Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
File: 1QYosB6kR3GDy_-S23oMWBRRlaQ.mft (raw, json)
Hash identifier: 9Eg4YmZ79JIkcOjpRz31n+rihXvYXdyDdq4EEyWJ1KQ=
Subject key identifier: 41:34:FA:19:28:38:34:DD:6C:42:22:95:70:B7:8F:10:02:17:AA:81
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 019A4F621326BC7805ACA300330E66D026D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
Manifest number: 0BB3
Signing time: Tue 04 Nov 2025 15:00:18 +0000
Manifest this update: Tue 04 Nov 2025 15:00:18 +0000
Manifest next update: Wed 05 Nov 2025 15:00:18 +0000
Files and hashes: 1: 1QYosB6kR3GDy_-S23oMWBRRlaQ.crl (hash: H5rq0mtS5ifmIz4Kwk57gPPlV1gP6p0ZKAVNsFtQHzg=)
2: _pIpWC2mISR6dq-6G_9xF8Tberk.roa (hash: AVYabGQyAC/dt95JDDKLIXfkPwJWf47FBbAQTadMiJU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:13:26:bc:78:05:ac:a3:00:33:0e:66:d0:26:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Nov 4 15:00:18 2025 GMT
Not After : Nov 5 15:00:18 2025 GMT
Subject: CN=4134fa19283834dd6c42229570b78f100217aa81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:70:cc:36:d3:94:08:d5:a7:f8:4b:f0:bc:fe:
d7:8b:f2:91:cf:a4:bb:06:0e:76:b9:0d:3a:66:8c:
61:e8:aa:34:7c:f4:1d:ab:dc:52:85:77:5e:71:1e:
68:61:7d:d9:e6:9e:2e:c1:87:5f:61:8c:ca:e6:78:
8c:3c:ae:58:ae:e1:37:88:cc:bd:98:0e:6d:76:c9:
07:23:77:05:00:ff:07:30:62:8c:07:29:df:57:ab:
dc:ee:5f:5f:24:d8:96:fb:a1:2a:d9:3c:ed:d8:95:
04:55:6c:f7:5a:97:df:9b:c5:39:a7:2c:c8:4d:d0:
46:c3:d5:7f:8c:6a:4b:a6:da:76:54:ba:8d:a6:19:
f1:38:96:37:a6:a6:61:a2:c5:aa:61:16:79:75:76:
9c:26:24:e3:7e:b7:e0:aa:62:9a:97:6a:36:fe:0c:
f7:6a:cb:ab:c4:a7:79:f6:41:6b:7b:4c:d8:f2:fb:
d7:c5:81:bc:a4:05:89:3d:3e:6c:5c:4b:d3:5f:1b:
e6:5d:87:cc:bb:2b:0f:53:c4:c0:0f:ff:a7:40:b3:
79:c1:ff:43:3a:43:78:ab:60:97:a1:06:10:d7:74:
be:6a:1e:91:a9:ec:75:a7:75:20:a2:42:29:d5:48:
86:dc:88:39:32:ac:0e:96:20:63:94:39:35:a3:c5:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:FA:19:28:38:34:DD:6C:42:22:95:70:B7:8F:10:02:17:AA:81
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c6:be:92:fa:5c:d0:c5:81:6e:97:88:c3:3e:1b:dc:3d:d0:
a3:7a:ab:e3:c1:5b:31:f0:f5:47:77:12:fe:b5:54:71:fd:e0:
3b:97:e6:99:0f:2a:df:03:e2:16:d3:4d:25:a7:18:96:90:c8:
91:1b:ea:5e:21:c6:65:2b:7f:bc:e7:39:ed:31:08:0a:44:ac:
ee:bd:72:9a:54:43:fc:e2:9d:fc:be:b7:32:f6:05:91:39:e4:
39:1c:07:ed:a8:9a:14:50:95:1b:e2:c5:e5:f7:27:0f:f1:37:
91:53:32:1f:0f:56:fb:4a:d1:3e:54:bb:b4:73:d4:5d:76:9a:
32:f9:fc:9f:af:c1:b7:02:9e:8c:f2:f9:ec:55:fd:14:9c:0e:
0a:d2:c0:f5:bd:81:5b:12:35:19:d9:dc:45:f6:e1:a4:6b:94:
07:f9:a2:7a:65:f7:e2:69:aa:da:09:4c:9b:ac:a1:70:75:34:
cd:eb:63:3a:91:d1:9c:8b:9c:7d:2d:4b:06:3f:af:35:c2:bf:
a7:d4:46:bb:23:95:36:9b:8c:2c:07:ea:c8:c3:84:6d:94:c0:
2c:54:5e:67:55:71:b0:a4:1e:92:ff:eb:f1:f0:f1:58:b7:f2:
06:af:f4:da:24:62:39:0d:cf:9f:cb:5a:0b:85:b5:66:4f:2c:
88:20:a6:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:41 2025 by rpki-client