Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
File: 1fQ0Wir2tUTNG4541z7AK4iVVG0.mft (raw, json)
Hash identifier: x64kS8iuofrebd+WFIb58ICjtwd/4wpfiq/ZRqk/nu8=
Subject key identifier: 31:30:DF:E6:E4:D0:CF:CF:AE:B1:02:15:77:F1:0A:0F:4C:03:D9:C3
Authority key identifier: D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
Certificate issuer: /CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Certificate serial: 019A5074E79E3D555BED5D03F9816AB17876
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
Manifest number: 03A1
Signing time: Tue 04 Nov 2025 20:00:29 +0000
Manifest this update: Tue 04 Nov 2025 20:00:29 +0000
Manifest next update: Wed 05 Nov 2025 20:00:29 +0000
Files and hashes: 1: 1fQ0Wir2tUTNG4541z7AK4iVVG0.crl (hash: /cgTRB+WjuOgQQczpsFOlXU41EXtEfy4m209RLuPvVk=)
2: 3_rjwimXt_D0WovOwZfA5vsj5Yk.roa (hash: 6MzAFEIp9W8TENsOWFtdVkqyFxS1C7g+fYFthRNeyV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:e7:9e:3d:55:5b:ed:5d:03:f9:81:6a:b1:78:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f4345a2af6b544cd1b8e78d73ec02b8895546d
Validity
Not Before: Nov 4 20:00:29 2025 GMT
Not After : Nov 5 20:00:29 2025 GMT
Subject: CN=3130dfe6e4d0cfcfaeb1021577f10a0f4c03d9c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c6:0f:b8:7e:15:26:a8:44:2c:d3:83:bf:3a:
a4:eb:10:05:4b:f4:d1:88:b1:33:05:11:78:b1:4e:
5d:fe:b4:1c:6c:44:23:90:41:d0:71:e7:65:12:a4:
dd:57:3c:ce:b0:75:db:49:fa:98:1e:96:b7:56:ae:
0f:a7:7b:96:2b:27:a8:c3:ee:0c:76:62:56:70:17:
27:84:50:15:f9:38:e6:b9:8b:ff:c9:b5:fa:0f:ae:
ab:35:20:cc:f9:17:1c:6d:ed:94:5d:ac:4b:b0:05:
31:b2:a8:68:1a:e7:e1:33:76:61:d0:10:f9:20:16:
9c:36:19:ff:d6:e8:79:ec:7d:03:36:59:46:bd:60:
ca:49:82:ac:2a:cc:69:e5:22:ab:28:23:75:28:37:
9a:fd:e5:5c:3a:5e:4d:0d:42:67:d9:9e:e9:06:3c:
61:08:93:dd:1a:a0:c4:2b:d6:e0:f9:13:3a:06:8c:
22:7b:42:be:7e:a1:ba:b8:54:09:80:09:e4:79:71:
31:f3:bc:d8:b7:1c:c6:7b:f8:a2:6d:e3:4d:2f:52:
0d:2c:b9:3c:b6:09:8f:a8:e2:31:46:19:1e:88:5f:
db:06:c4:a8:92:82:8e:7f:eb:95:1a:40:13:1c:e8:
b7:58:5b:80:06:b7:26:68:04:8a:82:76:3a:23:b3:
eb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:30:DF:E6:E4:D0:CF:CF:AE:B1:02:15:77:F1:0A:0F:4C:03:D9:C3
X509v3 Authority Key Identifier:
keyid:D5:F4:34:5A:2A:F6:B5:44:CD:1B:8E:78:D7:3E:C0:2B:88:95:54:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fQ0Wir2tUTNG4541z7AK4iVVG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9edf91-3736-4bf9-a38b-25bb9fb19720/1/1fQ0Wir2tUTNG4541z7AK4iVVG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:69:8e:e9:46:70:14:fa:a9:a3:54:06:c8:16:8f:07:1a:58:
b5:e6:96:87:88:c8:67:79:06:43:30:44:8c:6c:0a:0e:75:23:
98:1b:04:e9:ce:f7:a1:e8:51:9b:95:4e:a9:65:d6:7b:3c:2f:
81:2b:2d:5f:a1:6d:78:5c:18:88:c8:ed:e7:15:c9:c2:ea:6e:
46:16:c9:30:70:0b:d6:6e:ce:b7:fc:6f:97:cd:78:32:ca:3b:
be:51:35:40:d5:e5:ab:75:71:1b:8b:6b:c1:ae:4d:f2:e1:2e:
1e:c7:11:4a:62:01:e4:49:03:a0:5f:c7:89:07:2a:06:bc:80:
50:7c:da:d7:4b:21:0c:48:6b:9e:07:e3:d4:57:09:c2:1f:6a:
12:02:96:46:fd:af:1e:f4:80:cb:f1:74:ac:d0:69:d5:fc:77:
07:5a:04:25:6b:7a:2b:7a:9d:32:23:30:c4:33:0e:ce:93:13:
b4:11:d7:b8:43:b9:aa:a7:1a:b2:e6:c5:8f:9d:31:2d:36:2a:
ed:a8:ce:e6:ff:b3:c2:8c:65:74:aa:82:90:59:ad:43:e8:f2:
ff:47:94:7d:4d:4c:6c:17:56:d0:65:f1:6f:98:49:94:15:89:
17:9f:9f:68:9d:6a:4f:92:a6:5a:97:de:5c:ab:be:cc:1f:c7:
ec:63:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 02:01:46 2025 by rpki-client