Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: PrMEhYsbkkLUwZnCTm8UrM5pQ6zgGNmPiWg3BAPFUl0=
Subject key identifier: E9:13:36:A3:92:5D:AB:C5:63:27:F2:1F:B8:87:13:3E:5E:37:F6:0B
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 019A503E394BF5C7C50FE5585FA536BC658F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 064D
Signing time: Tue 04 Nov 2025 19:00:46 +0000
Manifest this update: Tue 04 Nov 2025 19:00:46 +0000
Manifest next update: Wed 05 Nov 2025 19:00:46 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: Kfq3tB3mYPJofw9bJX6huFnYhUhnapRFmSfM1ZKTnN4=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:39:4b:f5:c7:c5:0f:e5:58:5f:a5:36:bc:65:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Nov 4 19:00:46 2025 GMT
Not After : Nov 5 19:00:46 2025 GMT
Subject: CN=e91336a3925dabc56327f21fb887133e5e37f60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c5:b8:8e:a3:ca:6d:a9:4d:32:af:0d:e2:78:
21:b8:ca:c3:31:f5:d7:26:64:a5:9f:96:64:c9:09:
ad:d0:5a:82:24:2f:b8:20:84:79:b6:38:9b:75:58:
0c:b7:75:89:b8:a6:3f:9a:3c:15:c2:73:84:f5:38:
05:1d:bc:22:27:87:ea:7d:dc:c7:ca:de:ce:a7:84:
a7:68:f4:de:a5:ab:06:cc:62:f7:59:5b:b0:16:87:
6f:0e:fe:37:81:d7:04:e7:af:ea:62:97:86:5f:b1:
0a:bd:d1:96:d9:f8:c2:2c:44:12:b9:c9:bf:78:f2:
c6:f2:44:bf:c3:54:ac:7c:cd:45:91:be:bd:19:0e:
6b:49:34:99:d0:ce:67:0b:ff:83:89:f8:c2:dc:af:
15:38:5a:90:de:c9:a5:54:fd:ad:c1:03:bb:05:51:
85:0f:35:b4:63:f3:69:3c:f1:0e:94:35:4c:2e:57:
d6:1a:b9:b3:58:ed:80:a3:b9:c9:94:42:36:06:21:
33:2e:61:10:f6:c3:e2:d9:e3:dc:f9:46:70:45:7f:
28:6f:1c:4e:5c:9b:76:b9:ee:78:64:80:01:ca:bf:
fc:a9:9c:47:22:5f:dc:18:1a:d1:91:46:c9:bc:f0:
ac:85:5a:75:74:f1:b9:2e:50:76:da:92:3d:65:3d:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:13:36:A3:92:5D:AB:C5:63:27:F2:1F:B8:87:13:3E:5E:37:F6:0B
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:2a:02:00:a1:35:41:c9:96:0b:19:7c:f6:a2:8e:69:1e:ff:
3d:06:37:69:a0:bf:88:20:b9:9e:ee:58:51:e6:2c:59:37:1f:
86:b1:9d:af:60:6d:f2:0e:6c:2a:16:5e:33:14:0e:16:fd:63:
4f:2e:5c:a3:94:1d:80:a8:59:51:4b:3c:de:0f:b6:a6:6a:60:
0e:f3:b8:eb:b4:1b:db:8b:09:be:11:bf:26:a2:6b:a6:59:1a:
9c:ba:3d:95:86:3b:1d:d6:b5:13:6d:02:0d:41:3d:e1:59:1b:
d0:2c:95:9f:e1:fc:0a:8e:b5:5f:7e:67:5d:f3:d9:11:a5:34:
79:39:c4:53:69:6e:74:6d:6d:68:a9:7c:f3:4d:1e:eb:ab:c6:
bc:36:c8:60:53:24:6e:59:0b:37:f2:6d:b5:dc:32:8e:67:31:
ff:ef:1e:c7:fd:a1:bf:0b:2a:cf:a1:8f:5e:a8:8a:91:d3:37:
ad:fc:94:2c:12:12:b2:60:1b:49:40:30:d6:d8:2f:8e:f7:c1:
60:a5:4e:8d:11:66:2e:63:e5:b0:72:f8:12:15:0c:e6:f2:d0:
f0:b1:bd:51:15:eb:c2:fa:86:aa:c0:c7:c9:99:70:37:c1:1e:
80:06:d9:ac:92:af:91:e4:fc:c7:48:df:99:ba:c0:11:3c:42:
10:c4:48:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:08:12 2025 by rpki-client