Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
File: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft (raw, json)
Hash identifier: U1PtFyFIoSt3ML3ZtymgJZ7R7suBCJevWYk9jwQ26ts=
Subject key identifier: 9E:EB:97:F8:7F:9C:52:72:3C:05:04:51:41:23:62:69:0A:AD:02:D1
Authority key identifier: FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
Certificate issuer: /CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Certificate serial: 019A4EF58BD399D713A422810CE0AD91F1FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
Manifest number: 0311
Signing time: Tue 04 Nov 2025 13:01:46 +0000
Manifest this update: Tue 04 Nov 2025 13:01:46 +0000
Manifest next update: Wed 05 Nov 2025 13:01:46 +0000
Files and hashes: 1: 1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl (hash: NYc+JzLHHPTLaXP3zVwVWaDKJS7w78SXiX3vlLPdPRg=)
2: bqDqPRBPFnQ0iuBvOTbQfn6LTaw.roa (hash: xUukexmvBcgVlPXbTsXO9o0sOZZdZlg/TOftt6SW0yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:8b:d3:99:d7:13:a4:22:81:0c:e0:ad:91:f1:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa646a6323b3d6fc34ae49d8be8884f7292bdbf4
Validity
Not Before: Nov 4 13:01:46 2025 GMT
Not After : Nov 5 13:01:46 2025 GMT
Subject: CN=9eeb97f87f9c52723c050451412362690aad02d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:5b:f6:c1:ea:2a:a9:d2:aa:62:aa:59:4a:
26:fe:c4:2d:95:ec:e3:9f:4d:7a:50:3e:96:56:5a:
91:ab:4b:c3:47:68:c0:26:f3:d5:c1:1b:d5:8f:3f:
d4:9b:bf:ad:17:37:c0:26:e7:61:4f:11:17:b3:81:
ce:81:c2:25:88:fc:af:b1:6d:ad:27:a5:39:46:ff:
0a:7f:02:eb:e0:dc:85:87:bf:84:0a:5b:53:e7:fd:
cf:b5:93:2d:62:68:88:fb:40:2f:35:62:e9:de:3a:
8c:00:60:b5:c9:1f:c3:ad:c6:f2:98:90:96:c9:a6:
f1:dd:d3:62:56:ff:47:db:23:78:de:cc:5e:ed:15:
ac:b8:69:db:94:3e:82:68:42:2e:a8:a8:2c:02:5e:
c5:8a:e9:f3:5e:ff:8e:da:b8:8e:ab:dd:5f:01:1f:
3c:48:89:7d:7d:a0:22:4c:d7:9f:4b:90:35:db:b1:
9b:66:dc:4d:4c:09:e9:6b:67:08:f9:a5:ef:ab:25:
fe:9b:63:eb:22:f1:80:fd:23:1f:67:db:e4:8c:b6:
73:8c:fe:68:5d:f6:b2:7f:22:20:06:02:9a:24:b0:
17:f1:dc:55:dd:03:ed:d8:f7:a7:74:cd:b2:c8:d7:
bc:be:a5:11:a8:e4:97:b6:b7:bf:e6:de:a1:44:db:
78:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EB:97:F8:7F:9C:52:72:3C:05:04:51:41:23:62:69:0A:AD:02:D1
X509v3 Authority Key Identifier:
keyid:FA:64:6A:63:23:B3:D6:FC:34:AE:49:D8:BE:88:84:F7:29:2B:DB:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6bf54c-d806-463a-af37-59e193262ce4/1/1-mRqYyOz1vw0rknYvoiE9ykr2_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:ed:e2:b5:94:44:8f:28:9e:8a:72:fb:21:ed:67:0b:5e:14:
42:04:f8:dc:3d:6d:e1:b5:13:ad:0e:d1:72:79:d8:67:9c:6a:
10:2d:b4:24:05:d4:dc:db:fa:48:8b:45:47:b8:e8:4a:60:b1:
cc:55:c6:e8:d2:6f:b1:09:8c:11:0a:dd:2c:5b:c7:e1:db:4a:
55:a6:65:54:57:64:45:8e:4e:b9:7c:4b:cf:a2:74:88:0c:ca:
9c:40:e6:74:74:83:42:6b:85:2c:ee:9a:03:4e:57:30:fb:26:
ea:2d:c7:c1:94:85:51:15:9a:33:40:c5:40:8a:e4:44:5f:19:
ac:34:57:7c:06:a3:2a:0f:6e:de:5e:c2:23:26:08:b6:54:52:
36:e1:2f:c1:b0:af:4f:28:22:aa:02:f8:88:30:f0:f7:7c:df:
93:b4:ad:4b:c3:f0:92:a2:fc:38:3a:8c:80:de:7e:c8:db:5d:
53:30:76:5b:c4:56:e0:dd:1a:15:c1:c5:e7:c6:32:f9:41:0e:
89:12:ae:87:ac:ba:bd:ef:98:06:3b:53:8d:fa:ef:e5:55:5d:
57:58:34:41:d5:12:28:f9:b2:8a:81:44:50:93:16:b3:6d:51:
56:b3:d2:c8:a3:95:8c:ce:0d:7d:62:ce:28:8f:52:c0:0e:c8:
29:e1:52:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:01 2025 by rpki-client