Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: NkhMNZRbrq8NgEAefZoBcWcy0SZE6mMLq4UKFY5PrzI=
Subject key identifier: 6E:C4:1C:75:45:2E:FA:00:ED:27:9B:E7:80:17:EE:B4:A9:35:C5:1A
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 0199FC8FB073A7A9F3B14E068AE1CBC212CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 117A
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: 1KfAYjL774JTqCC7JJSqt+DHkaujjlkWLmpBf5oBxIU=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b0:73:a7:a9:f3:b1:4e:06:8a:e1:cb:c2:12:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=6ec41c75452efa00ed279be78017eeb4a935c51a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:35:08:cf:e8:7e:59:cd:00:43:4e:b2:6f:
05:ac:f6:e0:86:16:d1:cf:77:6d:f4:8d:ca:08:c7:
cd:cf:95:2f:fd:cb:28:eb:98:8a:3d:11:61:ef:45:
20:70:14:24:db:e1:63:d5:5f:49:0a:8a:50:2f:d0:
bb:d7:37:99:d7:5e:3a:96:e1:a8:7a:56:6d:26:66:
a4:12:4e:2e:92:0b:84:c2:ad:67:63:2a:c9:3d:a1:
f6:53:87:b1:40:d6:15:0f:aa:12:a7:13:e2:90:9e:
90:05:df:01:49:a3:53:42:fb:9e:7e:5a:a1:1c:ae:
82:b7:5c:9a:81:e2:2f:8d:65:9a:fa:af:ff:1c:d6:
5f:87:b9:73:29:26:76:0f:4f:ed:a9:a1:90:42:e2:
18:aa:bd:53:d6:a2:58:de:70:51:dc:56:1c:7d:38:
d6:ad:51:34:17:61:41:48:91:fb:78:80:87:9a:9f:
00:14:e0:a7:d6:d4:db:7d:43:25:cd:bb:80:d9:df:
3e:20:f6:3f:3c:cf:dd:b1:de:66:71:c5:de:96:f6:
a4:fc:78:ca:82:c7:16:82:43:46:a0:e3:b7:45:2f:
3e:5c:ef:56:0c:55:5c:28:35:c1:92:55:4b:1c:23:
71:03:41:f1:54:27:b0:39:2d:97:d5:eb:1a:12:fe:
b0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C4:1C:75:45:2E:FA:00:ED:27:9B:E7:80:17:EE:B4:A9:35:C5:1A
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:4a:bd:29:50:bc:59:ea:0d:94:1b:65:40:4c:b8:99:f9:4b:
db:05:8a:c6:04:69:cf:ac:99:2a:65:80:16:d7:80:98:15:01:
24:f9:21:28:61:f9:dc:f5:80:8b:86:0d:8b:b4:f6:45:4b:02:
b2:f4:e2:bd:66:ab:d7:31:4c:9b:39:b2:e1:da:ac:66:2b:8e:
4e:d7:3b:26:8b:a8:47:50:db:2c:bd:31:29:78:9f:b1:72:21:
a7:e8:e6:6a:d3:1f:d2:0b:3f:92:ea:69:f6:42:48:9d:d0:a0:
39:fd:df:a7:11:46:41:06:d2:a8:e1:f9:50:04:07:f5:15:fd:
18:57:44:d6:88:b6:9d:82:56:5a:f1:f7:d8:dd:5b:d4:b2:f6:
cc:f2:f5:46:8b:89:a7:8d:dc:c6:8b:75:17:28:a7:f6:88:9e:
ae:23:37:09:44:8a:4b:96:62:7d:7f:a7:ef:e7:02:62:70:15:
39:5c:fe:c6:06:25:8c:fa:1f:68:5a:a9:ba:fc:61:c2:69:06:
e0:4d:38:ec:fd:91:f3:45:53:48:8c:4d:a9:43:a4:a8:39:f1:
11:dc:25:e5:2b:03:82:21:b0:bc:1e:54:4a:32:a5:80:52:49:
fd:60:cb:e6:04:e7:79:b1:47:50:8a:ba:fc:fc:e3:b9:9f:5b:
ec:86:45:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:29 2025 by rpki-client