Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: xqeDss2pVyR7qd8/kS2LyKkldz7yI/+pVGIMoFFszfA=
Subject key identifier: 5A:30:47:7B:B4:E6:2E:C1:8D:35:06:CB:10:43:2F:E4:85:13:69:B7
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019A4E18D592C9F91825257268AA8B5F7564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0DE5
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: CEmTmbIDUq6X2OHvBk3x7S4IzkKIhWd2Qug8HYiSs6o=)
2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d5:92:c9:f9:18:25:25:72:68:aa:8b:5f:75:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=5a30477bb4e62ec18d3506cb10432fe4851369b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:22:fa:7e:15:9d:8b:f8:b6:31:66:69:81:64:
69:90:90:5c:1a:36:b4:6c:4e:21:9f:49:5e:c4:22:
68:d8:b3:3a:2f:42:5d:50:1d:60:cc:63:fa:51:19:
9d:48:38:74:6c:80:06:c5:29:65:b8:5f:99:6d:a3:
24:39:a4:8b:da:75:4f:a1:92:16:da:cb:a8:96:68:
58:3b:19:dd:93:50:8b:e1:8b:8f:e9:da:65:d6:c7:
61:f4:9d:2a:09:c1:ee:92:d1:63:7c:c9:15:65:2c:
b3:49:59:05:d1:fb:0c:a4:1d:65:09:01:33:e4:21:
6b:17:13:0a:c6:c5:65:63:84:64:8f:18:17:39:ea:
da:ab:ce:5c:7f:ff:5b:08:71:92:10:df:b4:42:db:
46:e7:75:cb:20:8b:3f:b5:aa:0a:a3:37:ab:b6:0a:
d6:08:ba:49:ad:6b:25:67:fc:a4:5f:2f:88:4e:b6:
f9:6f:73:92:43:d4:5d:2c:40:bd:fe:60:6e:3e:3b:
93:25:18:d2:94:70:d9:45:b7:ad:9c:2b:06:cc:01:
fa:70:8c:85:f6:b3:72:a0:df:f4:a6:3e:6c:81:57:
41:1a:ae:53:b8:09:33:dd:67:ce:6a:1d:97:ab:4e:
b9:cd:91:78:1a:ee:73:fe:c0:82:59:26:c9:e7:1e:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:30:47:7B:B4:E6:2E:C1:8D:35:06:CB:10:43:2F:E4:85:13:69:B7
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:47:ca:fe:15:f9:81:6e:03:a0:03:b2:40:2f:49:6f:24:
a4:7d:02:5e:69:54:8e:59:4e:4e:62:4b:f2:60:bc:a9:e3:61:
8e:d4:ed:04:dc:b2:b4:3d:75:cc:a3:ee:25:19:bd:4c:2f:c7:
92:fa:a0:18:bc:d2:57:6c:ae:d4:f0:a4:be:f3:6b:14:47:13:
59:36:13:da:f8:43:be:d7:7d:86:2d:21:ef:0f:94:cc:70:fd:
8f:99:48:43:ea:05:b7:67:97:f3:14:ca:08:f0:64:b1:76:b6:
87:4d:4e:c5:03:1b:fb:66:62:3e:29:d9:c0:23:e4:db:04:f4:
4e:2b:3a:87:03:16:9a:6c:9c:c1:c8:45:29:c4:26:ee:b7:06:
90:9e:6d:5a:d4:2e:4a:be:45:f9:32:29:9a:87:51:64:f3:2f:
8d:0a:52:55:ab:7e:9b:10:04:03:b2:6b:56:b8:70:7c:a6:73:
68:07:03:e8:a3:d5:b2:9a:c5:18:95:52:bb:68:43:62:a3:56:
89:74:2c:cd:ff:6e:13:73:e7:61:59:d6:91:53:c1:4b:2c:63:
aa:bc:b1:fe:f6:51:6e:37:b5:e8:2c:60:70:70:f7:70:28:12:
b8:a1:7f:78:ac:79:4f:6b:39:77:b6:a9:61:40:38:63:57:ce:
a0:c5:47:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:50 2025 by rpki-client