Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: KgR2ykiL7LkMmbU8sLYBuqyi6JPX8ZyggI61y176iMw=
Subject key identifier: BE:1D:4F:29:B2:49:37:BA:05:AF:78:09:55:28:87:18:1E:F9:38:02
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 0199FBEB1671FA08CD47748A0728D2EFF398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:01:51 +0000
Manifest this update: Sun 19 Oct 2025 10:01:51 +0000
Manifest next update: Mon 20 Oct 2025 10:01:51 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: CVOOrAGLz9ece9QYpSqETu3+Gsm3Z6U7aIFqfP7nsnQ=)
2: jnyTmD1DxoXGsX8QKO4GFLyk0hU.roa (hash: VHKaN5/CfBmdBMdYUm6aa5suZnMbN/eE/uaYAJ9tsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:16:71:fa:08:cd:47:74:8a:07:28:d2:ef:f3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Oct 19 10:01:51 2025 GMT
Not After : Oct 20 10:01:51 2025 GMT
Subject: CN=be1d4f29b24937ba05af7809552887181ef93802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e3:c5:99:62:0c:d5:a8:41:c0:19:7e:80:08:
ba:33:f9:41:0c:32:d3:47:e1:40:35:95:51:0a:55:
10:72:14:31:9b:4e:ea:14:e8:13:6c:47:2e:0d:e6:
55:14:43:e8:da:32:1f:15:f7:68:a6:dc:be:92:cc:
d4:b8:90:8c:4e:52:b0:0a:46:35:a6:8f:88:73:e9:
ea:02:80:1d:11:a2:3c:13:ac:48:e2:2d:1d:ba:57:
54:c0:a2:bd:ac:1b:9c:a0:12:87:56:97:6b:c9:19:
22:00:4c:66:03:3c:5b:07:27:13:1b:9b:9f:97:34:
bd:9d:7c:78:b0:19:7b:cd:6f:4a:ca:1a:f7:3b:11:
9d:ba:80:23:df:5f:0d:7e:37:60:27:9c:58:f6:d4:
e5:64:db:37:b5:bf:a3:a1:8c:19:01:26:66:2e:9c:
49:c5:41:f4:df:5c:1f:70:93:75:ac:b5:3a:f5:ec:
0f:70:2c:e3:16:ab:c8:2c:04:88:73:21:f1:9c:ea:
66:a4:96:9d:31:9c:e8:d1:30:6f:0e:d5:be:ee:4f:
79:da:1c:09:8e:94:0a:e2:49:15:ba:87:0f:7e:13:
17:fc:c8:66:2d:c4:6b:f0:f8:b7:5a:b7:3b:74:f8:
a4:39:b6:74:c4:ff:f4:6f:73:fc:5b:4d:d6:b4:f1:
63:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:1D:4F:29:B2:49:37:BA:05:AF:78:09:55:28:87:18:1E:F9:38:02
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:55:f4:14:ae:d4:f7:3d:32:a5:8b:64:23:4a:e3:54:d1:86:
cb:89:93:c4:21:fa:ee:8e:b7:80:68:8f:54:82:97:cf:00:99:
ff:27:6d:3f:60:bb:61:bb:c7:a7:10:ce:94:fd:14:68:09:6e:
00:54:64:bf:c3:78:22:53:89:88:b5:39:09:e3:d0:d5:e2:96:
2b:ce:f5:61:1b:a7:65:bc:f9:db:6c:cd:48:91:fe:8a:ac:6e:
aa:99:26:9b:a6:38:e4:2f:47:3b:00:c8:7b:09:76:96:f6:e6:
3e:b0:c7:1f:92:02:95:23:26:2f:9a:ec:f1:a5:8e:47:61:d3:
24:28:eb:d0:9b:b9:bc:c4:b7:e9:0d:52:db:be:d0:bc:ce:b2:
5f:fd:de:8d:88:b3:55:0a:d4:9a:9d:e3:ae:de:b6:f7:5a:59:
0a:f1:01:80:2b:1c:14:78:71:ce:2f:a6:ea:ec:a5:6a:47:b4:
7a:8f:36:ba:1d:85:3e:9b:28:12:bf:44:b9:c8:55:11:84:f9:
30:96:a4:a7:1f:2a:6a:92:b3:34:15:99:6d:6c:98:09:48:4d:
d4:ac:e1:16:66:58:33:1a:75:34:99:b8:a3:c5:0a:05:13:f9:
ad:89:06:fa:fc:40:96:74:bf:b8:93:e2:d4:90:74:2d:65:f7:
4d:bd:85:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:55 2025 by rpki-client