Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
File: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft (raw, json)
Hash identifier: 8n2wZdMGn6b8UkHNmhgsmiwkCwBAXMSyHi40i1O5uuU=
Subject key identifier: 61:EF:50:75:10:DA:E1:D1:63:43:45:46:6F:FD:55:B5:F4:17:67:98
Authority key identifier: D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
Certificate issuer: /CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Certificate serial: 019A52D241FDFD10A0A740E038F5E1452156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
Manifest number: 04B1
Signing time: Wed 05 Nov 2025 07:01:42 +0000
Manifest this update: Wed 05 Nov 2025 07:01:42 +0000
Manifest next update: Thu 06 Nov 2025 07:01:42 +0000
Files and hashes: 1: 1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl (hash: yKYDld3DG0J+PIBR0XHSJgW1VnEe0MkSJbhpNfyIIEU=)
2: D3Qa_sAxJ4QAW9BgsqA95qoNdoU.roa (hash: gHeiDeVEOHYv0WXJX1y/YBwNlFOyEUt5hFygVZ9yIyc=)
3: YNsqLkitHpqkjiltdLgc2bdx6rs.roa (hash: 3Qov5yHW6YQLGF3KdMXPXf4671PbN4pLA5bsaPPsRlI=)
4: gkfVq5pqris09sYZ6oxV9_B3k7k.roa (hash: txlMX2TP/JiHw0qHy7bbrrf1DRw3ThhHjdL7DQDHFqs=)
5: zi6tgxxdXu-KjRvwqkHo4TAbCCY.roa (hash: /Ka11sy39OKnCI674OTDKtIC713gWaXNerptag8ixr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:41:fd:fd:10:a0:a7:40:e0:38:f5:e1:45:21:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515f2e9149ce1b428c8f1edfc009215e2847f55
Validity
Not Before: Nov 5 07:01:42 2025 GMT
Not After : Nov 6 07:01:42 2025 GMT
Subject: CN=61ef507510dae1d1634345466ffd55b5f4176798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:13:3c:d4:44:ee:72:b8:b7:ae:f5:8e:15:56:
99:be:25:67:2e:a0:85:d0:cc:4e:f0:1e:45:34:56:
9d:d5:d6:04:26:5f:62:e1:f6:57:39:f3:e1:40:86:
8f:3f:9e:a1:83:cb:18:d6:64:4c:64:5a:08:2f:b6:
a0:6a:e8:41:73:cf:37:8d:a6:f9:fa:fd:a0:4b:ea:
84:cb:3e:0b:94:f9:3c:ba:63:11:82:31:a4:82:2e:
e5:eb:60:d0:32:22:8b:01:c9:3b:86:f0:a1:6a:36:
62:48:37:54:c4:ab:61:f4:66:fd:71:2e:91:10:cb:
8d:e0:ca:6b:1f:e8:8e:e6:22:97:13:7d:65:97:db:
d2:c9:47:ce:f0:a1:7b:eb:a9:4f:cd:6d:b6:15:84:
63:a9:1a:a7:09:33:5a:09:4b:d9:c2:e0:da:29:24:
a6:81:f0:2d:f2:a5:6c:cd:9e:b4:fd:ee:73:76:a8:
e8:32:77:c9:73:a7:0c:44:f4:97:fe:42:34:79:12:
5e:a7:c3:1b:b0:66:5b:24:0a:ed:d9:8d:e5:1c:33:
cb:2b:07:24:d7:dd:0d:33:5e:63:95:73:22:a0:79:
67:f0:2f:7c:c2:0b:9b:55:14:7d:a3:b0:47:ed:16:
ce:22:0c:76:06:19:aa:f1:1b:36:c2:70:8c:77:68:
f3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:50:75:10:DA:E1:D1:63:43:45:46:6F:FD:55:B5:F4:17:67:98
X509v3 Authority Key Identifier:
keyid:D5:15:F2:E9:14:9C:E1:B4:28:C8:F1:ED:FC:00:92:15:E2:84:7F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RXy6RSc4bQoyPHt_ACSFeKEf1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8366ae-575d-4fde-8e92-0089944980ca/1/1RXy6RSc4bQoyPHt_ACSFeKEf1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6a:0d:d6:8f:1c:98:6c:02:6d:a5:ea:94:6b:e3:31:28:ef:
10:77:fa:72:26:8e:31:36:c0:d0:0a:73:02:98:4f:9f:74:4f:
b4:ad:ad:6f:c2:b1:2d:91:93:ff:55:c9:d1:49:7a:28:8c:2e:
c9:39:11:fa:36:e9:30:01:72:2c:d6:1c:1f:43:d5:f7:98:18:
8c:51:1b:15:18:6b:6a:9d:90:d0:f1:4d:89:07:e0:05:ef:2e:
d7:34:e4:35:f2:2e:60:a9:19:d0:c1:98:49:ac:bb:b7:f5:24:
14:2c:f4:0b:de:ce:0d:85:7e:21:2b:5d:fb:9f:fa:8a:8f:cc:
7e:86:18:03:17:8b:e3:82:eb:86:8c:e4:e5:d9:d5:bb:3d:08:
b1:60:8c:56:46:92:32:b1:e5:76:96:ca:a9:12:33:d5:75:a6:
5f:2e:e9:ab:4f:a8:8d:82:1d:c8:bb:6e:8e:1d:6e:13:db:23:
09:94:b9:85:25:ad:2c:f4:01:9b:0c:68:3b:f7:50:1c:bc:12:
1d:d6:2f:db:9d:1a:47:80:1d:45:ca:44:b1:b1:83:1c:11:09:
b2:e2:86:a5:94:43:84:8c:25:5d:15:86:47:0b:a2:cd:28:17:
58:28:8f:aa:55:d8:b2:9c:3e:db:5d:24:a2:ca:04:9c:20:d0:
72:f4:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:04:03 2025 by rpki-client