Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: 4VlUkWP2+2W34c15xaaeSm7GhcBDVlQe7PQPFcL1jR8=
Subject key identifier: 34:59:FE:94:47:8F:4C:67:0F:92:B3:9D:41:43:60:FE:E2:6B:9C:D4
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 0199FC58F2318EFBD70F25B02F95F221C246
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0893
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: 6ihzSqEYDoNHEJNILTiLYW8bF1ht/p/CamBOajsfe4I=)
2: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (hash: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=)
3: YiC719RdgSFZ3ft_dlKu9o3i3pA.roa (hash: Yo7K99mDy+e+tmI8kgteWK6dTlsGJMqoxxHo0QV2Flg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f2:31:8e:fb:d7:0f:25:b0:2f:95:f2:21:c2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=3459fe94478f4c670f92b39d414360fee26b9cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c8:9d:02:7b:b6:a4:60:3b:f2:59:7d:5a:f3:
71:1b:92:b4:a9:e8:36:d4:61:47:25:97:9c:38:51:
e8:7e:c0:ba:15:05:a8:ca:c2:79:66:c3:5a:6f:7d:
39:a3:f2:65:0d:32:cf:f4:f4:58:e8:6b:bc:4c:94:
2c:94:15:81:62:93:a8:d5:da:61:52:07:4e:69:1a:
a4:2a:6e:e5:62:8e:6b:a4:de:af:64:2a:0c:90:93:
89:fc:f7:b1:f4:c6:b4:f2:ce:33:92:8d:80:ec:70:
a7:10:93:57:0a:84:c0:bd:0f:49:ff:9f:7d:1e:0a:
cb:a7:d9:ad:67:a9:77:fb:43:2a:5b:76:fc:47:ac:
1b:ca:93:3b:93:98:db:c2:fc:25:36:df:7f:b7:34:
4a:00:6c:5c:42:61:b2:9c:6a:89:6c:26:e9:f8:1e:
5b:79:c1:cc:7a:a9:7d:67:61:c5:04:a5:08:29:b0:
74:bf:00:19:93:35:58:a9:2b:10:28:46:e2:af:35:
1f:72:34:88:5b:45:14:e6:f1:e1:9f:63:14:6f:ad:
2a:e8:e5:7f:c4:d6:c9:7e:42:59:e3:51:52:94:bc:
ca:06:6e:2d:8a:e2:3a:09:27:e1:36:c0:7c:03:79:
3c:c2:d7:cf:b4:cf:56:c8:11:32:54:4a:f5:21:a9:
c5:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:59:FE:94:47:8F:4C:67:0F:92:B3:9D:41:43:60:FE:E2:6B:9C:D4
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:89:3d:32:67:ed:0b:12:45:37:9a:76:46:32:51:9b:cb:f4:
75:fd:b2:7e:66:07:50:8b:5c:48:c7:c6:f4:ec:4c:e4:ee:5a:
da:2f:53:3f:1b:ef:bc:ab:86:30:61:0b:e0:92:c8:e9:ea:2a:
74:15:8f:2a:a2:ec:9b:37:b9:3c:10:19:78:06:d4:78:09:84:
9d:34:5e:be:f7:ce:56:84:75:57:fd:59:8d:02:2b:42:eb:81:
95:e7:83:54:65:2f:3f:8d:83:87:13:d7:54:d3:07:c8:39:8f:
8c:30:9b:2c:59:71:9c:76:33:c5:fa:65:c4:15:26:a3:e1:5c:
84:ab:50:e7:0a:00:bd:92:f2:d9:66:b1:9c:1c:a5:7b:18:42:
fc:d7:5c:3f:3b:55:16:43:d7:ec:5e:cb:fa:38:b4:66:44:27:
e4:97:fc:d6:54:cb:34:aa:c0:d2:80:37:6d:50:1f:79:5a:6a:
6b:d9:3f:92:85:a0:a8:7a:ab:b5:27:1d:38:79:04:a8:66:2a:
a6:0b:e8:ea:ae:4e:2c:fd:03:92:a9:78:85:c9:c0:80:ae:f7:
d5:20:0a:ce:21:b1:70:59:3f:30:d1:84:28:11:a2:d7:4a:5a:
49:bb:e2:05:5a:e9:bd:f9:36:4c:d2:bb:9a:53:0e:0d:94:ca:
0a:0d:a6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:58 2025 by rpki-client