Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: kYJWcNqfgVwbKbpgyRwt/QomNY4Yj7w+6qnVj0VO+/M=
Subject key identifier: 36:F2:BA:F0:E3:00:F6:29:47:1A:43:DF:97:C2:31:0E:91:86:73:FE
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019A5119E859C678BD870F9F599C99F3479B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 06EF
Signing time: Tue 04 Nov 2025 23:00:43 +0000
Manifest this update: Tue 04 Nov 2025 23:00:43 +0000
Manifest next update: Wed 05 Nov 2025 23:00:43 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: h5KHY7918FGwb6BdQ4suWRmiN16mywxrWVgkff8tXSE=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:e8:59:c6:78:bd:87:0f:9f:59:9c:99:f3:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Nov 4 23:00:43 2025 GMT
Not After : Nov 5 23:00:43 2025 GMT
Subject: CN=36f2baf0e300f629471a43df97c2310e918673fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:76:2b:4a:ff:f8:5b:d4:c2:b8:a9:33:38:59:
bb:58:8a:b5:b0:7c:5a:20:ec:dc:4d:81:d0:68:29:
e2:b7:d4:13:d1:1c:4e:7a:9d:e4:4f:4f:bf:8e:04:
e9:dd:1a:aa:78:b1:ed:15:32:18:e4:50:4a:dc:fd:
81:32:f6:70:65:e2:43:67:b7:57:3a:51:63:65:40:
87:00:e1:41:03:00:5a:c9:18:8b:ca:97:16:f5:03:
13:27:72:13:23:2c:2a:5a:20:6c:fb:5d:fc:90:ea:
78:9c:67:81:37:cb:49:7f:4b:2d:40:28:1d:49:1f:
8d:d5:d1:91:e3:aa:22:25:86:51:c5:8c:a8:ce:fe:
80:74:d6:fe:f0:ec:29:ab:6a:89:ea:da:63:a3:5e:
d6:c5:03:6a:e8:c3:c9:8d:2e:17:15:70:d2:0f:1e:
33:9f:ce:c0:b9:a9:39:2d:a3:6a:6c:4e:38:96:ac:
5d:49:8d:f6:c8:e9:97:cd:b7:0c:9f:97:65:62:28:
86:47:51:f1:ca:f0:f4:ae:aa:53:ee:b0:9b:b2:41:
aa:2e:74:ef:ef:23:0a:56:5f:8c:2e:26:00:90:49:
0a:31:3e:26:81:eb:02:86:4e:de:7c:cf:fc:62:e5:
9f:cb:da:60:98:ff:40:9d:b3:c5:ae:66:42:54:dd:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:F2:BA:F0:E3:00:F6:29:47:1A:43:DF:97:C2:31:0E:91:86:73:FE
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:33:21:e4:fe:2f:64:ec:72:89:2f:e8:7d:60:43:37:ed:89:
8b:d4:e6:7c:20:d8:46:51:31:51:67:4d:68:9a:b0:38:58:78:
c8:f1:de:86:a6:85:ec:59:b7:86:8e:ea:41:ee:40:bc:92:f5:
04:e3:7e:3e:3a:2a:af:9c:8f:d2:93:0f:e8:f8:68:00:0e:3c:
44:1c:5f:46:6b:b6:b8:7c:e9:a5:e1:e7:ed:58:11:9e:fe:05:
dc:67:b5:a1:c6:73:b0:3b:2d:a8:d9:53:2a:03:eb:1f:2a:21:
cb:e2:28:5a:cd:64:1f:2b:e2:00:c0:de:5f:b2:44:6c:cd:16:
4c:9b:59:a3:7e:7c:bf:d4:ac:75:11:40:bb:9c:83:88:91:ef:
c8:f3:78:1a:88:82:c6:db:92:90:b0:b8:c5:f3:29:98:a4:3c:
5f:e1:fb:3d:49:d5:a7:e6:cb:96:3f:f1:8f:cd:47:14:27:09:
69:52:8c:c2:23:43:ac:22:97:c4:c3:c1:dc:2b:a5:be:c7:58:
58:35:a5:d7:37:81:e2:d6:e9:f6:b1:02:e8:34:6b:5a:14:c3:
4b:d2:8d:e9:8e:70:2a:88:6e:76:59:09:f3:99:20:a3:ad:e5:
70:2b:6d:9e:d5:7a:f1:9c:f2:f3:4f:14:d4:4c:03:e4:4a:40:
79:f5:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:19:06 2025 by rpki-client