Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
File: 1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json)
Hash identifier: 205AP40DkVDDkZPtfpHp34Q2ER77td1184PAo64HdQA=
Subject key identifier: 1E:7C:3B:BD:ED:E5:7A:80:C2:BD:9A:5C:A3:CB:87:23:89:2A:C7:A8
Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Certificate serial: 019A5263464DA070BE66C19BB7FBBF6A0F2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
Manifest number: 54
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: lqv/YUMHOpnrFo1nDuECfqk1K/SURW42qBOafhVHUBc=)
2: 2WniE5dL7byWUDCeGxHoMJMqczE.roa (hash: IjkZ5kKZt7FJQZkAKdTzI1e8SsDRi0qw3ixu7BVqjpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:46:4d:a0:70:be:66:c1:9b:b7:fb:bf:6a:0f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=1e7c3bbdede57a80c2bd9a5ca3cb8723892ac7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:35:2f:e3:b4:f3:c0:13:31:04:17:f8:d3:46:
26:80:40:4d:df:78:f8:73:b0:15:a7:2f:a4:77:bf:
cc:0f:6b:e0:b6:0a:10:e5:8b:80:59:f6:1b:11:83:
93:56:75:4e:74:19:84:25:7a:28:fc:e5:ef:5a:36:
3a:77:4b:50:0b:23:d6:c3:7b:19:40:c6:2c:dc:04:
94:b1:d9:cc:2e:82:33:71:c2:be:d7:24:93:b6:7e:
13:a0:a8:c8:0d:a3:f8:07:f0:b5:e4:a5:5a:1c:2d:
a7:3b:a8:28:d3:b9:46:ca:cf:ae:26:91:45:42:fe:
7d:70:30:66:e4:de:60:1c:68:2f:72:a5:3f:e7:d6:
01:ee:e2:80:60:38:ec:c3:b7:e6:9f:83:f0:f9:51:
a5:0e:c1:5b:c0:f7:e1:c4:0b:0a:d0:f7:8a:a4:ae:
6b:a2:8a:65:6f:ca:c2:4e:a5:c4:9a:9c:f7:88:82:
a2:84:4e:bf:83:c4:f5:f6:bb:a4:80:3b:86:2d:14:
e7:ff:bf:d2:01:8a:5e:a2:72:86:5b:20:7d:c3:5d:
0f:b7:78:3a:6e:b9:9c:fd:65:4b:a9:f2:4b:7f:3b:
34:6f:ad:86:1a:42:a9:8d:71:bf:40:ab:54:5a:b5:
96:d9:d2:4f:8e:cf:db:e8:35:4a:8a:4c:37:43:13:
8c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:3B:BD:ED:E5:7A:80:C2:BD:9A:5C:A3:CB:87:23:89:2A:C7:A8
X509v3 Authority Key Identifier:
keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c4:bf:e5:6e:93:cc:31:b4:da:4e:3b:2a:0a:f7:4a:12:7f:
00:88:6c:11:f6:f4:0f:17:e9:a0:1e:aa:66:3c:3f:24:e7:0b:
d8:44:7e:81:e9:ac:5b:8e:57:a6:f8:81:5a:35:27:4e:0f:94:
e1:89:14:8e:b8:fc:81:6a:d2:4f:b2:c2:f9:7e:cb:67:d7:3f:
5e:9b:c8:6b:1b:38:0e:a5:be:2a:f5:00:b9:a9:7a:c7:1e:49:
cd:b7:54:65:0b:88:8e:d2:49:ac:67:1e:11:d2:c5:e7:0a:d7:
f9:74:0e:53:cd:ca:eb:2b:e8:25:47:f6:3a:f4:cc:ef:f4:81:
09:f4:b0:31:76:5a:9a:b2:9d:7d:0d:c8:89:1e:5c:9b:90:51:
e1:af:34:84:c5:d9:3e:13:3c:16:94:5c:f7:2c:59:ee:e5:d5:
45:33:a4:e6:3b:67:aa:29:af:76:e3:b7:8b:ab:5e:3e:1f:73:
e0:eb:6b:46:ff:4e:93:af:4e:57:e1:57:d7:6a:bd:51:c0:a8:
05:b5:11:35:f2:d9:80:07:f3:b8:6c:33:19:cf:d5:00:b4:6f:
11:ae:25:ba:73:b2:06:3a:b6:72:c6:97:e5:96:19:9f:2e:39:
43:d9:61:ca:19:c5:58:dd:91:de:20:4f:c5:87:0c:9d:2c:95:
96:77:da:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:24:30 2025 by rpki-client