Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
File: a1zOqpdLKQWssmKvRSwCKAMWqrs.mft (raw, json)
Hash identifier: imX/nAnQUytOPJFDr+FB4Yl58r7k71kVD2p3NpbGviM=
Subject key identifier: 5E:4E:58:14:38:E9:A5:37:01:5B:08:16:1D:AB:02:94:42:F0:DD:35
Authority key identifier: 6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
Certificate issuer: /CN=6b5cceaa974b2905acb262af452c02280316aabb
Certificate serial: 0199FEB51354B2E07183CAF17C260B29A4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
Manifest number: 0621
Signing time: Sun 19 Oct 2025 23:01:43 +0000
Manifest this update: Sun 19 Oct 2025 23:01:43 +0000
Manifest next update: Mon 20 Oct 2025 23:01:43 +0000
Files and hashes: 1: a1zOqpdLKQWssmKvRSwCKAMWqrs.crl (hash: CZ5JDYxsmF3hfd5MQvvUM+cFHiLdFvkLEo7FgxrUULY=)
2: bItIvz4oTSzEDWqrAWUpQQfUMhI.roa (hash: F1ATAeaXzdv7TC8vaBAXGNSvaND60c6EFcHFAEWNuFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:13:54:b2:e0:71:83:ca:f1:7c:26:0b:29:a4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5cceaa974b2905acb262af452c02280316aabb
Validity
Not Before: Oct 19 23:01:43 2025 GMT
Not After : Oct 20 23:01:43 2025 GMT
Subject: CN=5e4e581438e9a537015b08161dab029442f0dd35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b9:70:81:18:1a:23:43:c6:f3:de:a1:d0:1b:
0f:4c:58:04:24:ec:bc:d3:b5:e0:fc:b2:95:84:76:
a3:c8:ff:38:4a:24:62:b6:97:95:7d:79:52:49:c4:
3d:86:53:f6:ba:03:c2:3d:28:54:11:97:b1:76:cf:
fe:d7:cf:21:40:a9:a0:e7:e2:25:62:8a:e2:db:82:
fd:bc:0d:ea:27:a0:dc:90:5d:34:c7:83:a8:86:e3:
90:94:17:0b:73:16:18:46:d3:f7:bf:26:00:91:5c:
b6:ca:16:7e:bb:ae:d9:f6:4c:0d:12:68:a9:63:42:
79:51:e9:83:77:f0:ee:e8:8e:df:c8:75:bb:e0:9b:
e8:30:9f:b1:95:b8:20:02:3f:06:03:e7:ae:b4:84:
a0:0f:ab:d1:1f:13:67:4e:0a:bc:8a:50:e5:f4:df:
af:fb:19:12:0b:41:9e:da:cd:78:6b:1d:49:57:4d:
ea:a0:eb:ce:31:93:35:f1:6f:0b:81:ae:a2:b2:1c:
6c:ff:76:28:1e:d4:61:79:58:1b:eb:b6:7a:1e:ba:
70:ea:5b:84:a4:13:23:dd:30:b2:4b:c7:a7:60:1a:
92:18:2c:a7:b3:1f:ec:fe:fc:19:7f:2d:b3:19:7a:
04:c8:9f:dc:c5:06:72:a3:ae:22:65:cc:ed:f5:e9:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:4E:58:14:38:E9:A5:37:01:5B:08:16:1D:AB:02:94:42:F0:DD:35
X509v3 Authority Key Identifier:
keyid:6B:5C:CE:AA:97:4B:29:05:AC:B2:62:AF:45:2C:02:28:03:16:AA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1zOqpdLKQWssmKvRSwCKAMWqrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/39f1e0-3627-492f-ae93-8b07acd07c94/1/a1zOqpdLKQWssmKvRSwCKAMWqrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:88:dc:f3:dc:10:cc:73:c5:de:4b:2a:87:29:5e:39:65:
d2:d3:40:a8:c9:51:91:79:9b:a1:56:70:cb:6b:8b:71:b7:2c:
86:4a:46:fc:13:8b:c7:45:f3:0d:9f:d4:43:71:04:c5:11:10:
2d:d3:87:85:dd:58:50:5c:f0:67:af:09:6a:03:58:0a:e5:6a:
42:9d:c7:9c:0b:b2:76:53:86:f6:29:ad:72:36:d7:3b:be:4e:
07:6b:68:7f:87:59:db:6d:76:91:f5:82:f3:ff:9b:1f:70:7a:
2a:38:6a:ef:fa:1a:b7:29:ae:04:75:d0:ec:53:f1:c9:5a:94:
98:da:5e:0d:43:4b:c9:8a:c4:c3:d6:e8:20:08:50:b5:0b:b9:
0f:25:a7:a2:2f:28:3c:f2:d0:22:8b:8b:b4:a1:4b:ef:69:43:
ca:8f:ae:48:46:3d:08:47:c5:1e:58:99:fa:6a:fb:11:78:e7:
8b:81:6b:14:8b:bf:f6:6c:91:42:f4:d5:df:b2:d3:90:a4:f7:
ac:87:9f:a0:41:ce:6b:a1:2f:ae:84:23:6e:8f:3a:bc:57:6c:
b4:59:e7:99:61:65:b0:bc:66:9b:5c:28:f5:13:2b:0e:32:0f:
e6:0e:a1:2a:a2:b0:28:80:10:9e:d3:b5:ba:c1:09:58:5d:66:
b5:91:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:23:42 2025 by rpki-client