Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: QKWkXCkEfLC1zpnv7oxdg447mePPWnhkedFM7y+8Pf8=
Subject key identifier: 9B:C0:4F:3A:90:9F:C7:A7:F4:9D:B8:B4:27:50:A4:02:B3:A6:A4:7E
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 0199FE7DF6F68EB968DC47948BAFC5592233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 0379
Signing time: Sun 19 Oct 2025 22:01:32 +0000
Manifest this update: Sun 19 Oct 2025 22:01:32 +0000
Manifest next update: Mon 20 Oct 2025 22:01:32 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: D/HGCY9StPUqmGZt/DaDqFPizen1SzKIdFrWhxPIgTA=)
2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:f6:f6:8e:b9:68:dc:47:94:8b:af:c5:59:22:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Oct 19 22:01:32 2025 GMT
Not After : Oct 20 22:01:32 2025 GMT
Subject: CN=9bc04f3a909fc7a7f49db8b42750a402b3a6a47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d5:56:69:df:2a:9c:dd:d5:28:f1:76:61:f8:
95:36:2c:39:47:70:38:1e:d3:81:25:70:31:c2:d8:
7d:a0:99:51:f8:6a:23:66:6f:41:83:5d:cc:d9:cb:
28:82:f2:3e:aa:22:7a:66:bb:9f:ed:9b:87:a9:d3:
66:73:b9:7f:52:41:b7:db:40:90:3a:a8:90:a2:49:
e1:6c:56:b1:f0:3a:47:64:21:4d:a4:e0:65:95:be:
03:7b:05:a7:23:6c:60:52:d4:88:7e:b6:43:3b:a4:
1e:2a:eb:8b:09:f6:e0:34:d7:f8:09:67:3a:3d:f3:
cc:c7:5f:35:fb:7b:b9:dc:b7:7d:fe:1f:3d:dc:f7:
9a:ff:43:c8:98:ac:89:7a:86:fa:49:30:dd:7d:a6:
d0:bc:6b:c6:0b:89:5f:0d:fe:ba:4d:60:9f:d2:47:
9c:0d:d9:98:66:c6:83:b0:54:77:8c:52:a7:e1:5f:
57:65:59:1a:1c:db:21:51:b4:3b:34:67:de:70:d2:
b3:e9:62:e0:e3:3e:82:57:4a:73:27:dc:25:8a:00:
fb:52:91:d4:c3:fe:83:6c:a8:63:fb:34:57:50:08:
77:0a:96:25:a3:d0:e9:e2:4d:b2:56:b1:63:64:b4:
ec:d6:2a:2b:fe:4f:44:23:10:d3:f1:f8:45:bc:0e:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C0:4F:3A:90:9F:C7:A7:F4:9D:B8:B4:27:50:A4:02:B3:A6:A4:7E
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:75:3f:f4:42:21:de:89:0a:d9:a3:b0:51:93:88:ae:f7:54:
1b:f2:9d:12:89:10:dd:41:34:b5:e1:e0:b9:ec:b6:48:88:da:
03:18:f5:4f:4b:80:70:7b:e2:3d:ae:a6:6e:f7:be:a4:7e:a2:
68:00:6b:1e:a2:f1:f7:1c:44:17:82:cb:ab:87:f1:42:32:ef:
88:2c:3a:53:55:d1:b5:9f:78:b4:18:52:07:cd:4c:42:6d:f9:
0c:8f:f0:63:3b:63:0c:3b:e8:a0:07:a7:d3:35:9d:50:0d:7a:
f4:1a:68:33:a0:48:4e:0e:90:3b:1f:bc:2e:81:d6:f7:c6:a8:
ca:7e:f2:d6:d5:48:60:27:74:87:f9:95:1a:5f:a1:2e:6f:53:
a1:f0:99:98:b2:82:f5:87:da:58:c1:c3:ff:22:2d:fa:3a:cd:
31:1e:8a:9f:23:8c:07:f1:21:cf:17:a4:47:35:83:30:43:a3:
fb:b1:7d:7f:9f:ad:5f:08:7f:b1:40:5e:a1:c6:5d:7e:d8:e9:
d4:f1:ae:11:b6:7d:d7:d1:9f:0b:02:3c:84:4c:e1:7e:a5:66:
d8:67:4d:d4:91:fb:58:ae:64:12:a3:3a:2f:d9:52:ee:fd:c6:
aa:96:bc:3e:85:cc:30:22:53:d4:15:e7:e5:bd:52:43:22:8e:
7a:99:c7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:59:48 2025 by rpki-client