Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: hR1SBPlcqVwzoSFJWKkRa5Qa2oyUzj3MUirsP3MQoKg=
Subject key identifier: 28:CE:E4:C7:CE:61:9B:0A:51:41:68:94:9E:00:5E:50:F5:17:9B:31
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 0199FE470E03B478443D76CA835E259908C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 1095
Signing time: Sun 19 Oct 2025 21:01:33 +0000
Manifest this update: Sun 19 Oct 2025 21:01:33 +0000
Manifest next update: Mon 20 Oct 2025 21:01:33 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: i/NJEdLFx4r5SDNm1eSieClIpLhM91RL46TYHv9b6c8=)
2: 8394MOfnLh_yAjC5oBzFaMKHm6g.roa (hash: LERfhqf0k5zIruV7b50StKNQsMWe2Ikf9jCbw9DjSV0=)
3: EeJuZ6ZuYMeP-N4AAq72eBlOcpM.roa (hash: oERKMEQ/M129kNgVvoyFhR9aTD1YFXrhdgiUJ9nGJ/4=)
4: FAqlGSimYu0iYfDKBVjHX-VLzKc.roa (hash: WfUufO4W+prwwNDD5ADTi0DPEPfB9t599hV9voFifsQ=)
5: Hl87tUhseJrx8ua_eZqEp-JXnL8.roa (hash: jm0/ddSHPme/VSGWBnMHo4jZkNs2MFEBOqNEBiv6awA=)
6: mS4C21ztnhJ1CQEhvl6HMt_DrKI.roa (hash: +AZpnsUJfoswiZ8L8H5vFWzIYnjuMk5tWnCTTVqTzgU=)
7: wPc7v-r8HN2WgTXXGZ1otoniuZk.roa (hash: 25D1eRRGlzWdsvEgZ+vInaKAYQi119NABCdy4hawamc=)
8: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (hash: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:0e:03:b4:78:44:3d:76:ca:83:5e:25:99:08:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Oct 19 21:01:33 2025 GMT
Not After : Oct 20 21:01:33 2025 GMT
Subject: CN=28cee4c7ce619b0a514168949e005e50f5179b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e2:5d:bf:fb:1a:a1:66:70:75:c4:8d:2c:8f:
2d:39:c5:d8:f7:70:3c:ed:99:e3:3c:6a:28:a9:1f:
99:e5:28:2d:e6:60:c2:fa:66:72:15:77:b5:db:18:
ba:2c:50:04:2f:7b:2c:98:a3:b3:8c:93:8d:5b:9c:
98:55:51:29:45:1c:86:d3:d0:c8:a5:43:5a:6a:21:
18:03:14:8e:ca:47:4a:d7:92:cc:9b:b1:b6:07:94:
8d:74:6f:a6:67:6e:38:72:80:45:7a:9f:f7:be:27:
f4:63:49:0f:22:99:3e:15:2d:4c:e1:c6:88:57:07:
5b:d1:24:31:05:9e:c8:e6:fc:98:0c:ba:69:a7:63:
2e:c1:73:e7:c7:fe:dd:ff:35:54:95:e8:bb:28:dc:
4e:08:44:e3:c6:4d:04:5a:11:b0:fa:d9:f8:57:20:
3b:f0:8f:ff:7b:74:7d:5a:e2:13:a8:13:a6:c1:9a:
3a:c7:53:7d:70:6c:2d:d4:8f:b6:e8:ec:ce:2a:47:
70:b1:2c:db:8e:ad:dd:38:ae:fe:bd:b0:67:65:9e:
98:8a:0b:ae:9f:0c:dc:b1:c8:31:ce:d8:d6:13:ee:
33:de:22:a1:d1:c0:29:98:1a:bd:e4:18:c7:f6:9b:
9b:ee:57:54:23:a7:2f:55:53:db:ce:b5:16:1f:d6:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:CE:E4:C7:CE:61:9B:0A:51:41:68:94:9E:00:5E:50:F5:17:9B:31
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:12:8c:85:e2:c0:22:98:b6:8b:b7:f2:f8:7b:7c:49:ad:0f:
f5:06:11:d2:51:da:a2:78:c7:83:fc:c7:7d:20:b5:dd:ed:00:
f7:23:3d:76:79:c0:cb:50:aa:e3:ae:29:ad:fc:7a:e2:05:8a:
e7:a1:23:0e:cb:97:75:1d:42:a1:5c:89:cb:e9:57:c3:12:32:
46:27:8c:89:2b:4b:1e:6c:3f:69:a2:60:f7:36:06:c9:6b:4f:
04:3b:df:74:b3:2f:95:6c:25:30:cc:f4:68:0e:2a:59:3e:10:
da:b4:4c:00:7a:88:01:10:36:4f:ed:19:0b:3b:57:24:7e:04:
50:b4:6e:87:cf:63:58:02:37:5f:31:12:5e:dd:51:e8:ef:b3:
f1:9e:30:d3:68:17:49:6d:0d:79:18:57:dc:11:86:71:95:f5:
60:24:1a:2b:d4:8b:80:b4:49:50:99:1c:ae:44:23:c7:bf:8a:
45:7b:cf:ad:a0:a5:c8:d7:af:94:90:0d:bb:16:77:71:06:48:
2f:d6:53:82:1b:b0:8e:d4:9f:45:6b:2d:2d:47:03:cd:6f:29:
40:ff:26:25:fd:fe:b9:c7:12:ef:97:e2:aa:d8:de:3d:e7:9e:
32:95:a6:b6:78:a7:d4:6c:a8:2a:ee:db:a7:70:be:e0:43:62:
06:7c:68:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:52 2025 by rpki-client