Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: SeU58AWj3o6LQ1UWuDz/ZmwMB0EEeRUCwbMWmAhm7h4=
Subject key identifier: 2C:3B:48:7F:92:14:77:93:72:EA:59:D2:47:A1:96:5E:5F:E3:79:A2
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 019A4F62004027C692DF2E9268A824007269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 0977
Signing time: Tue 04 Nov 2025 15:00:13 +0000
Manifest this update: Tue 04 Nov 2025 15:00:13 +0000
Manifest next update: Wed 05 Nov 2025 15:00:13 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: PnPd1SCfo/PrgJs+mZGFoELpfShKFm5KNqCOPpnrF0U=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:00:40:27:c6:92:df:2e:92:68:a8:24:00:72:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Nov 4 15:00:13 2025 GMT
Not After : Nov 5 15:00:13 2025 GMT
Subject: CN=2c3b487f9214779372ea59d247a1965e5fe379a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7f:b0:cb:ef:3c:8a:54:bc:02:11:0c:32:99:
b2:9e:b8:a8:de:d9:a3:45:25:03:5f:3d:6d:6c:a3:
fb:16:ce:f3:ec:91:6e:ec:1b:2b:2f:6e:36:ee:4e:
96:0d:e5:97:33:28:a6:62:b9:6e:87:be:16:e2:87:
d2:ec:96:87:49:fc:82:04:21:6d:7d:ef:df:c7:3a:
d4:52:f8:73:9d:e1:c4:68:2d:f1:4f:86:2f:cf:39:
77:3d:a2:0a:6f:2b:e1:af:6f:ff:47:97:5a:fc:74:
f6:7f:45:2e:79:1a:2c:1f:78:96:1f:f6:b8:f3:99:
0b:65:ad:2d:22:d8:57:c1:57:64:22:38:91:72:a0:
ed:66:c0:12:99:e6:00:15:e0:26:fd:fc:1e:1e:1b:
f8:a3:98:0a:e8:8e:a4:19:90:ed:9c:ee:e3:6e:93:
7b:1d:d4:ef:a6:53:26:d6:e5:f9:59:96:5f:f3:4e:
ae:8c:09:9b:c9:87:94:f9:a4:2e:15:e9:e6:4b:57:
56:ce:99:ad:ef:bc:5e:97:27:a6:72:9b:91:78:15:
a2:98:03:9b:00:93:45:d0:b4:77:da:53:cd:66:0b:
cc:31:8f:aa:20:f4:72:7c:6c:8a:d0:c6:ef:a5:a6:
e5:bd:91:bb:38:fc:b2:c5:95:d7:80:09:02:e9:ab:
20:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3B:48:7F:92:14:77:93:72:EA:59:D2:47:A1:96:5E:5F:E3:79:A2
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:0e:8d:cf:68:c8:e2:5e:4d:36:13:14:e7:4e:ea:99:67:4e:
07:14:55:6b:5b:d5:32:4a:9a:cc:da:63:f9:aa:f5:f6:d7:1f:
8c:0c:eb:24:79:de:e8:c6:a1:8e:f0:2d:e7:8f:ac:97:c6:d0:
2e:6c:60:a8:41:3e:de:cb:36:db:6b:f2:13:38:aa:e5:5d:3b:
9d:28:24:5b:f2:25:f2:83:16:9b:55:b3:d1:d5:b9:fc:71:91:
7e:c6:5b:40:3e:8f:54:09:33:05:fd:35:63:77:dc:79:97:8d:
d1:af:d1:58:44:33:4c:86:d6:d3:7b:df:d6:7f:e8:15:32:ac:
f7:a2:3e:59:ec:d4:41:18:65:ce:8b:96:8f:f2:7b:6e:7e:12:
7f:d2:29:90:df:50:cd:64:d6:eb:e4:55:2b:cf:ef:42:11:07:
16:d1:3b:c7:3e:82:15:84:65:6d:0b:74:e4:dd:6e:6f:de:8b:
51:c8:e4:f8:ad:33:7a:8b:65:50:79:d5:7b:4d:20:2a:89:aa:
de:92:8d:6b:48:1a:02:71:65:74:7d:7c:48:46:e0:61:a4:63:
17:eb:34:33:52:0b:2f:53:12:af:5d:52:c3:4e:0c:8f:af:be:
5e:db:62:4e:fe:b2:ac:1a:82:86:d4:73:e0:50:a9:af:c0:c6:
07:c5:7d:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:37 2025 by rpki-client