Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
File: 1mQz-w-93Ml-sBVmko1gcGzMZiM.mft (raw, json)
Hash identifier: PpedGNrkjyLvtEDuRN5qcYvcrvMF/Nc66s58JDwNI+s=
Subject key identifier: 54:D2:26:D5:79:D0:19:DC:22:F3:1B:BF:58:80:84:5E:88:4F:93:CC
Authority key identifier: D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
Certificate issuer: /CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Certificate serial: 019A00DA6098BF019B16CBDD86D2F7F9BFAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
Manifest number: 094A
Signing time: Mon 20 Oct 2025 09:01:42 +0000
Manifest this update: Mon 20 Oct 2025 09:01:42 +0000
Manifest next update: Tue 21 Oct 2025 09:01:42 +0000
Files and hashes: 1: 1mQz-w-93Ml-sBVmko1gcGzMZiM.crl (hash: BH1c83esgoO+kOz0jhi5skoA/AlB1Onzo3jDLbV//tw=)
2: QM4jYEK7EtYY_E1d1aEgohaHu7E.roa (hash: qeF4D524grzc7fut+xWXsFCBjhJ1D13zM5qUNVlhkHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:60:98:bf:01:9b:16:cb:dd:86:d2:f7:f9:bf:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66433fb0fbddcc97eb01566928d60706ccc6623
Validity
Not Before: Oct 20 09:01:42 2025 GMT
Not After : Oct 21 09:01:42 2025 GMT
Subject: CN=54d226d579d019dc22f31bbf5880845e884f93cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:08:1f:62:86:b7:f1:55:34:50:68:49:2d:0a:
25:72:5f:c0:49:80:7a:0f:d9:dc:93:36:28:c5:67:
48:57:dd:9d:ab:b0:c6:4f:fb:83:82:e8:d5:62:c2:
ae:62:26:79:92:8f:a7:a1:fa:ed:63:ad:e4:fc:3e:
bf:22:d1:5f:49:e8:f1:c9:4f:78:80:4c:d2:d5:b8:
7a:ff:24:03:50:93:86:37:a4:4e:72:34:e9:ff:6e:
0b:f2:9e:54:1d:7e:ae:21:14:fd:cf:27:04:9a:b8:
2a:58:c5:63:10:7d:f4:1e:e7:c2:27:69:06:86:fe:
24:9d:e7:06:37:98:11:10:74:b1:08:bf:5b:03:a3:
4f:b1:72:c1:18:1d:6a:12:75:86:73:32:f7:66:f8:
98:a4:c4:11:98:38:0d:c3:d7:85:ca:d6:4a:78:57:
88:55:19:65:4d:64:3a:a0:52:e0:b3:32:4a:fd:6f:
89:4d:b2:df:a1:8a:72:e9:e1:b6:7f:13:a1:80:7f:
bd:b2:83:32:7d:77:01:18:ce:66:f6:df:7b:72:55:
93:db:8e:7a:9e:b8:4f:3e:50:cc:6c:9b:4d:18:b9:
8d:8b:f1:c7:4c:d6:f3:12:0c:e3:a1:f2:1a:4b:48:
3e:37:93:d8:01:7f:bd:af:3f:62:61:4b:fe:23:2c:
52:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:D2:26:D5:79:D0:19:DC:22:F3:1B:BF:58:80:84:5E:88:4F:93:CC
X509v3 Authority Key Identifier:
keyid:D6:64:33:FB:0F:BD:DC:C9:7E:B0:15:66:92:8D:60:70:6C:CC:66:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mQz-w-93Ml-sBVmko1gcGzMZiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/30e6fe-dafd-4c0e-b209-05d2cdfa16a6/1/1mQz-w-93Ml-sBVmko1gcGzMZiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:77:29:76:96:74:32:99:8e:5b:59:2c:58:54:c5:fc:03:7c:
fe:63:b5:75:d5:3f:58:74:c9:5d:25:35:41:c7:16:81:ad:76:
51:ac:44:88:8b:5d:6a:d0:11:a2:22:44:10:ab:eb:0e:4a:de:
b0:8c:fb:99:61:a2:30:2f:7a:11:11:a5:84:90:99:e3:3b:e1:
d3:92:05:af:a5:14:96:12:84:d9:0b:dc:12:30:40:ca:d2:87:
10:5b:3b:9a:c5:3f:fd:23:3c:ac:a1:14:9a:d8:98:42:8f:bc:
75:1c:44:01:47:43:3a:e5:2f:6c:10:3c:3f:87:78:a4:8a:e4:
f1:6a:a7:94:05:a6:45:8d:44:9a:df:3e:48:32:5e:ee:c1:c7:
1d:f6:40:76:4e:7c:66:5d:6b:c8:c4:b7:b5:6a:66:30:db:66:
95:7c:ad:1f:f9:3c:14:c1:d1:46:38:d5:f1:87:5c:c5:97:44:
31:b8:22:b9:26:9c:05:c7:20:83:10:45:80:25:4d:28:d4:70:
4c:95:fd:f9:cf:8b:0e:e3:bc:fb:be:6e:aa:d8:af:bc:8f:00:
ea:1f:4d:9f:42:b3:38:d5:32:10:a7:8b:ad:19:3e:b8:e3:e2:
9d:af:f9:d3:c4:43:a6:a3:6f:1e:3c:f4:d9:07:04:ed:63:1c:
54:ce:2f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:40:47 2025 by rpki-client