Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: alZKZeSrxrfZ0u/L03KtSqSt35SOibeVw8dgjOPe31Y=
Subject key identifier: 46:00:59:F2:FF:02:1B:AB:FC:EB:C4:A8:9D:34:ED:20:7C:23:BB:71
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019A4E86AB6A875D1563C0CADF5F3681B27E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 123A
Signing time: Tue 04 Nov 2025 11:00:39 +0000
Manifest this update: Tue 04 Nov 2025 11:00:39 +0000
Manifest next update: Wed 05 Nov 2025 11:00:39 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: HCaemq7Lzb/RnWN4VHH+GQBZbgA1I1o5+PVS9Bd72B0=)
2: NhnMYjAslLVa-AUlcKz__rn95zo.roa (hash: tZEX0EAU3kMvQjAQCJnIAbh87GSUNy8524Ozv2q7nvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ab:6a:87:5d:15:63:c0:ca:df:5f:36:81:b2:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Nov 4 11:00:39 2025 GMT
Not After : Nov 5 11:00:39 2025 GMT
Subject: CN=460059f2ff021babfcebc4a89d34ed207c23bb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b0:39:95:c4:74:fb:81:1c:1a:41:65:c5:3e:
f4:84:c2:1c:cc:a2:c5:b2:4b:60:6c:8c:d4:11:5b:
8d:88:f9:a9:3d:87:aa:b1:da:9f:8c:ad:87:3b:3f:
90:37:c6:b7:cd:f6:64:ef:24:f1:b5:44:2e:4c:c6:
2d:0f:c2:62:f8:87:e0:a9:b9:71:f0:4c:46:12:e7:
8a:24:12:8e:95:90:d0:df:8f:8f:fc:30:c2:fe:0e:
63:a9:f4:cc:89:84:e1:f9:54:28:54:80:60:cb:0d:
4c:a7:9b:ed:34:10:8c:dc:3b:26:32:db:29:52:e9:
45:a7:36:ee:c5:70:18:f8:3e:16:2c:32:d9:1b:c1:
af:56:8e:ed:e3:0a:b6:ac:08:2b:39:1d:64:72:d3:
21:c8:c2:f3:94:b6:67:b1:29:86:58:a5:f6:c0:fa:
ef:f1:00:5e:e9:5c:f9:54:f5:00:ef:1e:82:e2:15:
08:cc:b5:06:11:ae:09:34:bc:1d:a2:2c:fc:c8:5a:
9d:ff:8b:a2:d2:41:c8:6c:08:86:fe:aa:57:a8:16:
46:58:b5:d1:41:59:45:fc:57:74:37:43:d5:73:77:
33:3f:8e:9a:8d:47:4d:54:f0:52:db:3f:72:bd:55:
67:eb:64:b1:0b:3a:a1:85:70:db:2a:98:ae:f7:17:
3b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:00:59:F2:FF:02:1B:AB:FC:EB:C4:A8:9D:34:ED:20:7C:23:BB:71
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:95:f6:b7:7c:15:29:da:d9:e8:3a:7b:23:9f:0f:88:1f:b1:
64:f1:4e:6f:e3:71:8a:cc:80:1b:0f:07:68:b9:c8:aa:9f:35:
c4:d4:db:b3:b8:85:b2:3c:fb:6f:31:32:63:7d:a4:c5:f4:08:
55:7e:f5:75:9d:5e:fd:b6:93:30:48:a7:22:37:66:30:54:44:
b8:5c:37:3c:e0:c2:a4:ae:e1:1f:6d:b8:e0:ba:1d:d8:ca:a9:
89:6d:2e:d4:9f:0a:76:dd:f6:c2:95:9e:42:55:7a:6f:33:c5:
ff:72:81:43:0c:9b:97:6f:57:5a:be:77:c5:4d:b0:19:5a:0c:
3f:3d:c6:bf:c9:cb:97:33:5b:39:42:95:7a:07:4d:5f:29:48:
a7:0f:5d:a2:65:21:82:b3:b4:70:2c:fa:7a:88:25:b5:35:00:
f5:dd:8e:82:5d:62:87:99:5f:ab:91:9d:9d:4e:07:33:e6:ab:
86:8e:57:db:b0:8d:12:ea:ae:64:97:1c:d4:71:b5:71:b4:49:
ca:49:73:3e:52:bd:35:e9:46:5c:2b:98:33:74:de:3c:6e:92:
31:36:fe:77:39:4f:fd:82:fb:26:32:e9:05:3f:57:d4:26:bb:
14:44:e2:da:d9:40:d2:de:7d:aa:42:73:70:4b:08:71:01:ac:
8f:a4:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:23 2025 by rpki-client