Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
File: 91sCopx2blsTs-sXapccEt3h1M4.mft (raw, json)
Hash identifier: 4aXP17Dn2ei0m/HJEeWc9QU6mXRA0ffXt/BhGUZHugQ=
Subject key identifier: 35:4D:FE:77:7B:69:C5:25:CC:F2:97:54:17:DE:98:2D:D0:85:9F:AC
Authority key identifier: F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
Certificate issuer: /CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Certificate serial: 019A4E190723556203143153DCB0075FFC61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
Manifest number: 1293
Signing time: Tue 04 Nov 2025 09:00:54 +0000
Manifest this update: Tue 04 Nov 2025 09:00:54 +0000
Manifest next update: Wed 05 Nov 2025 09:00:54 +0000
Files and hashes: 1: 91sCopx2blsTs-sXapccEt3h1M4.crl (hash: wG9b7pQ9lw9LRaX6tZfzjZgGajcaBcUuHuNvSkeGvgs=)
2: IKYkPycoZ16me6Kb0OaEhELdyLo.roa (hash: Um/+K1DsE/fHN8bVJfVKmH+mN7B9+NKyvrFzBu4jUT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:07:23:55:62:03:14:31:53:dc:b0:07:5f:fc:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75b02a29c766e5b13b3eb176a971c12dde1d4ce
Validity
Not Before: Nov 4 09:00:54 2025 GMT
Not After : Nov 5 09:00:54 2025 GMT
Subject: CN=354dfe777b69c525ccf2975417de982dd0859fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:f3:f5:81:1a:85:df:a9:d1:ff:e7:29:bc:
a3:31:b3:2b:ce:2b:4c:3c:99:4e:15:f5:cf:b6:70:
2d:a7:95:21:da:ba:ca:36:67:9a:8c:b7:fc:a8:9f:
dc:46:6f:2d:6c:88:c4:b4:08:26:ee:50:a4:55:de:
4a:bd:e9:b6:48:e5:16:d7:18:9c:2c:ea:3c:63:10:
14:67:1d:31:56:7c:1a:c8:99:61:bc:02:80:e1:b8:
5b:d4:fb:6a:9e:4b:bf:b0:b8:ff:5b:0d:cb:92:bf:
18:e2:a3:cf:84:89:1c:75:40:d2:ae:72:76:57:2b:
f3:08:59:7a:f8:c9:60:35:3e:69:e2:7d:cf:b4:81:
dd:e3:20:d0:71:3f:40:4a:bf:93:17:64:ae:e3:ef:
bc:4d:3f:25:f6:6e:17:72:a8:7e:85:12:80:e4:cc:
5c:0f:0d:a3:53:32:38:fd:b2:7c:37:a3:86:d7:1a:
41:e8:cd:45:fa:71:53:9d:4c:e9:97:1c:1f:b3:1a:
09:48:cc:69:04:61:6f:62:d6:bc:52:5f:b1:a9:b6:
8e:04:3a:c4:14:f0:74:db:ac:7f:7e:e9:12:5d:cc:
df:94:49:ac:29:c1:51:70:e8:97:bb:44:14:7d:f0:
f2:d1:bb:57:f5:76:91:87:c8:dc:b6:fe:1d:a5:2f:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:4D:FE:77:7B:69:C5:25:CC:F2:97:54:17:DE:98:2D:D0:85:9F:AC
X509v3 Authority Key Identifier:
keyid:F7:5B:02:A2:9C:76:6E:5B:13:B3:EB:17:6A:97:1C:12:DD:E1:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91sCopx2blsTs-sXapccEt3h1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/0a9ff2-7df8-43f3-a31f-bcdbb542cb5a/1/91sCopx2blsTs-sXapccEt3h1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:0c:10:bd:72:d6:91:37:3c:7d:9b:39:c2:be:98:86:22:52:
5f:5c:71:fb:50:9a:19:ad:06:22:c3:40:83:fa:b9:a1:87:4b:
0d:a2:82:78:db:05:06:16:81:a1:3c:52:83:1a:05:16:65:68:
8d:63:d8:fc:95:35:60:01:f7:ec:c8:66:2b:5e:6a:bc:00:a3:
ca:68:cb:87:5b:66:5c:18:16:00:26:8f:97:ea:7c:09:01:c3:
63:2b:1f:f1:f2:28:82:d1:e7:23:f6:db:fb:5d:c6:75:15:6d:
28:39:b2:30:a7:aa:4a:a4:00:35:61:24:56:7c:8e:3e:0f:a2:
36:d6:a7:97:08:84:63:f7:7d:25:7d:a8:c4:c3:06:a4:8c:fc:
4c:16:5b:7c:b6:ed:2b:43:45:f8:67:36:bb:40:96:ad:2c:a2:
51:72:99:97:2b:c2:0e:8d:c6:93:ba:6e:a5:ef:88:87:b3:ec:
3b:0c:b0:ef:57:ca:2a:35:e7:bb:38:09:4c:1f:6b:d5:5f:67:
d2:8a:7b:4b:91:69:6f:5d:cc:30:4f:3d:e9:c8:42:c7:5c:d2:
d7:47:d1:47:88:df:ef:33:03:2c:f0:09:af:bd:90:40:c6:0c:
62:17:6b:1f:83:6e:34:84:62:e9:44:ad:18:84:f9:a7:d5:93:
bf:ab:fd:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:04 2025 by rpki-client