Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
File: 1-s9eHpKIhgeA0S40pK07QNmEg_w.mft (raw, json)
Hash identifier: FKxeaZBhaIkUn61AzvrKYSW6z9lO7aUpg13hQasFcgs=
Subject key identifier: C1:88:6A:B1:C7:2C:CA:80:00:4A:94:A3:8B:7D:B8:39:4F:81:EF:4C
Authority key identifier: FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
Certificate issuer: /CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Certificate serial: 019A4D3CF0104406D7DF7ECCD5B3155B626B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
Manifest number: 07F5
Signing time: Tue 04 Nov 2025 05:00:30 +0000
Manifest this update: Tue 04 Nov 2025 05:00:30 +0000
Manifest next update: Wed 05 Nov 2025 05:00:30 +0000
Files and hashes: 1: 1-s9eHpKIhgeA0S40pK07QNmEg_w.crl (hash: mXnRDkLBCPREgJC+GN75iSBsP0eJ5oWS4vSDKGpeiXQ=)
2: goyOFyNzCSnjNoSGUslWBJblZKU.roa (hash: gOANPYh3QzN79F/MQE5xUnJrm2gWdrunUVxAKHrrHlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f0:10:44:06:d7:df:7e:cc:d5:b3:15:5b:62:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf5e1e9288860780d12e34a4ad3b40d98483fc
Validity
Not Before: Nov 4 05:00:30 2025 GMT
Not After : Nov 5 05:00:30 2025 GMT
Subject: CN=c1886ab1c72cca80004a94a38b7db8394f81ef4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:51:8b:17:87:c2:f8:77:5c:0c:eb:d6:f5:
ca:22:f0:62:60:5c:76:68:a7:44:a5:b9:67:4f:23:
ac:a1:7e:8b:4a:eb:38:75:30:49:a6:a2:44:35:3a:
ab:d4:f4:07:d2:a9:d2:e1:6b:85:17:c5:f1:8d:ed:
11:83:5c:ba:ba:25:ce:bd:48:ea:74:cb:36:9a:e3:
58:1a:1e:c7:3b:61:9f:ac:69:e6:9f:c1:d5:bf:16:
87:84:d2:12:7c:e0:58:52:db:0b:8c:15:6b:85:b4:
27:da:72:99:67:8f:fd:2e:7e:78:31:45:2d:70:15:
af:25:78:7d:fe:65:b3:af:0f:df:f9:03:8d:b0:5f:
27:86:52:73:b4:7f:19:5f:b0:5d:b5:8c:f5:02:e6:
76:fb:b6:07:4e:5c:8b:42:0b:ba:42:c5:df:bc:a8:
f6:37:35:2d:ac:0b:20:25:c9:99:70:7c:f0:c4:bf:
13:aa:ce:c6:9c:ea:7e:22:8e:fb:58:a3:bd:20:e4:
b4:fa:b0:80:09:c0:bc:7a:f1:eb:29:9d:94:4f:71:
51:e6:a9:b6:8c:3a:5e:83:a0:e1:2f:94:a3:9c:a7:
59:bc:a7:df:13:47:e3:fe:c0:db:97:b1:2e:cc:ab:
0a:ce:79:0f:66:c5:52:56:07:7c:9e:54:ba:76:ad:
6e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:88:6A:B1:C7:2C:CA:80:00:4A:94:A3:8B:7D:B8:39:4F:81:EF:4C
X509v3 Authority Key Identifier:
keyid:FA:CF:5E:1E:92:88:86:07:80:D1:2E:34:A4:AD:3B:40:D9:84:83:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s9eHpKIhgeA0S40pK07QNmEg_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/39c622-4867-4fb3-8ef7-5d27f9dbed66/1/1-s9eHpKIhgeA0S40pK07QNmEg_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:5c:9b:b6:48:3c:db:a7:e6:65:ae:df:2b:74:85:83:04:43:
65:ae:b2:1e:6b:ce:d8:39:0b:9e:f7:02:d5:51:4e:55:76:50:
3c:4a:af:af:d1:d9:54:8d:a4:fe:53:6f:6f:9c:d6:38:29:d9:
af:c5:0d:65:22:89:04:43:0f:11:7c:5c:aa:5b:28:66:5f:5e:
c5:ff:3b:e2:d6:bb:84:14:69:0e:5a:5d:7c:49:a5:f6:43:64:
0c:ae:35:66:c5:2f:2c:be:7a:ee:37:7e:e8:33:d3:a5:03:d5:
c3:51:9c:fd:05:2e:4a:b5:3d:ea:f4:57:b1:5c:23:18:6a:09:
63:7d:8b:c7:c9:bb:8b:f7:97:35:c1:76:6b:54:a9:11:eb:b3:
88:09:42:46:ce:4b:8d:3e:9d:be:54:24:b1:b6:77:f6:56:5f:
ef:5a:53:2e:32:a6:cd:72:36:6c:a5:b0:25:41:a3:0b:c3:64:
71:04:be:74:03:e4:22:32:04:eb:16:42:9b:d4:84:e4:48:c4:
41:54:79:d8:e8:7f:80:b1:60:82:b7:f7:32:f8:a3:38:f8:4e:
7b:c2:be:3c:38:88:5c:9e:86:ac:12:e7:fb:19:e7:5c:7a:19:
2a:bf:11:fd:bb:d7:a6:33:b1:b0:d0:b3:b4:a9:bb:2b:e1:5b:
57:6d:37:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client