Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
File: 1eKDzL8RaYtvIuwXtfY-OlPkESA.mft (raw, json)
Hash identifier: 8WFsfoMnkZ068n1YmGreuL3AzDPAPEg7N+q+xp7dpgE=
Subject key identifier: 09:0C:AF:CD:79:E7:22:91:EB:CF:6F:E7:F3:05:08:F9:41:9A:68:2C
Authority key identifier: D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
Certificate issuer: /CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Certificate serial: 019A4EF40EB65FBB9E8C98A2DC9C52F1B8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:08 +0000
Manifest this update: Tue 04 Nov 2025 13:00:08 +0000
Manifest next update: Wed 05 Nov 2025 13:00:08 +0000
Files and hashes: 1: 1eKDzL8RaYtvIuwXtfY-OlPkESA.crl (hash: aa2QNKD2JzxmsRjiDoCabgPRdFevr6K2ep2I7vFPXVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:0e:b6:5f:bb:9e:8c:98:a2:dc:9c:52:f1:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e283ccbf11698b6f22ec17b5f63e3a53e41120
Validity
Not Before: Nov 4 13:00:08 2025 GMT
Not After : Nov 5 13:00:08 2025 GMT
Subject: CN=090cafcd79e72291ebcf6fe7f30508f9419a682c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7c:53:6a:3f:60:12:7d:9b:1b:78:00:bd:b1:
d8:70:bd:16:3d:2f:57:25:cd:f6:54:92:ff:ed:ad:
6e:ac:58:e8:2c:ae:56:2f:52:21:3b:59:2d:3b:bb:
1a:28:ed:cb:d5:6d:71:9c:ec:15:2a:70:72:a0:b7:
ea:48:7a:d0:b0:b1:4c:fe:3c:e9:12:8e:ee:1b:db:
4f:0f:43:2b:b9:56:6b:0d:64:fa:9a:f8:1a:4c:3c:
30:d2:b8:83:1b:26:ff:d4:b8:64:ea:69:e6:4d:3e:
bc:0a:dc:62:f5:21:de:a8:09:45:4e:61:7c:98:82:
53:58:9f:75:5f:7a:16:0e:13:ff:a9:59:bc:77:ec:
55:05:0e:00:14:64:01:c3:7c:c0:ff:13:d1:6d:b8:
fc:f6:bd:fd:93:22:2a:71:8b:65:f7:b3:f0:0b:63:
7e:d9:f6:a8:8d:fd:b9:f6:1c:9b:1f:dc:91:49:19:
81:00:22:00:6b:36:aa:da:b6:15:df:ff:b6:17:62:
a3:57:b8:95:7d:fc:c5:1a:2d:ee:05:86:45:de:2e:
1e:44:9a:b1:2e:6b:69:dc:d8:3b:32:d2:b4:45:d9:
23:cd:ef:1e:44:0c:d3:52:e8:f4:c6:e1:55:6b:da:
11:5c:b8:fb:f4:20:1c:fe:ab:24:5b:2c:69:e4:31:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0C:AF:CD:79:E7:22:91:EB:CF:6F:E7:F3:05:08:F9:41:9A:68:2C
X509v3 Authority Key Identifier:
keyid:D5:E2:83:CC:BF:11:69:8B:6F:22:EC:17:B5:F6:3E:3A:53:E4:11:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eKDzL8RaYtvIuwXtfY-OlPkESA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6dabd0-5565-4925-a702-0f62bbd9b568/1/1eKDzL8RaYtvIuwXtfY-OlPkESA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8f:c5:bd:b0:f3:33:86:79:b4:a6:e7:3f:33:0c:06:81:fc:
7a:b0:96:79:88:f0:d4:d5:5e:d9:09:8a:b8:48:ae:66:8a:c1:
b3:72:b4:ee:cd:3b:04:37:a3:4e:b1:b6:8f:b2:a2:00:b8:69:
de:44:0c:04:fa:56:04:3d:0a:75:7e:d9:5f:e6:a9:88:e5:f8:
8a:47:b6:4d:01:33:2e:88:fc:4c:10:99:e3:53:99:1e:33:5c:
f2:9d:16:49:2f:c8:1f:27:24:96:ca:0a:11:1b:cc:48:39:c5:
31:54:13:25:93:b9:b9:e3:25:3a:a7:16:c3:5c:7a:99:09:52:
2f:66:ba:72:d4:fb:a7:de:f6:11:7c:4b:af:3f:19:bf:b2:9f:
de:f5:e2:52:89:62:2f:1d:95:58:7a:1f:dd:76:5e:b4:58:08:
10:fa:b0:4e:2d:69:de:1b:b6:04:3c:8b:09:55:2c:12:45:92:
50:c8:16:78:80:dd:00:10:8e:38:ff:43:87:60:90:10:70:44:
6f:ff:49:2a:b6:fa:4a:76:64:24:bb:8e:2b:f9:83:ae:54:0c:
7e:7b:9d:6d:1c:27:00:61:d7:66:73:af:f7:79:4c:3a:b0:63:
a0:e5:43:2d:a0:c8:05:ed:ad:78:a1:b4:9c:88:b2:c5:8e:42:
d8:1a:6c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:21:52 2025 by rpki-client