Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: 7iHR0shWYHKyjKja2/57lISHOKDcwNyi8aHYUPg4fBQ=
Subject key identifier: A1:74:51:AE:AD:F9:E0:7B:00:CA:A6:2D:7E:71:52:7A:70:07:3C:D5
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 019A4DE19AF8B8487238E0762F966EB634DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 08:00:22 +0000
Manifest this update: Tue 04 Nov 2025 08:00:22 +0000
Manifest next update: Wed 05 Nov 2025 08:00:22 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: +RFPstvr9/u7fX3KdKgN9bnwMYqfJobQZ9hNdLLsHkw=)
2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:9a:f8:b8:48:72:38:e0:76:2f:96:6e:b6:34:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Nov 4 08:00:22 2025 GMT
Not After : Nov 5 08:00:22 2025 GMT
Subject: CN=a17451aeadf9e07b00caa62d7e71527a70073cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f4:ff:93:14:a9:f9:7c:53:29:36:6a:ef:f1:
29:fd:99:b9:12:d3:0a:3c:61:cd:89:f6:33:4c:6f:
33:8d:54:97:25:35:8d:1e:38:1e:92:8b:86:e4:2c:
54:6d:1d:f0:0c:05:40:c3:bd:b7:e3:8d:e6:1f:01:
e2:ff:b1:1b:02:31:06:a4:6e:14:19:8c:c0:12:cb:
df:bc:86:46:60:d7:82:1d:b2:70:86:cb:b3:2b:19:
22:cb:18:6d:b1:52:0b:0d:fd:74:0b:a7:30:a7:c1:
29:46:8a:f9:02:be:3a:c8:39:86:6f:c1:7f:cf:3c:
c7:83:e2:a0:8d:e0:33:67:a9:c4:ed:b9:09:8f:1f:
0f:31:85:85:6b:ea:20:60:dc:f2:1d:91:f9:e6:83:
1e:26:bc:72:ea:d9:6c:f7:54:31:be:62:2b:d5:3c:
ad:0d:71:d1:b6:87:86:6b:7b:b2:4f:8f:ed:84:f9:
98:77:6f:a3:1c:ae:d5:48:4d:9e:ae:96:a6:dc:e4:
c2:d4:40:10:d7:4d:11:2e:df:53:75:75:b6:50:76:
fa:9f:f1:32:18:9c:36:91:96:04:f7:f0:c3:30:09:
55:97:2d:e2:10:ab:86:1c:d6:10:ad:12:29:7a:cc:
0a:2b:e4:55:7c:de:4f:39:19:e4:68:7a:4f:ee:05:
75:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:74:51:AE:AD:F9:E0:7B:00:CA:A6:2D:7E:71:52:7A:70:07:3C:D5
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:2c:c4:d1:e8:74:5a:fd:bb:ea:4a:4c:79:5f:09:90:4a:14:
2e:fb:70:44:bf:43:e4:eb:41:69:ab:f5:3b:df:81:46:3b:85:
76:de:a4:a1:3e:1b:c4:c7:64:89:67:f8:a8:1a:55:d9:17:6c:
db:a5:ab:29:c3:5a:70:3a:a1:6d:9a:93:0a:37:10:4b:85:5c:
91:a7:51:f8:84:5c:c6:f2:99:c4:d9:5a:9f:a1:db:80:d1:ce:
ea:19:c7:96:7e:66:38:69:1c:b9:40:10:e6:b8:c7:15:df:52:
af:68:96:f2:a7:15:66:a9:7b:f9:8c:c6:41:58:5e:b6:45:2a:
1e:0f:48:27:ff:b2:0f:70:42:a7:ba:81:c9:f9:d4:52:32:a0:
45:ef:71:91:96:71:a1:f8:87:ae:15:64:e2:b6:f4:62:60:c0:
31:f8:80:c3:a8:68:2a:64:fd:27:d3:5f:06:a6:a2:b7:f6:82:
a2:5c:ce:e5:81:54:c3:49:3f:a9:e0:2a:0b:fc:59:b3:4a:98:
64:52:68:07:30:0d:9f:b6:66:e9:66:b8:01:cd:31:8b:f1:0f:
da:a9:21:7d:35:45:9e:8e:84:5b:fe:67:5e:34:96:67:58:80:
b8:26:b0:2d:a1:ff:4a:1c:de:86:7f:61:37:17:39:0c:c7:55:
f5:f2:05:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:45 2025 by rpki-client