Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
File: 1-545C9y9la-rSl_4xO2e_ENoe9E.mft (raw, json)
Hash identifier: nlCyTSqvZPeBxlKB/60tpj7KQ40F0tf0lNlQbUpf9qg=
Subject key identifier: 14:D5:F2:1E:93:F1:68:62:52:7D:52:02:2E:D0:65:CB:D5:FD:FA:4E
Authority key identifier: FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
Certificate issuer: /CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Certificate serial: 019A5150752862E359463BD40B269CDB9288
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
Manifest number: 105E
Signing time: Wed 05 Nov 2025 00:00:18 +0000
Manifest this update: Wed 05 Nov 2025 00:00:18 +0000
Manifest next update: Thu 06 Nov 2025 00:00:18 +0000
Files and hashes: 1: 1-545C9y9la-rSl_4xO2e_ENoe9E.crl (hash: DvYOvPsPAHDkT746yQBEZgad+mmvz/TCExt9A+euQtc=)
2: AQyWHoTpIoD9YkmssqSGTmtU3kY.roa (hash: gQkpbE3OwjFrYUS2/tIcrYz4PZ/Z8nNnk27GBtk07kI=)
3: n9QbbxtHUjuRXoqW5WKf1TIqSDE.roa (hash: VlEMVs5cMOSULcZyXmypke2XQns+4ddKAif1EvT7d+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:75:28:62:e3:59:46:3b:d4:0b:26:9c:db:92:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb9e390bdcbd95afab4a5ff8c4ed9efc43687bd1
Validity
Not Before: Nov 5 00:00:18 2025 GMT
Not After : Nov 6 00:00:18 2025 GMT
Subject: CN=14d5f21e93f16862527d52022ed065cbd5fdfa4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:91:49:1c:75:8f:12:32:3d:b9:30:be:3c:
2d:96:f1:6e:6f:83:11:f6:30:0d:a3:cc:cc:2d:dd:
1e:e3:97:3c:17:c6:11:c1:3d:ba:60:d1:a7:27:9f:
09:a6:e2:43:6e:02:7d:fc:cd:b7:b1:dc:f3:3d:ee:
00:da:75:5d:ef:ce:2d:27:b7:20:42:a8:6b:db:bf:
39:72:f6:93:59:21:06:97:d6:24:31:53:a5:8e:32:
a3:11:f2:aa:d0:b5:79:f2:6f:32:d8:7f:63:34:e4:
a8:f7:ef:98:26:cd:1c:1f:3f:3b:15:ff:f8:8c:13:
ff:0e:f9:5f:5d:bb:5a:8c:3e:f5:e1:96:6d:78:a6:
98:78:b4:4d:0f:5d:c9:80:50:0a:01:ec:05:07:92:
d5:cd:30:8d:84:91:59:f2:1a:6e:78:f3:f1:c2:1c:
ad:41:95:ae:7c:0a:c9:05:e2:18:0c:79:ef:9c:22:
f5:7d:8c:b0:f0:62:42:27:97:01:95:87:d2:d9:3c:
2d:b8:47:0c:75:56:cc:dd:d9:e1:aa:04:60:51:fa:
fc:26:39:37:16:80:52:ce:cc:28:be:3a:d9:9d:14:
a6:27:fb:0b:0d:99:9e:ff:d8:95:e1:d8:7a:dd:e0:
cf:c1:4b:c1:b2:f8:9c:ee:41:52:04:0e:fc:16:01:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:F2:1E:93:F1:68:62:52:7D:52:02:2E:D0:65:CB:D5:FD:FA:4E
X509v3 Authority Key Identifier:
keyid:FB:9E:39:0B:DC:BD:95:AF:AB:4A:5F:F8:C4:ED:9E:FC:43:68:7B:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-545C9y9la-rSl_4xO2e_ENoe9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/d902ca-cdf3-4f29-b232-72426d92601b/1/1-545C9y9la-rSl_4xO2e_ENoe9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e0:cb:44:6d:c0:9b:c2:8a:04:8c:8d:c2:d5:ee:6f:48:ec:
0d:97:61:f8:ea:36:54:43:71:c2:7a:eb:e8:59:aa:12:62:a0:
bf:fc:f2:cf:db:27:38:b6:43:d1:ba:4f:7b:02:f2:42:b6:82:
cd:1d:83:10:aa:64:0d:37:91:00:62:80:ed:43:5d:60:4d:4a:
2a:d5:a3:ea:0e:b5:60:fa:df:97:b9:90:22:39:cf:08:70:0d:
21:84:90:9d:d0:eb:48:51:81:c9:f7:e5:21:d7:7d:5e:86:01:
bf:a3:76:db:c9:b5:e8:52:03:35:ff:5f:71:9d:9a:41:b5:04:
ad:69:bb:62:3c:84:eb:c5:90:93:87:7a:f2:e9:4c:f1:9f:70:
54:ab:38:1d:78:16:e3:01:f1:26:ea:28:14:2d:55:ba:cf:64:
c7:33:6f:3d:3c:b5:7b:6b:09:d4:69:37:54:f8:3e:4d:ab:1e:
fd:ae:7f:89:80:c2:ff:09:82:8b:20:03:28:2f:5a:75:8d:86:
64:21:b0:38:d3:06:a2:f5:61:48:98:23:ef:5f:ad:5d:d1:66:
90:76:49:b6:5e:0d:a8:7d:f6:51:39:dc:07:1c:9e:21:a0:96:
7a:eb:7e:c3:f2:56:ab:8e:7a:5f:5a:a3:81:85:51:5d:ba:b2:
cd:b0:b9:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:33:33 2025 by rpki-client