Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: pUEEjzb7nHvdE/hfLjdW7zbDJslcyL2ZGMEfC/FVxTI=
Subject key identifier: BA:C6:BD:4A:8B:10:B0:81:36:16:23:81:81:CA:DC:13:21:65:9E:BB
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019A4DE1B9628E84EA9CE983DF227FF8558D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0B1B
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: SwazfXt3VGCTkBIeRmINPs5epDX2U0s+Xlhw3GdYKfs=)
2: Y_oNEiPJWS2zLwFvLL35UCRFKWA.roa (hash: q2i0iB2Ep81QHqaDB0CnMDZLGuww93ap90YlQXqqvaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b9:62:8e:84:ea:9c:e9:83:df:22:7f:f8:55:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=bac6bd4a8b10b0813616238181cadc1321659ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:fb:cc:5e:85:c8:0f:d9:cd:11:eb:58:4d:
a6:84:a2:11:34:eb:8a:14:94:48:5b:05:a0:67:bc:
7f:4a:9a:70:a9:5a:c9:f1:e5:77:8a:94:ae:89:5a:
be:82:ab:71:7c:cc:e5:c7:d7:da:65:19:6f:89:45:
61:c5:31:da:91:bb:19:70:1e:3f:12:a5:25:dc:c1:
e5:8e:80:c3:cf:87:9d:7e:2e:02:37:5e:11:68:c6:
00:32:08:ff:19:d1:fb:28:1b:c0:be:4f:bc:6c:5a:
b3:59:61:50:08:28:56:72:a8:eb:70:c5:20:82:7e:
27:52:68:ad:4c:13:23:ef:6b:1e:e7:74:6f:3d:e1:
f6:04:98:db:f1:62:1f:de:de:f8:c0:cf:2e:8e:a1:
d8:dc:b9:26:71:ea:b7:6a:79:66:06:7e:14:73:74:
9a:00:2b:55:1b:f3:93:fa:48:1f:ae:e4:f9:1a:06:
df:15:78:ff:c4:c1:d6:a8:5d:8a:08:fc:ee:1c:a4:
bc:dc:21:f4:a8:53:bc:23:21:0b:4f:de:d8:57:2a:
5a:b0:84:41:64:76:f8:de:a3:a6:d7:77:a2:5d:ea:
53:58:d4:1f:b8:07:cb:c1:b7:41:4e:7f:e9:02:c0:
26:a9:dc:64:5e:1a:0c:e6:5a:7e:e3:6d:57:89:cd:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:BD:4A:8B:10:B0:81:36:16:23:81:81:CA:DC:13:21:65:9E:BB
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2d:ac:b9:6e:93:5d:2d:8e:ec:aa:7c:5a:63:d3:f5:fd:f4:
0f:62:3c:4d:eb:dd:8d:a0:fd:57:0a:e2:4f:7a:8d:00:2a:1e:
d8:3f:91:db:15:64:29:11:a5:19:91:ed:8f:a4:53:81:58:02:
2c:62:4c:53:fd:09:4a:c7:6c:f7:f3:6c:d7:05:ef:bb:a7:5a:
7a:6f:6a:e4:60:2e:72:73:b2:18:36:8e:da:79:0b:07:2a:f2:
75:29:1a:8a:e1:7b:f7:db:70:be:48:ce:86:39:c5:d1:0b:35:
61:3b:44:e3:75:81:66:65:a4:d4:fe:df:0a:bc:30:71:e6:4d:
9b:8f:a0:cd:59:4b:d4:61:d8:0f:18:1b:0d:6b:c6:6a:5e:39:
d0:89:f1:e1:e7:0e:61:ed:a4:e3:9f:c3:f2:e7:65:5c:2b:b2:
eb:97:05:63:76:85:88:b9:24:c3:db:1d:36:75:36:ce:0e:9f:
9f:ad:a1:78:64:fb:d7:10:99:e3:2e:c2:29:43:fa:c7:0f:fa:
d1:67:05:51:37:50:bc:18:7c:94:d6:c5:81:46:bc:ab:99:fe:
b9:8d:7e:d1:f1:f3:b7:49:79:b4:bd:13:db:8b:36:db:29:ce:
0f:3d:f6:ad:55:26:9f:47:29:05:5c:48:6c:76:4a:3a:dc:f6:
7e:50:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:23:32 2025 by rpki-client