Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
File: 01QLUY11--_WFr_ZTPBf0lukiLY.mft (raw, json)
Hash identifier: 1ZNno/DbXNe6VZz9oBtDLtpkyiqR1APOrzrHqCx9m58=
Subject key identifier: 38:49:6C:A6:39:25:F5:C2:B7:E1:D8:EC:57:AF:3B:7E:68:D2:50:71
Authority key identifier: D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
Certificate issuer: /CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Certificate serial: 019A5CE74FCAA956A28818F41998A7286C60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
Manifest number: 1715
Signing time: Fri 07 Nov 2025 06:00:54 +0000
Manifest this update: Fri 07 Nov 2025 06:00:54 +0000
Manifest next update: Sat 08 Nov 2025 06:00:54 +0000
Files and hashes: 1: 01QLUY11--_WFr_ZTPBf0lukiLY.crl (hash: +O37G2Q7ykgyEghPoxyyISLQUzDCzrO8XjDysCnFQSw=)
2: 4v0g_DeTqNJGOHL4ln9WhvFfDRU.roa (hash: sBcYkkYKQotMu1+q9bGq7Q8bcGlDCzRATiIZUTpTc8U=)
3: 5hSlWSeMSPQw8CT6h_sMd93nETk.roa (hash: wYDeOrdNcouRFYTYjjyBK+NX7iDJV9WRiz3yP1Z5BdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Nov 2025 06:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:5c:e7:4f:ca:a9:56:a2:88:18:f4:19:98:a7:28:6c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3540b518d75fbefd616bfd94cf05fd25ba488b6
Validity
Not Before: Nov 7 06:00:54 2025 GMT
Not After : Nov 8 06:00:54 2025 GMT
Subject: CN=38496ca63925f5c2b7e1d8ec57af3b7e68d25071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:64:8f:c3:43:03:8e:65:89:88:ac:4a:17:7f:
ac:4f:60:93:b9:a9:f9:95:f8:c8:5a:15:ed:60:80:
9d:c3:95:7a:a1:58:87:d4:2b:cb:d3:dd:4d:f7:ea:
13:02:13:2e:3b:35:de:81:4c:d3:b3:2b:10:77:3d:
57:63:2b:8c:87:77:d8:24:4c:87:e6:4c:c4:87:7f:
6d:d3:0d:1f:d0:cb:d4:5e:ee:a9:6c:10:04:ab:2f:
dd:5d:93:83:2f:dd:66:b4:7d:25:fe:8c:32:39:d2:
b7:ed:a5:44:e5:5f:90:bb:02:71:dc:ab:29:30:8e:
89:a9:3c:b0:7f:46:d1:36:8c:5d:9e:e5:f8:e8:d2:
d9:63:88:54:b4:07:c6:3f:aa:2d:f0:fd:aa:87:83:
2d:38:0b:ea:95:31:87:33:69:f4:e9:91:5e:95:a3:
ab:96:f6:2a:3c:83:74:67:33:f6:fc:dc:2c:cc:bc:
a3:f4:99:8f:91:cf:0a:11:31:d7:3d:48:ad:1d:50:
fe:de:a4:19:81:63:ef:e1:59:83:46:fd:06:c9:7c:
25:0e:9f:63:f0:9d:47:a3:61:28:15:75:8a:86:51:
56:de:b8:e4:ac:70:db:3b:66:c1:01:a1:b4:df:96:
69:75:88:ef:99:54:f1:5a:2e:0e:49:5d:ff:23:69:
e9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:6C:A6:39:25:F5:C2:B7:E1:D8:EC:57:AF:3B:7E:68:D2:50:71
X509v3 Authority Key Identifier:
keyid:D3:54:0B:51:8D:75:FB:EF:D6:16:BF:D9:4C:F0:5F:D2:5B:A4:88:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01QLUY11--_WFr_ZTPBf0lukiLY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/acee8e-7761-419f-b483-b30162e3ccc0/1/01QLUY11--_WFr_ZTPBf0lukiLY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:69:f7:33:c9:1a:a9:32:8b:a1:41:63:6a:19:79:a4:09:1f:
11:75:80:7a:56:53:03:bd:f7:ad:00:2f:86:e2:32:67:26:de:
95:5f:3c:10:0c:6c:39:25:40:15:9c:30:a1:62:b0:16:58:2e:
67:48:b0:6c:b1:46:3a:1c:08:c1:d7:fe:0c:66:bd:f5:aa:b4:
42:bb:99:b4:65:3f:25:01:42:5c:0d:92:32:33:90:f1:14:d9:
f9:9c:ba:c8:6e:27:bb:ca:b8:93:8d:78:43:c8:a6:d0:9f:e8:
e6:5f:8b:d4:61:4e:62:0c:47:1d:b2:f0:4d:db:a1:71:c6:9d:
ee:c6:16:39:3f:c8:28:d1:52:6c:b3:8d:22:91:b6:39:ec:26:
fc:7d:bb:81:48:c4:68:03:1e:9f:80:54:75:7d:27:3f:ab:08:
f7:25:18:f1:bb:f4:18:fa:ac:a4:8a:4f:35:28:4c:aa:b4:fd:
9a:b8:d7:40:fb:5e:de:46:6c:b4:f8:7b:6a:99:99:d0:6e:a7:
11:f4:49:b9:51:dc:b1:8c:83:4b:87:b2:97:6e:82:bf:d6:51:
62:a0:c2:d5:b5:61:1a:dc:70:ed:44:57:84:21:22:9c:d4:fa:
38:37:71:ce:48:63:03:e9:ab:f1:2a:c2:d5:f1:06:33:e2:09:
d3:0f:bd:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 7 12:57:39 2025 by rpki-client