Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: PkvwKn5FbV/cGJz6x4ruBb9F8UrGyySTaZW+T4b5AVI=
Subject key identifier: 50:EE:32:25:A3:35:7B:17:15:54:D1:92:90:73:96:09:4D:6E:2B:74
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019A51508DEAE92E2BA476BC0BFF631F7C52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 0556
Signing time: Wed 05 Nov 2025 00:00:24 +0000
Manifest this update: Wed 05 Nov 2025 00:00:24 +0000
Manifest next update: Thu 06 Nov 2025 00:00:24 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: uOJaNN+Rvic9zCAIwrRViVU/2cOArAhostQrXuKtZgU=)
2: zlH1YpMBnNZnNtFhgB3H0QDkGsY.roa (hash: YxbEBWdcoPz8a52GzX2VTy8310RPqgqc10/H2kW+jig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:8d:ea:e9:2e:2b:a4:76:bc:0b:ff:63:1f:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Nov 5 00:00:24 2025 GMT
Not After : Nov 6 00:00:24 2025 GMT
Subject: CN=50ee3225a3357b171554d192907396094d6e2b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ec:1f:8a:36:a6:27:f7:19:6b:6e:2b:4f:90:
ad:d4:25:01:ed:e0:37:ae:ac:5a:91:81:56:46:a9:
f6:c6:1c:0f:88:29:fd:91:65:88:dc:d5:1d:89:ee:
5d:7e:51:3b:47:42:df:fa:b7:d1:a3:93:74:7c:08:
29:f6:a0:b1:05:c2:35:15:27:77:89:cc:83:e0:eb:
e4:69:4f:6b:87:43:0d:e6:32:e6:65:38:e6:79:73:
1f:5b:7c:3e:a1:1b:96:d7:87:b8:53:98:bd:f2:07:
3a:d4:0d:14:36:48:8b:d6:f4:70:fd:0c:83:37:f9:
5c:e6:17:0e:f2:e1:14:8f:55:e2:28:dd:ba:da:2e:
50:43:4a:01:7b:f6:3f:12:71:f6:26:47:3e:48:b5:
c5:78:1a:65:c0:a7:3e:f7:7c:77:da:64:22:1c:4e:
5c:ac:35:92:e1:8c:e9:68:2d:a1:e2:e6:94:16:90:
7c:11:3b:53:49:b2:7a:33:17:95:4d:0a:39:99:4a:
33:78:9f:35:27:d5:31:cb:a7:49:c5:11:b7:72:13:
65:90:49:a3:54:f3:51:ec:06:9c:50:89:aa:1b:69:
11:8a:ff:3e:33:aa:5b:2f:e6:5b:06:85:6b:ca:7b:
6e:80:3a:0b:08:98:1c:36:e6:18:cf:d3:9e:95:c6:
56:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EE:32:25:A3:35:7B:17:15:54:D1:92:90:73:96:09:4D:6E:2B:74
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:49:4a:46:b8:f8:16:5e:27:ac:b3:8c:6a:f1:d5:8c:ca:36:
36:8f:d9:0c:35:f4:63:16:7d:ce:70:c5:32:a0:e5:f4:c5:1f:
80:ef:95:36:c3:09:63:01:ce:ca:08:3b:96:f6:6c:30:32:09:
87:a0:e5:dd:9a:de:b4:86:b9:1a:ae:23:3e:7b:35:f1:e3:da:
fc:12:4b:97:5d:24:78:de:f9:85:28:0c:51:39:3f:98:d9:ba:
ab:88:b1:b5:9c:2f:e9:98:c8:46:d5:a1:9b:ae:c0:0d:25:1c:
52:78:6c:26:21:37:65:40:d8:75:cd:3a:5e:31:1c:93:d6:36:
d6:2a:c4:c4:ce:68:5f:bf:29:6b:7f:58:5b:90:79:8a:9c:9a:
8c:24:60:52:5a:f4:42:50:77:fa:f3:b1:ff:27:50:ad:81:e8:
af:55:7f:1b:d1:51:7e:ce:ef:f8:3b:49:f2:4b:4d:60:51:b7:
ba:cd:ac:aa:48:bf:c0:32:b4:74:6b:34:c1:cd:23:a5:6d:15:
e0:2e:8c:b4:6a:bf:f6:af:c5:7b:32:5b:f7:2c:57:86:d1:44:
0b:b4:76:7b:57:d0:45:9e:10:2e:46:c8:a7:fd:d9:b6:68:71:
b0:06:c2:52:54:f0:5d:c9:34:43:73:44:00:d3:13:86:4e:d1:
ff:e6:84:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:01:26 2025 by rpki-client