Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
File: 1QliA1xelRATygZwylaeefjWPBU.mft (raw, json)
Hash identifier: vMTyZX6fxJb/lLbLZ4HomVH+cgRj6YEJEbeu6StGqHo=
Subject key identifier: 6C:44:85:C1:BD:7D:0C:F9:08:E0:6C:9C:70:80:B2:02:55:E0:5A:4B
Authority key identifier: D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
Certificate issuer: /CN=d50962035c5e951013ca0670ca569e79f8d63c15
Certificate serial: 0199FE7DE537D009BEB55E6CA13EFD4C270B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
Manifest number: 11AF
Signing time: Sun 19 Oct 2025 22:01:27 +0000
Manifest this update: Sun 19 Oct 2025 22:01:27 +0000
Manifest next update: Mon 20 Oct 2025 22:01:27 +0000
Files and hashes: 1: 1QliA1xelRATygZwylaeefjWPBU.crl (hash: D8kgOokUW9AesBk5SePDIsamdmOsx6rx0SVU1gHKA3U=)
2: QgExJsLM6ckB_bwe9qRnk4o5HhA.roa (hash: P6xf+cz+/i4pkIjOYnliYy5pmyQWXuehaFAXXoyCR5k=)
3: fD4OezRM4UrasrKKJ10uGn5_Qug.roa (hash: +HiHjgUZa5Xei+THiDncnTXYzPCxqbbX0ahPYM7QsZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:e5:37:d0:09:be:b5:5e:6c:a1:3e:fd:4c:27:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50962035c5e951013ca0670ca569e79f8d63c15
Validity
Not Before: Oct 19 22:01:27 2025 GMT
Not After : Oct 20 22:01:27 2025 GMT
Subject: CN=6c4485c1bd7d0cf908e06c9c7080b20255e05a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:45:01:76:85:33:1f:9e:61:fc:e9:3a:4f:77:
6f:86:46:7b:dc:2c:68:fa:d1:17:4d:a6:20:91:cf:
9b:24:9e:b8:be:75:4d:f5:82:e2:66:87:d6:d5:2f:
4a:64:29:9c:f1:cc:9a:88:be:8d:25:5d:37:2d:51:
b1:ca:b0:5b:28:df:f0:a2:4b:de:32:43:64:41:f4:
58:56:c3:4c:06:ae:c3:8a:ee:b1:be:e3:58:d9:57:
ef:c0:93:62:6f:5c:58:73:87:19:52:01:1f:e3:31:
c2:d4:4b:53:0a:06:c6:c8:65:c6:26:6b:0b:a8:8e:
65:28:bb:d8:31:2e:b1:6d:4a:9f:98:97:4b:e3:dc:
39:91:ec:4d:66:04:6e:d2:9a:33:a4:14:1a:4c:c1:
12:04:1f:1c:f4:34:a8:a3:fb:f7:82:f2:4e:39:eb:
e6:ed:70:5f:ba:63:95:0a:1f:84:c4:01:7c:47:c4:
3e:02:0e:11:77:fc:b8:a0:25:d9:1d:90:8c:40:c0:
63:70:9a:fa:0a:b5:93:69:f3:bc:b1:cb:a2:6c:10:
b7:10:26:1f:f2:6b:b8:c6:dd:8f:26:e5:e4:67:85:
92:6f:1a:c1:90:db:11:77:b3:a7:d3:42:83:81:fd:
d6:2d:17:05:8b:73:2a:43:7c:f4:19:a3:ee:71:f8:
b8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:44:85:C1:BD:7D:0C:F9:08:E0:6C:9C:70:80:B2:02:55:E0:5A:4B
X509v3 Authority Key Identifier:
keyid:D5:09:62:03:5C:5E:95:10:13:CA:06:70:CA:56:9E:79:F8:D6:3C:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QliA1xelRATygZwylaeefjWPBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/d4e8e9-0d47-419b-b3e2-054a363115f5/1/1QliA1xelRATygZwylaeefjWPBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:fe:5b:fe:2c:81:c3:18:dd:84:16:16:a6:60:90:f4:f4:b8:
ba:e9:6f:a5:7a:3b:7f:bb:78:78:4a:3e:a3:20:2a:d3:58:76:
fa:c1:cf:36:09:3d:67:10:c5:3a:b2:ff:e8:6c:f0:3f:ef:78:
fb:3d:9e:d9:84:0d:3f:54:85:7d:03:2c:42:a2:92:26:76:cd:
63:e8:f2:30:bf:92:b5:6d:ab:85:62:d0:29:10:c4:6c:08:21:
fd:4a:8d:c5:b5:6c:8e:09:cd:fe:af:fb:2b:19:36:96:6f:fd:
43:d6:fa:49:5d:f8:74:e7:64:8f:b9:89:2f:fc:50:aa:ae:d7:
00:02:55:7b:a6:3b:5b:bd:3d:1c:14:24:3a:67:23:3a:a6:47:
57:0a:94:fb:ff:ec:df:3e:5a:9f:03:c5:93:6c:66:aa:61:b9:
9e:7a:b4:21:33:5a:72:56:84:ec:8f:b6:30:0a:ba:c1:b0:4e:
f9:c2:54:72:4b:7c:1e:70:cd:d7:ba:2c:d0:c3:77:0f:a1:6b:
b7:bd:1a:21:a5:d5:ac:49:1a:80:ce:8a:9d:4d:9d:22:b1:ee:
a5:13:ce:e6:37:73:ce:dd:5e:0f:13:cd:92:53:42:a5:55:85:
87:e9:20:e0:01:a6:85:48:87:e6:0b:a2:b0:06:c8:1a:46:6e:
a0:3c:55:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:06:21 2025 by rpki-client