Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: 9FQ2z/mohN5u5NFcDlRdGQjMwK6U6D8kiVDfrMyJaVI=
Subject key identifier: 31:BA:43:C5:9A:3A:14:A1:5C:8A:6B:CB:CE:24:EF:62:73:4E:72:AB
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019A4D743F1BE0C7F82FA8CA2EA7DFE10674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 10BE
Signing time: Tue 04 Nov 2025 06:00:55 +0000
Manifest this update: Tue 04 Nov 2025 06:00:55 +0000
Manifest next update: Wed 05 Nov 2025 06:00:55 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: aJ8WkktJrI7i9rDKj2w8uRy0Za/Ixi+D+zeHztXcV5M=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:3f:1b:e0:c7:f8:2f:a8:ca:2e:a7:df:e1:06:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Nov 4 06:00:55 2025 GMT
Not After : Nov 5 06:00:55 2025 GMT
Subject: CN=31ba43c59a3a14a15c8a6bcbce24ef62734e72ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:98:0c:14:d7:a1:d4:b4:52:fc:15:09:cb:fc:
96:0a:9a:02:8b:13:c4:9d:cc:b0:f5:a1:02:bb:1e:
b4:f0:7e:41:6c:98:26:3c:bc:18:cb:b0:33:30:96:
61:74:d5:84:0f:6b:52:c3:12:34:01:c3:06:43:0e:
b0:60:94:59:c1:48:a8:2f:20:e8:7b:fd:09:14:3f:
d6:16:e0:78:b9:88:1d:0a:f4:39:46:68:df:fc:3c:
7a:97:49:53:d1:2d:b8:df:bb:5a:1a:09:56:04:ee:
8c:fc:6a:65:02:da:b4:db:40:fd:ac:f2:24:a8:d0:
a1:62:64:fd:28:48:ac:75:9e:0d:43:63:04:97:e9:
05:50:9e:18:dc:28:56:fa:09:8b:49:85:c9:33:0e:
19:26:94:cf:2d:9b:e7:78:f5:3f:e9:b4:e0:97:51:
5f:49:04:29:26:21:c2:8a:52:f0:c7:af:b3:94:4d:
c2:e8:74:6c:31:de:4d:f7:93:f1:11:46:3b:44:06:
ef:ce:90:61:56:d7:0b:8e:d1:e1:4a:12:5f:2c:00:
21:81:c4:35:a3:5c:07:13:b3:b9:f1:13:94:4d:1d:
22:b8:18:3e:df:a1:ed:bb:15:3d:74:f7:01:c4:06:
64:fe:f9:c2:7c:eb:47:32:4f:94:14:39:59:03:4a:
54:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:BA:43:C5:9A:3A:14:A1:5C:8A:6B:CB:CE:24:EF:62:73:4E:72:AB
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cf:c1:15:66:a9:8c:36:01:90:0c:cd:34:92:23:15:b7:f6:
45:7d:56:03:54:27:12:73:5c:7f:44:d5:11:63:a6:28:38:6a:
48:df:dd:53:9d:b3:5e:04:35:01:6b:8f:8e:b8:91:83:0a:e9:
d7:21:a2:4d:7e:dd:c6:e3:2c:de:25:d8:34:3e:48:a5:c4:f3:
0e:7f:82:26:f5:ce:96:b2:c2:32:26:89:98:a6:8c:21:47:c0:
ea:9f:72:fc:1b:d5:c3:33:99:bf:58:ad:b8:11:70:f8:36:f9:
0a:9f:21:40:fa:32:11:24:2d:45:77:99:0d:b9:b3:1e:61:bd:
21:c8:42:b0:59:a9:03:3c:f8:b6:2a:a1:1d:6c:43:b6:e2:8c:
30:1a:06:ee:f3:f0:6f:5c:14:5c:bc:d9:a2:b8:79:b1:13:c2:
be:fb:b1:34:7f:a5:43:b5:6f:ce:ef:e6:25:46:10:0b:10:5a:
95:d8:bf:35:7e:e5:db:dc:51:f0:ea:80:83:74:07:de:4a:34:
4c:3b:b5:d1:18:29:a4:91:1c:95:e7:24:02:11:73:2b:04:c0:
f5:c6:1a:25:bb:f3:1d:e5:53:00:1e:8d:57:96:06:17:60:07:
28:79:98:54:33:89:d4:a4:d3:ff:6f:cb:72:b3:4c:8c:ab:51:
8b:32:a7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:23 2025 by rpki-client