Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
File: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft (raw, json)
Hash identifier: QI9BeLAHjY7yA54KoOMNilpwPUwQONz6Vcuz/1GgRLc=
Subject key identifier: 82:01:E7:BE:6E:72:37:BF:76:E4:D0:DC:CE:A4:76:EF:8E:55:FD:C9
Authority key identifier: D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
Certificate issuer: /CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Certificate serial: 019A5375F5196D24BBF2D963D1A8E9C9E04B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
Manifest number: 0363
Signing time: Wed 05 Nov 2025 10:00:30 +0000
Manifest this update: Wed 05 Nov 2025 10:00:30 +0000
Manifest next update: Thu 06 Nov 2025 10:00:30 +0000
Files and hashes: 1: 1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl (hash: 0Eox8mgIUQmSYCgfbFM9RGP1E9altnx6wgmQqoMgcqI=)
2: 7MLQXQoB7nGQ9BAPNdo9KSMuY8Q.roa (hash: qybqPEfeMgg3CNavO5wY4/V9s/QfeIPfINjmuYmoUy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:f5:19:6d:24:bb:f2:d9:63:d1:a8:e9:c9:e0:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5de43cd1f8af45c689867d9f5a881a2aec34b31
Validity
Not Before: Nov 5 10:00:30 2025 GMT
Not After : Nov 6 10:00:30 2025 GMT
Subject: CN=8201e7be6e7237bf76e4d0dccea476ef8e55fdc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:a9:48:05:66:29:fa:c3:40:c1:41:4e:0a:
0d:70:a5:0b:75:4b:5c:da:d8:aa:9f:e7:8e:4b:43:
86:7f:2b:2d:0c:c8:30:9f:97:a4:ce:92:ef:85:d6:
c5:f2:44:9e:73:34:c7:fc:22:52:1d:31:8f:a6:89:
5a:13:3a:8f:40:f6:f4:d3:e1:ec:c5:88:c1:88:3c:
b2:57:a0:f0:a5:e2:06:9c:6f:00:c7:70:eb:ba:b1:
94:a5:74:a1:e6:8d:e2:b2:0b:f8:ef:11:05:17:2f:
5d:1f:ca:90:88:39:10:de:c0:46:09:a2:f3:43:97:
6e:bc:ab:6c:38:96:70:90:2a:f1:b9:e7:66:4f:8d:
db:7d:60:61:25:07:b3:23:49:80:b7:ff:13:43:fb:
c3:83:79:98:27:2b:58:37:3d:41:cf:09:d8:42:ef:
78:6b:e8:19:dd:09:ff:02:11:17:da:a8:ad:99:de:
18:05:96:93:9f:9f:96:d9:6c:8c:b1:87:43:cb:0c:
9d:b3:25:84:31:b0:ca:63:ac:e8:5f:a5:c8:72:b2:
e7:c4:5a:0f:c2:a4:29:79:ca:ca:b0:28:d3:10:be:
91:a7:4a:3d:c6:ee:74:7e:e5:69:b0:f0:a7:1e:5b:
c9:4f:64:54:7d:c6:da:6a:88:d8:46:0b:74:4c:5b:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:01:E7:BE:6E:72:37:BF:76:E4:D0:DC:CE:A4:76:EF:8E:55:FD:C9
X509v3 Authority Key Identifier:
keyid:D5:DE:43:CD:1F:8A:F4:5C:68:98:67:D9:F5:A8:81:A2:AE:C3:4B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d5DzR-K9FxomGfZ9aiBoq7DSzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1608b0-e7ca-4b3b-902f-4d0a7ec07786/1/1d5DzR-K9FxomGfZ9aiBoq7DSzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1b:40:a8:ef:b7:1b:4d:82:41:38:b1:5b:f6:10:a5:7e:63:
de:5b:f5:ec:5e:c0:1a:d7:84:69:ef:ce:b6:ba:5c:d5:39:ea:
2f:8e:0a:b1:7c:d8:77:7d:82:7e:0d:45:60:ec:36:50:55:b7:
c7:1b:b5:5e:e4:d4:ca:6d:bd:0c:3b:01:00:75:01:f8:a1:70:
86:7f:d3:8a:72:5c:e1:17:1a:25:32:d0:6c:ab:be:18:fc:2e:
a7:6b:50:a4:ae:53:e4:75:e9:11:d8:51:cf:d0:a2:7b:f0:37:
0c:09:60:30:a8:06:6c:d3:24:ef:1c:6a:f5:64:97:82:7c:35:
37:7b:af:62:06:ca:78:3e:65:9b:42:9a:6f:cf:fe:53:fb:d3:
8a:6a:f5:11:c0:94:c8:54:78:ac:c5:d3:21:d7:64:50:46:ef:
08:47:a8:78:d3:a3:40:92:e0:87:a9:84:3b:1c:64:06:92:d1:
9d:2b:a1:6f:9f:db:11:37:05:3b:08:c0:81:43:60:ef:5c:99:
4b:ca:ba:36:44:c4:d4:5d:00:9d:26:23:4a:45:60:43:2f:07:
88:62:1d:41:73:de:62:ee:84:a8:71:f9:cd:bb:17:50:d8:29:
a3:21:e2:d1:e5:81:d8:5f:33:9a:c1:5c:a8:11:6b:a7:b0:07:
83:3b:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:39 2025 by rpki-client