Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
File: 1QibzgjFXapXtPOjyQcPs5GFPM8.mft (raw, json)
Hash identifier: uN62ZPpn67ltkarZhsZwx4WtA97oziBE7nNNS0/oS74=
Subject key identifier: 39:A0:32:2A:3E:44:52:FA:E8:5B:79:0E:02:CF:B0:A2:7D:AF:1B:14
Authority key identifier: D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
Certificate issuer: /CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Certificate serial: 019A5006D87A716D1F2A62A16C6F791E1E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
Manifest number: 0BE2
Signing time: Tue 04 Nov 2025 18:00:17 +0000
Manifest this update: Tue 04 Nov 2025 18:00:17 +0000
Manifest next update: Wed 05 Nov 2025 18:00:17 +0000
Files and hashes: 1: 1QibzgjFXapXtPOjyQcPs5GFPM8.crl (hash: AC8F/htt3CQrBlHlLUlQ+H8oNw1VE6d9d/USLgLKxhI=)
2: Vf8IRTOjd5EHRik_XU5SL231JR0.roa (hash: pdMIDPOwO8DUN6tctG8DJMO1R37Vl0PhbVyMv6IZEJE=)
3: x75CgHaNcNlIrskWea67UxRrM1c.roa (hash: xJt3cVolGlaYguNEQZsOwCLANVkSIZwIfqNsviXM16Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:d8:7a:71:6d:1f:2a:62:a1:6c:6f:79:1e:1e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5089bce08c55daa57b4f3a3c9070fb391853ccf
Validity
Not Before: Nov 4 18:00:17 2025 GMT
Not After : Nov 5 18:00:17 2025 GMT
Subject: CN=39a0322a3e4452fae85b790e02cfb0a27daf1b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2f:ca:24:90:2f:e6:92:71:31:1e:8b:99:68:
db:b3:9b:fa:59:05:fe:96:a8:53:ef:7e:30:41:92:
9d:61:15:78:25:f8:c3:e4:c2:96:a9:4f:57:71:ef:
f5:6b:e0:ba:11:c7:67:01:97:4b:4f:7c:b8:ee:c6:
21:a6:14:43:58:e4:b5:01:66:cd:91:7f:95:1a:c0:
4a:35:66:b1:09:a1:63:c3:9a:6d:68:84:c2:47:c6:
a0:c0:ed:e8:6c:9d:98:8f:51:fa:a8:5c:d9:37:62:
7b:8b:24:e7:f4:3f:c0:1e:13:3e:b3:2e:0a:d0:84:
07:29:9d:36:81:f8:23:39:be:44:3c:24:b5:c2:d6:
19:7c:70:f8:cb:e7:66:29:66:56:cb:45:a4:c1:0f:
6e:09:ba:6c:9f:8a:b3:a7:6f:d1:05:dd:46:a8:e8:
e9:8d:b3:69:cb:66:ea:14:2e:36:9b:d4:16:22:72:
b7:00:13:34:f4:87:7e:a5:c0:78:9f:55:f9:fd:04:
41:3f:d6:89:f5:8d:bb:62:49:58:00:2d:74:c5:3a:
87:45:3f:68:d3:51:10:2b:03:29:8f:22:e9:e5:6b:
55:be:d7:9d:2a:ca:78:ed:1d:4c:cf:53:b2:bc:2b:
65:78:ef:78:06:90:e4:22:0d:07:ee:b9:1b:87:65:
97:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:A0:32:2A:3E:44:52:FA:E8:5B:79:0E:02:CF:B0:A2:7D:AF:1B:14
X509v3 Authority Key Identifier:
keyid:D5:08:9B:CE:08:C5:5D:AA:57:B4:F3:A3:C9:07:0F:B3:91:85:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QibzgjFXapXtPOjyQcPs5GFPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/02fde7-d326-43de-8520-6d71fe13d61d/1/1QibzgjFXapXtPOjyQcPs5GFPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ea:f1:74:5e:61:bb:74:47:83:ca:46:9b:87:8f:ec:56:8e:
e5:79:7e:e5:78:bf:03:8a:a3:af:19:e2:e7:5e:3c:5c:40:cf:
d1:52:dc:1a:bd:f7:e5:d0:df:23:e8:cc:76:76:3f:b9:47:73:
14:85:fc:0f:08:f5:a9:ee:27:4d:b1:fd:0b:bf:b5:0c:27:2f:
4b:cd:79:01:6e:ec:f0:92:4d:c7:53:90:f2:3f:b4:78:16:56:
19:f0:a5:28:96:b3:91:60:5a:f7:38:af:f8:64:e1:1c:bc:93:
b8:e2:1f:5c:18:3a:d7:1a:46:3c:fd:0e:ca:6d:0c:9b:76:58:
a9:a1:43:22:be:16:5e:c2:d8:9e:75:05:19:c5:03:41:81:ba:
c8:ba:73:0f:01:ad:b6:4e:44:12:f5:3b:7e:99:db:25:2d:56:
2f:0f:5f:00:62:44:67:6a:48:b5:04:a9:90:ff:1c:21:3b:33:
1d:71:66:76:70:e2:3b:9a:f6:26:e1:fc:6f:5e:20:15:39:0b:
12:aa:35:58:a0:29:69:2b:d5:55:4a:da:ce:ed:29:ba:10:1e:
28:93:32:de:1b:3f:ff:ed:c4:34:74:02:24:65:02:95:3e:9e:
51:8f:64:af:ff:56:ae:b0:3e:37:27:8c:58:8f:ff:8c:d9:49:
8e:b8:f6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:37:10 2025 by rpki-client