Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
File: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft (raw, json)
Hash identifier: EoNKHwHxVGsc1kSeviJkcuIxPe+ULMvXgRnc5oILrAw=
Subject key identifier: D8:2A:87:40:DD:06:50:94:26:4F:D6:C8:36:DA:FA:FB:7F:10:3E:97
Authority key identifier: D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
Certificate issuer: /CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Certificate serial: 019A5263372530C8F20775D0DD7985B2E8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
Manifest number: 0209
Signing time: Wed 05 Nov 2025 05:00:25 +0000
Manifest this update: Wed 05 Nov 2025 05:00:25 +0000
Manifest next update: Thu 06 Nov 2025 05:00:25 +0000
Files and hashes: 1: 1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl (hash: EDP9pKQXDI/iH2geP6+LYacvBpCJVornQjc7aTjjG2c=)
2: BcelUhdXxacAQU97XkdcwjtJzVg.roa (hash: XXQpfHpkHgSaCtL3AHunwK9n34HNeTtzIRJIEYTmJHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:37:25:30:c8:f2:07:75:d0:dd:79:85:b2:e8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5585a2e08fe443ce7fd0cbf406f7b9ada2a7cc5
Validity
Not Before: Nov 5 05:00:25 2025 GMT
Not After : Nov 6 05:00:25 2025 GMT
Subject: CN=d82a8740dd065094264fd6c836dafafb7f103e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:23:62:03:b3:9c:cd:b7:4c:4b:7f:ae:68:
65:f4:b2:df:17:b6:6d:b4:f6:fc:f3:e1:04:23:40:
20:dc:26:91:eb:b6:e6:7e:18:47:10:d2:8a:26:32:
e7:c8:57:9e:2a:f7:91:e2:13:10:51:17:3b:71:ec:
1c:fd:94:62:8d:24:f7:8e:cd:ad:93:51:50:f5:5e:
6a:f4:3a:31:1f:74:2a:5a:55:7a:61:5e:be:03:e2:
17:73:60:f8:80:ae:30:6c:44:87:e5:48:02:8e:3c:
97:01:18:2d:6f:b6:0a:3b:d7:d7:e5:ae:5d:d6:ba:
f3:ec:e5:3e:15:2b:e4:a5:9e:c6:86:aa:25:4e:eb:
d0:30:21:17:81:0e:71:da:72:44:22:6d:c4:75:73:
9c:f2:d5:5f:3d:0a:e3:ac:09:cf:3b:78:87:a1:7d:
d7:b5:a4:cc:75:f8:e8:93:6d:9d:a9:67:0b:8a:19:
56:05:22:45:c4:31:ad:bc:2a:2c:89:e3:c2:83:45:
6c:ac:95:ec:dd:13:4b:81:b7:a3:e6:d7:2b:3b:3c:
d2:b9:4e:98:4d:6b:f3:e6:60:b8:30:cd:03:eb:fe:
5a:d3:8c:47:4f:f0:54:9f:f0:8d:a1:6e:5c:37:c1:
d1:d3:06:a1:bc:d0:22:7d:f7:f5:c6:c4:85:91:87:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:2A:87:40:DD:06:50:94:26:4F:D6:C8:36:DA:FA:FB:7F:10:3E:97
X509v3 Authority Key Identifier:
keyid:D5:58:5A:2E:08:FE:44:3C:E7:FD:0C:BF:40:6F:7B:9A:DA:2A:7C:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1VhaLgj-RDzn_Qy_QG97mtoqfMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1356cf-ab79-4c69-9e55-628400671d0e/1/1VhaLgj-RDzn_Qy_QG97mtoqfMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:99:2c:30:67:21:7c:eb:e3:90:99:53:fb:2f:23:b9:ad:a3:
ba:ad:2d:a2:31:bd:0c:09:3d:22:7d:04:f7:b6:9a:90:bb:f3:
75:8d:19:93:30:5d:eb:0d:00:74:77:b4:03:68:be:db:c8:9b:
68:ba:e9:08:10:6a:0f:3e:54:14:bd:c9:7b:d9:a7:55:9c:3b:
71:55:00:d3:13:05:bf:42:d3:64:5a:c1:02:7d:70:f6:54:3e:
f5:7e:22:b5:d0:5e:58:dc:8e:fd:fa:59:94:37:dd:68:12:e7:
76:01:a4:b0:f7:aa:36:01:3a:4c:67:96:35:ef:9c:48:5f:fa:
46:5b:b1:b7:27:d7:e5:da:65:35:c0:26:ff:c4:c8:e3:91:f2:
8b:f6:3f:41:bd:9a:83:46:09:f0:f4:91:80:41:59:ae:4a:7d:
8b:18:04:d5:13:b4:5e:60:86:f6:6f:d2:5c:ad:b2:c4:54:4c:
88:06:7a:70:ce:f8:52:dd:b0:38:74:c2:75:69:10:57:84:17:
c4:d3:5c:01:66:c2:f0:10:80:eb:36:37:f3:d4:63:5e:d0:c2:
2a:b5:ec:50:82:0d:31:47:d5:97:60:59:e0:df:66:8f:1e:3c:
0a:8c:66:a2:5c:f4:db:55:87:35:10:c8:ae:c5:c5:d1:1b:24:
cf:45:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:03:12 2025 by rpki-client