
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
File: 1QzaSMNeVOuAJXWqpAjM5XmSchY.mft (raw, json)
Hash identifier: C7UORi4+gduDahNSpTaV4iX3M0D8U349YKSOPCGmEFE=
Subject key identifier: BA:95:FA:7A:FA:9B:6A:AC:1F:0D:81:8C:0D:7D:13:5A:14:D6:5A:FF
Authority key identifier: D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
Certificate issuer: /CN=d50cda48c35e54eb802575aaa408cce579927216
Certificate serial: 0199FC8F2B1A7C2728268D114484A9118E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
Manifest number: 0721
Signing time: Sun 19 Oct 2025 13:01:05 +0000
Manifest this update: Sun 19 Oct 2025 13:01:05 +0000
Manifest next update: Mon 20 Oct 2025 13:01:05 +0000
Files and hashes: 1: 1QzaSMNeVOuAJXWqpAjM5XmSchY.crl (hash: yazz/pf4lsaJzObC2g67ENMoBk6v4Qf+zP0SmfX6Q3Q=)
2: hth3rJjFWs6NUkK-o0tTbHyr4L0.roa (hash: Vn4AMxs64boyWbgENvm4Of96GFQtj+G6HAjnQ0teAh4=)
3: lPDpfx3Te7zjZCAdY5UFziIAeNM.roa (hash: 5bkDE5sFGFyGe5UEk23hluwD8i8ffdDbAYDQQoPB27A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:2b:1a:7c:27:28:26:8d:11:44:84:a9:11:8e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50cda48c35e54eb802575aaa408cce579927216
Validity
Not Before: Oct 19 13:01:05 2025 GMT
Not After : Oct 20 13:01:05 2025 GMT
Subject: CN=ba95fa7afa9b6aac1f0d818c0d7d135a14d65aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:de:67:8d:52:8c:3b:21:03:54:7e:6e:8c:
86:f1:9a:b8:1a:cc:9b:c3:53:e9:12:61:30:35:4d:
74:5a:16:c8:41:0f:2e:ed:17:23:7e:8c:7b:35:5e:
a4:c2:a2:03:30:5f:61:d0:3f:98:50:31:0d:f6:85:
d0:c7:0f:6b:41:d3:7a:90:86:36:c8:f4:4d:c8:62:
76:d4:04:6a:40:ef:0c:a5:5b:ea:c5:e3:ad:48:3a:
87:4f:05:a5:89:24:d8:0e:52:45:de:a0:ae:e1:31:
5a:af:02:bc:5d:1c:1a:60:3d:df:33:83:a2:91:3e:
7e:f4:97:da:70:84:31:7e:2d:fe:15:98:5c:45:4f:
36:2c:8e:0d:f2:d2:37:7d:08:8e:3c:0b:1a:78:a1:
80:18:c9:1a:ce:e7:71:2a:10:a1:98:d1:7d:4f:bb:
6e:a5:26:d0:c9:08:20:7f:63:25:1d:45:9d:0c:a5:
67:4b:a7:dd:c2:e7:9d:6b:53:66:6e:07:bb:23:e7:
57:c5:de:93:a6:f0:21:0b:09:74:2d:7f:03:6a:79:
13:84:09:22:5d:52:9e:fc:17:e0:0f:26:67:0d:d5:
46:90:7a:e1:af:be:97:03:2a:7f:53:d0:a5:1c:42:
7e:fa:85:8c:44:24:3b:68:db:ba:a0:87:b5:84:62:
af:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:95:FA:7A:FA:9B:6A:AC:1F:0D:81:8C:0D:7D:13:5A:14:D6:5A:FF
X509v3 Authority Key Identifier:
keyid:D5:0C:DA:48:C3:5E:54:EB:80:25:75:AA:A4:08:CC:E5:79:92:72:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QzaSMNeVOuAJXWqpAjM5XmSchY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3587eb-ebd4-40ab-a19b-22920565cda4/1/1QzaSMNeVOuAJXWqpAjM5XmSchY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a7:2f:04:c5:09:7c:e2:45:ea:3e:ee:70:7f:22:1c:26:de:
ab:4a:07:47:9f:a3:8d:be:3c:5d:81:a2:c9:03:63:a7:c0:e3:
a5:1b:d2:97:56:27:30:24:63:8c:8e:2b:34:c3:d2:a3:2c:d0:
fb:38:2a:94:62:55:84:65:8a:9a:2e:eb:aa:bc:64:52:57:24:
ea:11:a6:12:13:56:b2:85:12:15:2f:f0:a0:31:8a:ee:61:38:
ae:72:61:b6:93:3f:99:d2:31:5b:a6:41:02:8b:aa:2b:e6:27:
ba:2a:6c:cc:da:d2:e5:53:05:1b:0e:c9:f8:90:f4:a8:c5:01:
50:b2:91:f3:e3:b0:5a:00:87:ed:e1:de:6a:c1:33:5c:a0:20:
c2:5a:39:ba:12:b5:4b:2b:80:32:5c:78:f0:1d:78:16:39:98:
65:8a:d9:8c:c8:db:4f:07:f4:a4:69:27:6c:43:68:58:c0:c4:
54:d4:ab:b3:fe:b8:59:67:49:a9:e1:d5:13:fc:6c:f3:36:46:
8a:44:f8:f6:90:aa:8c:bd:8d:9b:9f:94:9b:1b:13:27:9e:0a:
ad:dc:2c:1d:79:2f:71:96:64:7c:1e:88:68:64:ee:f2:f8:15:
02:b4:c2:8b:0a:82:81:d4:57:8f:4f:2b:5c:63:c1:a9:d8:8a:
4b:b2:41:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:11:37 2025 by rpki-client