Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: q3oB/1R71Zcs0SRKua4UF+prq1/CedDObvsSrJLd8oY=
Subject key identifier: D2:62:AD:E3:92:FC:2D:4F:8B:20:D6:3A:33:C2:1B:0C:5F:A9:D2:A8
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019A533EDA5AB2E85F8BF1708ACD3221D57E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 105F
Signing time: Wed 05 Nov 2025 09:00:19 +0000
Manifest this update: Wed 05 Nov 2025 09:00:19 +0000
Manifest next update: Thu 06 Nov 2025 09:00:19 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: Eq5N9yiw99O71tF9/y/YtVvcs7xHS5Dy0fhO3rW68N4=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:da:5a:b2:e8:5f:8b:f1:70:8a:cd:32:21:d5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Nov 5 09:00:19 2025 GMT
Not After : Nov 6 09:00:19 2025 GMT
Subject: CN=d262ade392fc2d4f8b20d63a33c21b0c5fa9d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:d8:1b:dd:fc:18:a1:63:00:66:8b:f9:b5:
e3:41:7c:74:bf:fe:14:1a:5a:03:b9:10:ec:76:7a:
ce:64:67:66:82:fe:2e:56:dc:04:8c:83:5a:58:3d:
c2:e3:e7:5e:c6:76:13:a6:c6:cf:db:1c:41:7b:a3:
d2:fb:57:f6:2f:db:e0:b5:39:ca:04:45:cc:5a:f3:
e6:d3:8a:b4:a9:72:bd:f1:04:64:06:3f:7e:44:bc:
4a:b4:ac:ca:32:c0:6c:f3:a7:e2:04:34:8a:7c:63:
87:a0:81:c8:2f:b3:92:71:36:49:b0:9f:d2:59:cf:
99:50:9d:58:f7:27:6e:e7:14:8a:c8:c0:3a:2e:7b:
62:44:58:a3:8c:84:24:b6:30:54:14:cf:9c:9b:d1:
c4:66:2a:aa:57:09:79:98:08:a9:94:33:17:9b:3a:
c0:88:e0:fc:0c:2b:b0:f1:05:36:58:2f:31:fc:53:
25:a3:27:50:ea:71:73:7f:7d:b3:a4:31:db:c8:93:
cc:c6:24:a7:c0:1c:d9:91:af:90:77:0f:4e:31:68:
4f:c0:93:85:55:44:2f:e5:97:fe:3d:c2:76:8d:ca:
94:96:9e:08:7f:72:92:f7:b2:ab:5d:b9:3f:0a:fb:
b1:bb:94:0c:b1:f8:9b:85:df:c8:fb:04:ba:d7:62:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:62:AD:E3:92:FC:2D:4F:8B:20:D6:3A:33:C2:1B:0C:5F:A9:D2:A8
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ce:a4:b2:55:9c:bb:93:b0:77:7a:4a:c8:66:74:71:5c:0f:
ef:11:4c:1a:94:af:e1:46:66:bc:d2:8a:5f:c9:fc:2d:be:17:
f2:e0:06:db:36:3d:65:4d:e2:8b:53:49:51:42:c6:70:2d:40:
36:a8:cd:37:e6:90:88:2a:8a:b8:51:95:61:0d:69:59:7d:c7:
3c:0c:ea:20:02:a3:4c:b1:f3:8d:67:63:72:46:f2:fd:fc:52:
44:5e:6a:18:55:1a:67:38:50:4e:98:f8:10:c7:47:ce:aa:57:
fa:f4:14:ef:ed:4d:16:be:86:35:f1:82:6b:68:f3:32:7c:45:
ee:95:1a:ab:9d:c9:c6:9d:37:33:bc:23:f7:7f:35:35:a9:1d:
44:e5:fa:ed:99:25:5d:b6:ad:74:16:a9:2a:dc:f6:29:0f:15:
5b:fd:b9:cc:02:66:e0:95:35:92:d1:25:4f:2f:aa:5d:ca:04:
e6:6d:92:e5:04:cf:f4:e9:c4:f2:79:0f:49:23:59:3f:fa:5b:
ba:53:81:5e:ca:57:36:6e:50:42:57:5a:22:8b:36:04:0a:33:
19:b4:72:db:f3:1a:a2:4f:98:5f:b4:8b:09:89:31:70:6d:1b:
a3:a5:36:da:ca:7d:ae:69:30:bd:54:78:50:97:3a:0b:1e:c3:
bc:95:6e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:27:05 2025 by rpki-client