Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: PlhLATQfmuza697aE3j3iGrQnc/Wn0gD0mkVr54f3RY=
Subject key identifier: F5:1C:63:2A:53:54:C0:76:9E:04:80:96:3E:38:DF:8A:21:1F:0B:C0
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 019A4F9920E4AB90C482A28F080B71984CEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 16:00:26 +0000
Manifest this update: Tue 04 Nov 2025 16:00:26 +0000
Manifest next update: Wed 05 Nov 2025 16:00:26 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: ygb35IUQYIXzEnWw5KAlhbGXQJ9/DJDfrKM/rsfeX78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:20:e4:ab:90:c4:82:a2:8f:08:0b:71:98:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: Nov 4 16:00:26 2025 GMT
Not After : Nov 5 16:00:26 2025 GMT
Subject: CN=f51c632a5354c0769e0480963e38df8a211f0bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:af:f6:8f:d1:bd:7c:73:44:8e:16:39:fb:8a:
04:41:36:2d:93:25:d8:91:ba:cd:55:ea:e6:c5:b9:
28:00:ed:4e:b9:7b:31:4a:29:7f:81:7d:80:cd:3d:
0a:e7:74:f6:2c:26:9e:9f:c1:59:c3:1e:3c:a1:1f:
bd:95:4a:2b:6b:4b:f7:fd:70:7b:22:0c:18:2a:5f:
f4:d2:b9:58:ef:c8:8d:ca:60:0c:c0:14:ec:c2:87:
27:f7:88:4a:32:d7:eb:ea:73:b3:c4:97:d3:53:e6:
01:4f:cd:03:82:62:37:31:95:9f:53:e2:42:0a:d6:
c7:43:4d:4b:4f:c8:9c:72:cd:82:3b:e9:aa:93:f7:
e1:70:29:89:eb:62:d4:e2:97:78:6d:84:e0:33:a5:
ff:c7:df:74:07:b5:88:8e:b2:a2:44:3f:f4:37:bf:
20:00:00:4e:85:13:1e:c4:a7:e6:25:1c:8d:65:43:
c6:39:ab:ac:65:d7:ba:35:ca:6f:3a:7d:1b:e1:7e:
0d:0c:f6:7e:e8:ba:b2:83:90:c4:df:98:1c:56:63:
5d:10:75:f1:8f:5f:eb:87:48:df:d1:2b:df:3f:a6:
ea:fa:80:8f:96:e9:d5:ae:a5:af:f4:5b:33:12:ea:
17:6b:7e:04:15:85:cf:58:e7:97:87:25:29:48:fc:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1C:63:2A:53:54:C0:76:9E:04:80:96:3E:38:DF:8A:21:1F:0B:C0
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:57:82:68:ec:d5:cf:0f:46:95:c7:2d:7d:e4:e3:db:9b:66:
a2:bf:c8:52:b7:d5:4e:61:8f:87:2a:0a:dc:d7:2a:bc:f2:73:
ac:4e:ce:1b:0c:90:da:2b:ec:75:a3:2e:e0:ec:93:b9:1f:6d:
94:09:23:b6:e0:b3:4e:fe:3f:ab:de:06:7f:93:93:1f:d4:8c:
c9:93:e8:b5:f7:47:93:ae:fc:19:02:21:c2:50:2f:00:5b:c8:
f0:e4:b3:39:6e:7f:88:90:c2:23:84:c1:2d:c3:79:57:65:61:
9f:be:2b:54:d5:ff:fe:3b:5b:7f:9d:ad:33:b0:e4:8f:99:3a:
85:ce:64:33:ab:c7:ae:e5:6d:cd:21:6a:5c:e7:04:e4:03:b8:
fe:82:04:25:9f:e9:f9:2d:85:e0:5f:11:54:0e:5c:e6:22:88:
91:59:4d:4e:2d:86:6b:ce:39:f2:1b:73:82:42:97:30:e4:1e:
9a:e7:a0:5d:be:16:2d:04:33:55:c4:5d:a5:fe:12:2b:ed:55:
57:6a:02:ec:d9:9b:aa:6a:61:57:3f:f5:6d:9b:93:d0:da:7d:
26:12:c5:fc:fd:2c:21:4e:e8:22:f5:b4:9d:b8:c8:b2:ae:19:
0b:c5:5f:d6:d8:30:cb:fe:ec:f2:87:a1:b4:69:5d:71:f1:10:
45:78:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:46 2025 by rpki-client