Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: dIN5sai2wSK41vRUi5g+yKYE5EV90onQXX/4z91FmiM=
Subject key identifier: AA:73:7A:83:9A:09:27:E0:0E:9C:96:68:B9:CE:F8:95:1D:FB:65:C9
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019A5187BF41BCC8585D43EB403AABE2BDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0394
Signing time: Wed 05 Nov 2025 01:00:41 +0000
Manifest this update: Wed 05 Nov 2025 01:00:41 +0000
Manifest next update: Thu 06 Nov 2025 01:00:41 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: Co+8W/SzoEYh5kyyhjU3ghdyK5mXwUJ+cbN4gKBDQyg=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:bf:41:bc:c8:58:5d:43:eb:40:3a:ab:e2:bd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Nov 5 01:00:41 2025 GMT
Not After : Nov 6 01:00:41 2025 GMT
Subject: CN=aa737a839a0927e00e9c9668b9cef8951dfb65c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:73:19:95:5d:21:47:12:84:05:40:d5:14:
ec:85:ef:e8:a2:15:fa:83:fe:83:18:97:0b:4f:64:
0a:e5:ed:05:72:21:1e:db:bf:40:21:f4:99:ff:07:
4a:3a:ac:2f:4b:f6:b7:59:ec:5c:0f:07:13:cc:31:
c2:2f:18:c5:96:47:8c:b1:c3:d4:71:6d:2b:57:fd:
30:24:fb:a3:43:c0:f4:f7:87:1a:90:25:41:7a:10:
e1:b0:6d:cc:f0:8c:d5:45:e8:68:10:06:b7:11:0d:
bc:cc:92:e8:31:ea:72:18:65:db:2b:aa:01:00:45:
db:06:0f:26:57:d6:cc:5b:e4:aa:31:00:b8:f9:44:
c5:ff:26:74:29:8e:e8:e8:7f:cc:1b:25:d4:e6:ba:
27:6a:40:7e:7a:70:2d:2b:64:19:53:ea:0c:84:cc:
aa:13:b9:85:39:96:85:0a:ce:6f:72:d8:f2:ee:6b:
5c:04:bd:23:ac:cc:7f:a9:16:6b:6d:53:66:43:c5:
21:8a:80:56:69:c6:47:b7:ef:6e:e5:02:de:39:a4:
91:3f:36:10:47:e1:93:48:51:ab:73:0e:f5:6a:72:
06:41:4d:25:4d:cb:61:68:46:43:e7:59:b8:5f:4a:
c3:2f:79:51:36:2a:ae:4c:b0:06:f5:35:ce:aa:8e:
90:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:73:7A:83:9A:09:27:E0:0E:9C:96:68:B9:CE:F8:95:1D:FB:65:C9
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:31:68:f4:e0:ac:85:94:f3:6f:06:e1:3d:b9:4f:00:2f:c5:
85:1a:61:f3:5b:af:44:ba:80:ba:d2:60:c2:9b:e0:94:1d:60:
38:e5:1f:f2:ce:f2:64:83:cf:48:d1:9d:75:d7:69:5c:86:43:
47:7e:08:05:3a:bf:d9:1e:5d:16:92:89:08:27:f2:81:84:3d:
6d:57:09:9d:83:7d:50:dc:7b:9b:38:ab:de:46:95:69:da:d1:
83:88:d0:e3:f2:1c:e9:18:e4:cd:5f:8a:c4:b8:81:b6:f4:68:
36:69:e4:20:e2:b5:74:45:9f:95:ec:10:03:66:29:05:1a:d1:
2b:88:53:a3:04:2e:b7:34:6d:00:8f:56:7b:86:8f:47:26:fc:
86:bc:bf:eb:51:be:cb:b0:ab:74:b4:87:72:ee:55:8d:f5:d8:
04:3f:94:dd:87:ca:20:d4:39:47:9e:df:11:4e:51:c8:5b:07:
12:58:d3:e7:cc:66:2b:f3:67:3b:16:4c:b1:49:36:1d:86:77:
d9:16:73:f2:17:8f:49:0f:72:45:e4:30:3c:8f:48:f9:84:e4:
e6:84:95:52:f0:bb:d5:e9:72:d0:cf:5b:8b:bb:2c:ee:94:17:
b4:86:9a:2a:60:b0:c7:14:a5:57:4e:3f:b4:b5:ac:09:d7:99:
91:79:66:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:27 2025 by rpki-client