
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
File: 1QBRYT08xrPrgdW7QArg1OJBLIA.mft (raw, json)
Hash identifier: oG4WH0CvCkHtXjPbBYzB5+22958Y9u8lo8lbj/pJeF8=
Subject key identifier: 9F:80:C8:FA:54:12:6D:5E:40:6D:1A:69:A9:3B:DD:2C:0C:ED:46:D4
Authority key identifier: D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
Certificate issuer: /CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Certificate serial: 0199FBEB126A1EFC7EF24AA183BF3137580E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
Manifest number: 0AEF
Signing time: Sun 19 Oct 2025 10:01:50 +0000
Manifest this update: Sun 19 Oct 2025 10:01:50 +0000
Manifest next update: Mon 20 Oct 2025 10:01:50 +0000
Files and hashes: 1: 1QBRYT08xrPrgdW7QArg1OJBLIA.crl (hash: CzFHwXnKUk4P4/Z0Xjc5GpOJQIOoOm8icuEJohq4i7E=)
2: qBfFLLbMjDiXpHlclpBQm55p-Q8.roa (hash: X7f4s7PxbdY1OwsEitEQVcC4bC8kVzy8m2zO1xjTkLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:12:6a:1e:fc:7e:f2:4a:a1:83:bf:31:37:58:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50051613d3cc6b3eb81d5bb400ae0d4e2412c80
Validity
Not Before: Oct 19 10:01:50 2025 GMT
Not After : Oct 20 10:01:50 2025 GMT
Subject: CN=9f80c8fa54126d5e406d1a69a93bdd2c0ced46d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:25:ca:14:22:7a:cc:c9:a0:fb:e5:0b:d3:
30:49:55:50:9b:6b:01:19:f2:24:98:c0:7f:84:80:
02:4a:67:29:78:1f:d1:97:da:78:09:55:6a:95:d5:
bb:83:ae:2a:de:b1:d6:30:94:08:d4:fc:d1:91:0f:
dc:0e:f9:5a:83:af:0d:a8:a4:f5:f2:12:de:7a:09:
7a:02:8e:58:ca:fe:1c:0d:4b:f6:85:3d:8b:39:c1:
b7:d2:36:9d:72:ec:c2:0b:cf:c2:b3:3a:d3:d6:23:
64:5c:9c:9a:70:70:55:7c:63:98:91:3d:ed:6e:8d:
93:c5:cb:7c:bc:78:bf:d3:ef:a5:e0:a0:79:a6:79:
ee:51:2e:51:24:c0:0c:d8:d9:4f:b0:02:dd:16:e3:
ff:fe:a0:17:55:f5:35:3f:c9:9b:33:2d:3a:84:d6:
f1:f4:cc:b3:83:53:9f:45:5c:24:14:8c:79:dc:92:
9d:95:ee:0e:7a:fd:fb:bd:2b:cc:17:71:30:66:91:
9e:91:4b:73:ce:ec:c5:12:ae:fd:b5:e7:98:90:4a:
ac:5d:2d:60:4a:e4:9a:08:47:ae:08:6b:1b:38:28:
0e:f6:6b:a0:79:82:33:a8:c8:27:32:c5:74:d2:66:
35:8f:44:b0:45:6d:2e:51:ed:9f:1f:17:1e:1a:5f:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:80:C8:FA:54:12:6D:5E:40:6D:1A:69:A9:3B:DD:2C:0C:ED:46:D4
X509v3 Authority Key Identifier:
keyid:D5:00:51:61:3D:3C:C6:B3:EB:81:D5:BB:40:0A:E0:D4:E2:41:2C:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QBRYT08xrPrgdW7QArg1OJBLIA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/59fc26-f8dd-4f5e-bca2-225d8adfe8bb/1/1QBRYT08xrPrgdW7QArg1OJBLIA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:92:bc:c3:bc:be:4c:72:91:86:54:ae:2f:f3:35:ce:b6:9a:
44:2a:a8:27:52:61:99:95:58:a1:27:15:cd:75:b5:3a:36:35:
67:5b:4b:1b:6d:85:6e:b7:77:8d:fb:bb:0d:04:b2:da:fb:c1:
f0:2c:16:37:fd:fc:eb:30:e6:ef:49:0a:6c:ed:4c:34:3e:20:
95:ab:1f:03:a2:52:b1:a3:18:34:36:b3:5b:da:fd:4e:a2:31:
88:ac:bd:61:73:76:92:c4:84:92:84:20:db:fd:ee:ba:88:90:
0b:30:dc:41:1c:b6:94:ac:61:8f:cc:64:28:e9:e1:c9:0e:44:
3b:b9:e7:b2:a6:c4:c8:20:d0:0b:a9:d6:4e:be:dd:17:20:29:
06:0b:9b:ff:3e:67:df:21:4b:dd:29:59:b4:8c:85:f0:eb:df:
a2:60:a6:c1:38:4b:4a:09:58:4e:d2:8c:8c:79:0a:6f:a6:e4:
3b:1f:40:53:63:c7:6c:ca:7c:1b:ea:28:c6:f3:4a:01:1a:8c:
ad:15:b2:8d:f1:43:6c:a0:bd:a7:5f:b8:5d:5a:e4:e2:77:51:
14:7d:89:39:3b:ec:1f:8a:c7:33:e3:65:54:de:7e:b0:a2:65:
ac:d0:5a:fb:a8:bf:cc:41:57:57:31:3d:81:5c:0f:52:56:06:
76:82:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:45 2025 by rpki-client