Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: Vk+5bt9ZPmmQhdtZOIOxqpAf+06l59/FZre1FFgrg60=
Subject key identifier: 49:C4:59:38:F6:D3:FB:16:49:36:D4:0C:E4:B0:B6:4E:70:9F:9E:7D
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019A4DAA9BD2EB1B69F6C5E4ED7F1B3B27DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 11A4
Signing time: Tue 04 Nov 2025 07:00:17 +0000
Manifest this update: Tue 04 Nov 2025 07:00:17 +0000
Manifest next update: Wed 05 Nov 2025 07:00:17 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: RYM8nVsMm1XVHERiyR21JuOd73xcX3cwvy+Y7y1oaGk=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:9b:d2:eb:1b:69:f6:c5:e4:ed:7f:1b:3b:27:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Nov 4 07:00:17 2025 GMT
Not After : Nov 5 07:00:17 2025 GMT
Subject: CN=49c45938f6d3fb164936d40ce4b0b64e709f9e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0b:d6:3b:b3:c5:1a:78:ab:e9:c9:fb:9f:ef:
96:20:82:f5:fc:b1:f4:9e:cf:0c:dc:84:67:a7:19:
73:42:05:95:ca:a4:2b:a2:d4:4a:34:71:04:5e:79:
57:f0:f4:39:86:82:6f:de:8b:13:d6:ee:2a:75:f2:
13:85:c6:e0:df:6b:7a:00:4a:91:ed:a7:96:0d:1d:
b9:a0:c6:3b:a8:9f:00:46:22:ba:da:90:7e:4f:eb:
aa:56:e5:d0:37:74:ae:2b:6a:56:00:8a:08:79:ea:
34:19:f9:4e:2e:5f:c3:60:b1:5f:05:16:78:ef:18:
8e:a9:50:db:fa:d0:0a:4e:97:78:84:10:48:75:c9:
4d:75:97:e3:b7:a8:ca:0d:fc:ef:86:b1:d1:9d:3c:
6c:f6:92:82:fa:1a:a6:3a:08:de:a6:28:a0:0a:c7:
a8:82:dc:b2:fd:c0:94:25:ac:47:7c:94:78:bf:8f:
27:c6:82:58:17:33:ef:29:2c:87:ef:c2:7b:c7:a2:
e0:49:8a:cd:a4:5d:1f:ad:1c:00:c4:7e:93:cb:0a:
af:92:b3:0e:18:a5:a8:36:a6:c8:d9:25:ae:7b:2f:
5f:7b:69:d6:75:58:43:6d:60:02:1a:b5:ac:49:33:
28:cb:49:8b:2e:b0:86:1b:f5:6f:9d:2f:52:fc:99:
d2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:59:38:F6:D3:FB:16:49:36:D4:0C:E4:B0:B6:4E:70:9F:9E:7D
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b0:b5:84:27:2a:c8:90:aa:7f:15:65:ae:4f:5b:51:78:a9:
ce:c8:e9:c9:f1:d7:7c:1d:b3:d3:1b:a6:f5:9d:4d:c0:52:dd:
b7:c9:fc:e4:5d:3b:85:f8:dd:f8:b4:0c:98:36:76:13:a2:51:
09:30:ab:d1:e2:c1:ea:23:fb:d2:76:ae:e0:b9:ef:46:6d:09:
0a:45:e4:dd:05:f2:47:30:a6:55:20:da:c9:c6:9d:e3:c9:d0:
ce:e2:10:06:7b:ab:43:4e:4c:36:ed:f6:63:d8:47:61:25:12:
8e:4e:d3:20:28:fe:ae:0b:57:8e:86:e9:1c:fb:09:41:95:55:
c5:7b:2b:2c:83:d0:1a:ab:dd:ca:3c:c2:84:9e:5e:94:f4:93:
b3:0e:16:cc:ec:32:50:06:31:37:53:a0:24:b9:da:90:3c:e0:
5c:a1:22:b4:64:35:a9:ee:da:ee:8e:00:f6:da:11:db:ab:a9:
bd:03:7d:27:0f:d6:57:65:fb:79:77:eb:e1:17:b8:11:48:50:
48:4a:bc:4a:99:f9:eb:ed:02:c1:19:66:15:ef:c0:8c:4e:23:
2d:2f:c2:ca:38:65:d4:a7:86:77:0a:c4:d5:f9:73:ed:8a:15:
6e:7e:3c:fa:fa:83:02:5f:c3:39:e5:d6:64:9c:90:64:b4:ab:
13:09:57:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:52 2025 by rpki-client