyAurVgOC3vzk=
Subject key identifier: 84:A3:9E:29:F2:84:3B:7B:AA:03:95:42:A6:0D:70:F8:2A:E2:E1:2E
Authority key identifier: D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
Certificate issuer: /CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Certificate serial: 019A4F628A20A0E586AF81DB59258D11D357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
Manifest number: 144B
Signing time: Tue 04 Nov 2025 15:00:49 +0000
Manifest this update: Tue 04 Nov 2025 15:00:49 +0000
Manifest next update: Wed 05 Nov 2025 15:00:49 +0000
Files and hashes: 1: 1-NNWhK-5UZlX86GIvBS3F5KFXGM.roa (hash: ZnHYmG2JFMVQIt7lMjIb53DbqPPrkNie9D30hGqcWLQ=)
2: 1-q6U9bfurTpdhIMHiAmi7_ooOA.crl (hash: IW9ffpFxN9WuR/J9Dp3vZ00sqOTFCcKp25yemVpki48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:8a:20:a0:e5:86:af:81:db:59:25:8d:11:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7eaba53d6dfbab4e976120c1e20268bbfe8a0e0
Validity
Not Before: Nov 4 15:00:49 2025 GMT
Not After : Nov 5 15:00:49 2025 GMT
Subject: CN=84a39e29f2843b7baa039542a60d70f82ae2e12e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:3f:b0:36:56:4c:50:e3:ce:69:05:36:70:
a8:24:10:4b:3c:92:c6:0e:58:50:08:29:f8:7d:05:
7c:82:45:e0:ff:d2:e0:cb:84:74:28:9e:c2:ce:99:
44:2a:0c:3c:01:00:ac:7f:06:21:d2:e3:61:81:0a:
90:3a:e4:37:28:35:33:e6:74:75:8e:5e:08:ea:e6:
4a:c7:e7:e8:53:47:d6:71:8c:a5:18:40:f9:2b:bd:
60:f8:19:46:2a:1b:e7:cb:40:53:2f:0e:68:c2:74:
ab:e9:87:77:ca:1b:3a:9d:a6:bb:be:8f:1a:09:83:
f9:6e:36:e8:0a:17:63:0b:eb:a2:2f:24:c8:68:4e:
da:b4:35:4c:1f:0f:aa:da:16:6c:a5:cd:d4:4a:dc:
24:c3:43:02:d6:61:da:2b:48:e0:51:bd:9a:0f:35:
7a:cf:3d:bf:aa:7b:f7:c9:84:72:d1:fc:cd:b4:d9:
a5:31:9d:79:dc:7e:b6:41:d9:96:3e:93:3c:ab:87:
ea:70:b7:5c:93:04:99:96:5a:77:6a:86:51:8c:47:
bf:25:ea:ca:88:8f:0e:90:e2:f9:8e:da:4e:94:ca:
1c:8d:31:16:d1:fe:24:73:8f:b6:60:33:5b:10:15:
6c:b2:c6:95:56:9f:d5:d5:3f:50:09:b8:e9:05:fd:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A3:9E:29:F2:84:3B:7B:AA:03:95:42:A6:0D:70:F8:2A:E2:E1:2E
X509v3 Authority Key Identifier:
keyid:D7:EA:BA:53:D6:DF:BA:B4:E9:76:12:0C:1E:20:26:8B:BF:E8:A0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-q6U9bfurTpdhIMHiAmi7_ooOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9afe35-0e3f-4d70-b1a4-2ae793da4770/1/1-q6U9bfurTpdhIMHiAmi7_ooOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b0:07:d3:4f:b9:62:61:5b:08:b1:8e:12:df:2b:5f:1e:2c:
26:e6:d2:16:a1:fd:62:89:6b:fa:15:ad:d2:e2:6c:84:40:6b:
26:a4:01:2f:7c:65:a8:9d:85:0b:3a:d2:dd:c3:ce:1a:0a:0d:
68:0a:57:79:e6:eb:ca:1d:48:ea:e3:c5:73:fc:4b:45:4f:6c:
96:d1:ff:17:21:28:ca:df:c5:aa:45:e6:94:c7:ea:51:85:05:
0d:17:96:d5:40:2d:1f:a8:4b:2e:4d:5f:97:d3:d7:23:62:a1:
c0:0c:1c:f9:00:e4:59:a4:ee:d0:dd:91:3b:7d:76:b1:c4:8f:
1a:71:8c:32:9f:9f:b0:ed:87:ef:2b:09:8f:07:d8:6b:64:05:
53:b3:36:36:d5:4b:11:dd:67:7c:0e:80:1b:5a:d8:f4:66:8d:
f6:4e:37:05:de:0a:e3:b4:36:95:d7:d5:06:39:dc:7e:b3:8f:
15:2f:15:aa:29:f4:4d:d5:da:d5:8a:5a:bc:cf:d2:de:ce:e3:
7b:17:83:7f:61:d3:93:7c:1b:05:90:f3:15:a8:8f:3f:cf:68:
20:e9:1f:52:ec:f2:55:f7:5b:9d:5a:2e:01:9a:e5:3a:7f:09:
84:b9:0a:4d:9d:47:68:0d:44:45:f4:d6:50:71:07:de:c2:76:
fe:89:0b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:23 2025 by rpki-client