Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: OHsiArEviT6Esl2LmzmfWTmRALGlxZWyw2hh7g8zUiE=
Subject key identifier: D8:44:23:C3:97:26:10:3C:59:CF:44:C0:76:69:FD:24:87:CF:88:64
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 019A4F996DD4C0F16FF233E40E101672B29C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 112D
Signing time: Tue 04 Nov 2025 16:00:46 +0000
Manifest this update: Tue 04 Nov 2025 16:00:46 +0000
Manifest next update: Wed 05 Nov 2025 16:00:46 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: mdrcU7R9lKjRqQBYKID3c/yu6v9XsVVpzolNdLjGsMM=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:6d:d4:c0:f1:6f:f2:33:e4:0e:10:16:72:b2:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Nov 4 16:00:46 2025 GMT
Not After : Nov 5 16:00:46 2025 GMT
Subject: CN=d84423c39726103c59cf44c07669fd2487cf8864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:f2:b8:3c:9f:83:60:5e:97:b3:8b:0a:e1:
5c:f3:99:cc:3a:64:52:46:88:c2:e1:bd:c7:42:49:
3a:f2:66:e9:47:c4:1b:92:a5:d7:bc:5b:ee:08:cc:
c2:04:5b:83:23:6a:69:fa:29:2e:ff:73:ac:f5:7c:
06:0e:1b:52:fa:6e:92:ce:35:3b:ae:34:ae:11:5e:
0e:fa:d1:34:69:fe:f6:26:c5:1f:44:3d:16:32:47:
38:92:3b:d3:87:3f:ac:20:20:62:77:53:cb:66:12:
5d:4a:67:4b:10:d6:ba:0a:76:fa:ed:ed:2e:bb:4e:
52:61:0e:83:3c:fd:02:31:76:b8:4f:21:1e:c1:52:
1a:dc:0d:2d:71:1b:74:6e:91:d8:38:6c:89:e7:46:
94:ab:6b:79:05:2a:3e:18:a9:d9:9e:a8:65:4e:e2:
52:fa:12:7b:6e:25:81:26:06:fa:49:f0:fe:cc:4f:
c2:74:0c:98:94:75:05:4a:59:aa:05:80:d4:2e:dc:
08:69:51:37:8a:e0:47:30:36:98:25:a8:58:6f:77:
12:f3:cd:28:53:b5:1d:78:92:37:80:f7:50:df:db:
01:81:9e:7f:79:d1:61:c1:0e:8f:72:5b:01:4c:62:
68:1f:7d:98:d3:f3:ef:33:5a:68:bb:7c:f8:c7:07:
0e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:44:23:C3:97:26:10:3C:59:CF:44:C0:76:69:FD:24:87:CF:88:64
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7e:15:7e:d4:a9:89:60:b9:6c:f7:a1:1f:1d:1d:b3:ef:71:
17:b1:68:db:e7:ad:20:00:04:e5:fd:64:6c:67:d1:d8:c7:76:
96:bb:da:16:24:bc:12:c8:72:e1:2c:ef:12:b5:43:91:8f:d6:
de:11:c9:74:b6:4d:14:81:a3:ca:76:b3:c6:6d:e8:d4:09:f6:
23:c2:29:7e:c5:11:dc:58:8a:da:3e:79:41:5a:22:e9:62:88:
d7:6f:ae:aa:a7:9e:4d:ec:a0:30:89:1b:c5:10:4e:5b:ab:cd:
0c:0a:87:fd:68:e7:a9:af:2c:67:85:47:0f:6e:3e:9c:fa:10:
ed:cd:bf:72:07:0a:fa:b7:7c:06:ce:ab:d0:1a:7a:62:63:1b:
c7:3f:32:a8:a9:1f:bf:2f:ff:cb:53:88:5f:88:2f:cd:17:e5:
16:b9:d5:83:61:7f:8d:a6:17:4a:39:4a:14:0a:6d:6f:19:42:
8b:fa:b7:6d:8a:90:0a:d8:17:72:79:be:f8:ee:95:62:1b:ba:
d5:62:9b:8f:a6:7d:e6:c8:e0:45:96:96:28:95:c5:2c:10:68:
64:16:8f:15:d9:5d:10:d7:e0:4c:af:d7:b7:3d:5c:02:f3:78:
03:49:84:02:b5:43:b0:5e:48:3b:f9:94:f2:9d:d1:40:47:47:
1d:58:04:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:17 2025 by rpki-client