Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
File: 01kqrEiVItXbGP1jkeA1qXeOo7E.mft (raw, json)
Hash identifier: DDVqmW8GYhDhjWrLAn/ndRtQqA7FzHtshGCHxKtiv7k=
Subject key identifier: 49:A4:2E:F1:C4:29:70:6D:8F:6D:29:F5:8A:F2:59:F6:4B:ED:91:6B
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019A4E861E989D781C6669450C687DC219C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
Manifest number: 1452
Signing time: Tue 04 Nov 2025 11:00:03 +0000
Manifest this update: Tue 04 Nov 2025 11:00:03 +0000
Manifest next update: Wed 05 Nov 2025 11:00:03 +0000
Files and hashes: 1: 01kqrEiVItXbGP1jkeA1qXeOo7E.crl (hash: ntjnK2sFkzzegF6I7E1zlsidooMMV+4laOEQB4YsfoY=)
2: Qhw2m_H5wgy1bU1_w7tg_sEon00.roa (hash: OI2KiRz3XriFCi8yNAm0vl8e78xAWnDgkIja/W4YfWk=)
3: ss1gihVVToicSpjIll9T_OSx9gU.roa (hash: FhBaaNRK7eLkeLLuE6sWEDb9sN1AQ9CWDHvMeiUHSs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:1e:98:9d:78:1c:66:69:45:0c:68:7d:c2:19:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Nov 4 11:00:03 2025 GMT
Not After : Nov 5 11:00:03 2025 GMT
Subject: CN=49a42ef1c429706d8f6d29f58af259f64bed916b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:a7:6d:ae:5a:48:f0:37:35:29:94:b6:97:
e3:a1:b9:1d:5b:32:4c:27:66:25:3e:24:39:d8:ce:
70:92:29:28:68:79:fd:9f:b4:c1:a8:9f:b0:94:6d:
1b:d0:46:0d:4e:cf:29:44:a4:f6:ec:2d:77:2f:dc:
c9:3f:c8:2a:3b:19:37:22:7b:42:f2:1f:53:50:2f:
61:80:35:a0:de:2e:21:08:ea:25:6b:ad:7d:fd:77:
a8:ae:bc:2a:8d:60:d0:62:15:8e:8a:04:ac:45:c9:
27:e0:90:2d:28:b9:9c:9c:bf:0c:2c:cf:e8:52:5c:
d6:da:f5:30:5a:66:45:26:ba:72:70:3e:ec:20:ac:
cd:6d:33:34:c8:84:f0:ec:0f:d0:56:8d:d1:82:e0:
30:61:83:50:4b:9c:bd:5d:a4:75:98:bf:42:2a:7c:
50:80:64:79:2c:6e:eb:f1:59:50:18:91:63:c3:24:
4f:95:f0:fd:6c:f5:0f:10:9d:91:a6:52:fe:cf:e2:
27:86:a9:0c:9d:94:b2:77:57:b9:4d:d8:41:3a:ac:
72:c6:90:82:e5:03:75:87:44:9e:67:3b:25:42:06:
30:69:3a:dd:8a:0f:f6:3e:fe:fd:49:36:50:32:09:
3b:ba:43:c8:14:54:61:fc:7a:20:c6:55:8f:84:c2:
0b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A4:2E:F1:C4:29:70:6D:8F:6D:29:F5:8A:F2:59:F6:4B:ED:91:6B
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:3b:b6:2b:81:43:ed:e7:e3:d7:7d:60:9d:63:2e:72:cf:b9:
56:a9:35:5f:33:16:f5:e3:09:ce:79:bb:8b:b6:fa:15:bf:09:
9a:9f:cf:10:ee:0b:63:01:12:d3:9b:a2:c5:fd:67:4e:d3:ff:
6c:a2:78:42:15:4a:53:25:be:b4:b4:e1:91:7a:14:28:76:22:
f7:37:cc:05:75:38:5e:50:6b:27:00:19:68:fb:2e:94:8e:9c:
da:3a:ad:3a:6d:cc:0e:47:95:fd:2a:5a:a1:46:2b:6a:59:b7:
71:96:5c:7b:9b:43:63:5a:28:80:d0:c8:c6:69:bb:7c:b4:8a:
df:93:58:51:85:14:5a:19:df:00:42:5b:bc:ad:98:52:6e:39:
60:07:75:b3:7f:5b:cd:42:5e:4e:e0:34:44:17:2f:b0:fa:e5:
6b:21:a5:53:8d:23:1f:18:2e:d1:64:fe:fd:c0:95:c2:ff:07:
97:b0:bb:a2:5f:23:9f:03:d2:b2:64:0d:9f:36:ce:ab:a0:9f:
34:26:20:8f:cf:0c:49:09:11:d2:89:93:2a:08:16:3f:71:4f:
9b:4b:0d:f3:0f:88:af:1b:4c:2d:21:0e:a6:c3:d8:14:17:6f:
65:05:98:79:e2:55:22:bd:ed:c3:45:e6:cd:49:21:fb:d2:94:
22:24:ab:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:00 2025 by rpki-client