Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
File: 1qqJ97ciJ5wDKULc8khl9tctZQE.mft (raw, json)
Hash identifier: tl+uuzUgaI3Sm/r7gKX6MwXBxE+7Ddm5dZmRqif4nn4=
Subject key identifier: 57:EB:02:CB:FC:FF:85:8F:2B:51:49:E6:AB:61:4C:60:99:30:54:DA
Authority key identifier: D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
Certificate issuer: /CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Certificate serial: 019A4F629913F36DEE004A79DBE6013530A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
Manifest number: 1201
Signing time: Tue 04 Nov 2025 15:00:53 +0000
Manifest this update: Tue 04 Nov 2025 15:00:53 +0000
Manifest next update: Wed 05 Nov 2025 15:00:53 +0000
Files and hashes: 1: 1qqJ97ciJ5wDKULc8khl9tctZQE.crl (hash: AwYBOidqn74H3D0ZiTxw3KCST+pHzpE8qHADGuWREqo=)
2: AgasgsgRMARsZv6ZL1FMUAMH49o.roa (hash: rP0A/zCy7W2yRJEKVS59R2RHbWAgc1CTX30QoNq6GK4=)
3: kIQph00YRfR7VyoSJ5QKs9_47CM.roa (hash: T6/F9gO6dDf2HDaMUJjHPMQQkg1ian0JLCMBF3Ug9u4=)
4: qtgbnELTyW65aNCYZpJqV2m2-Jw.roa (hash: BZNYV9kq2qBJjfITSVC14VQZO/Cg3QnROE1UWyqLr8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:99:13:f3:6d:ee:00:4a:79:db:e6:01:35:30:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6aa89f7b722279c032942dcf24865f6d72d6501
Validity
Not Before: Nov 4 15:00:53 2025 GMT
Not After : Nov 5 15:00:53 2025 GMT
Subject: CN=57eb02cbfcff858f2b5149e6ab614c60993054da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:46:c7:a1:2c:62:7f:0f:29:65:1a:b2:8c:
24:a8:2b:39:0e:3c:c4:1d:1d:86:2e:92:93:d5:80:
08:1c:66:fc:c8:f6:11:21:94:73:16:d2:3b:6d:35:
bb:ec:7c:79:96:b3:f4:10:4c:fe:5f:0b:bb:ca:e7:
2a:d5:48:91:40:ba:2d:8a:27:b6:09:f9:db:5d:13:
5d:e0:00:99:f2:41:ab:9b:a3:fd:80:0e:14:dd:bc:
2c:6b:29:84:81:98:06:e5:e2:c7:69:d1:37:7e:3b:
28:9f:e3:0f:78:eb:2e:c0:c0:ad:e7:1b:8d:9b:dd:
37:6b:1a:d5:81:4c:5c:fc:c9:67:98:fe:39:58:0e:
b2:67:46:86:84:04:43:74:fd:6e:49:34:f4:79:12:
51:7d:d3:fd:a7:b8:60:4d:50:aa:02:d7:2b:2b:4b:
c6:4d:0b:a2:e8:c5:d3:9d:05:80:0a:40:a5:c3:2a:
c1:c0:9d:e4:d4:c4:50:9a:05:01:22:e6:4f:93:ea:
69:77:fc:ef:55:cd:24:98:2c:16:50:2a:05:92:ea:
be:91:97:d8:83:16:54:61:34:d9:1b:59:e2:f5:8d:
eb:62:cc:4b:2e:8f:3f:d6:f3:95:ea:cf:e9:d9:80:
c0:fd:3a:8b:8d:c4:a1:29:13:6a:7c:17:a5:7d:87:
0a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:EB:02:CB:FC:FF:85:8F:2B:51:49:E6:AB:61:4C:60:99:30:54:DA
X509v3 Authority Key Identifier:
keyid:D6:AA:89:F7:B7:22:27:9C:03:29:42:DC:F2:48:65:F6:D7:2D:65:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1qqJ97ciJ5wDKULc8khl9tctZQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0e7e28-a829-47d2-80e6-8ba6888669cf/1/1qqJ97ciJ5wDKULc8khl9tctZQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d3:a3:98:e2:82:e5:99:1e:e5:ea:68:aa:c9:ff:a0:c7:12:
d8:63:e5:b2:ed:0c:87:be:f1:7c:10:13:28:57:f5:08:22:3a:
ee:8b:43:94:61:bc:aa:14:2e:18:97:0e:c2:fd:d7:22:1d:20:
98:1a:dc:13:58:a4:e8:31:22:b1:a8:0f:cc:d5:a6:83:e8:92:
0d:60:a0:d4:25:b4:58:96:20:16:11:26:57:8d:d1:ec:06:1d:
f6:ff:a2:b0:97:b6:73:e0:e6:c1:a3:c9:6b:19:11:0d:4a:49:
6d:45:42:ea:a3:7b:08:69:d1:29:29:1b:28:d6:2b:9c:cd:e8:
71:4f:f6:18:c9:81:9f:73:96:87:72:51:18:0d:34:5e:e6:0e:
50:69:a8:15:a0:9b:a2:25:46:c7:2d:84:c0:6b:82:2c:5d:01:
b5:98:75:0d:ca:bc:d8:88:26:ed:eb:59:01:7b:fe:97:31:36:
01:07:65:e3:e0:de:3d:62:26:35:d6:54:8d:10:61:f5:c9:f3:
4a:18:2d:1c:20:eb:44:64:2c:da:00:e8:2f:7d:19:d3:28:59:
cb:b2:13:42:58:fd:f4:29:d7:b6:ec:32:b6:3e:81:9b:83:6c:
b4:2d:10:7c:3f:46:d7:9c:0c:39:26:d9:66:55:e1:f2:28:fa:
11:46:f6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:39 2025 by rpki-client