Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
File: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft (raw, json)
Hash identifier: 6IB9EpmVCfSynP2ygwLdUmEm4TTahvvB+MmlDmI1LDs=
Subject key identifier: 2C:3C:2E:24:9B:2E:63:C2:6E:3C:F7:42:E0:B5:8B:65:09:73:CD:A9
Authority key identifier: F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
Certificate issuer: /CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Certificate serial: 019A4EF402D600A939A7AE316EB5D0FDE756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
Manifest number: 0921
Signing time: Tue 04 Nov 2025 13:00:05 +0000
Manifest this update: Tue 04 Nov 2025 13:00:05 +0000
Manifest next update: Wed 05 Nov 2025 13:00:05 +0000
Files and hashes: 1: 1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl (hash: lRbTU9gTalzriW6BCUoxWV37trgfazXSBt2yruJdyO4=)
2: QE0Nop6hH-ReZM2oUJr6dWTxh-o.roa (hash: MDrtXAxZplUH7/qxVqW6e+250Fu4R4SP6B723HR2u5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:02:d6:00:a9:39:a7:ae:31:6e:b5:d0:fd:e7:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e20f7d3a2cc95d9de6f4e334cb4b67922e70f5
Validity
Not Before: Nov 4 13:00:05 2025 GMT
Not After : Nov 5 13:00:05 2025 GMT
Subject: CN=2c3c2e249b2e63c26e3cf742e0b58b650973cda9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:62:4f:18:2c:2d:f6:eb:30:7c:d6:25:55:
61:5a:e1:c4:b6:aa:bf:53:50:fc:99:7e:f4:32:f8:
f5:36:cb:ee:e3:09:99:ee:c4:6e:79:7c:27:4a:c7:
0d:27:b3:87:c0:f3:d6:e9:24:9d:10:f5:d1:66:1a:
84:7a:26:7b:bb:5e:9c:87:2f:40:fa:8e:23:26:52:
5d:0f:8d:01:cb:14:4b:75:fa:d3:a0:b3:cb:c2:c8:
c4:06:39:f0:b5:c4:74:17:39:d3:a9:8d:72:c7:19:
89:90:7c:ee:0e:a8:35:6f:d0:97:95:a4:72:42:cb:
ab:d1:85:81:8c:9b:c4:08:39:d5:f7:23:38:d4:ac:
2f:52:41:b0:88:0c:0b:47:8b:a6:29:28:ce:c4:ca:
c4:12:69:83:80:19:be:90:23:7c:b7:3c:f2:b5:ad:
14:f6:79:52:a0:d9:13:32:0a:f4:d8:a3:55:df:68:
f5:7f:97:9b:65:56:d2:15:ce:64:70:7d:49:54:de:
a8:ff:80:c9:b8:aa:5b:4a:f0:43:02:ae:9a:4a:e1:
bf:15:b1:8f:fd:6d:2d:66:12:2e:bc:23:6f:0a:fb:
fa:fb:20:00:c2:8a:ea:8b:12:79:67:16:74:7c:ae:
9e:c8:68:1a:bd:de:64:66:2f:08:8e:9b:3b:cb:c0:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:3C:2E:24:9B:2E:63:C2:6E:3C:F7:42:E0:B5:8B:65:09:73:CD:A9
X509v3 Authority Key Identifier:
keyid:F9:E2:0F:7D:3A:2C:C9:5D:9D:E6:F4:E3:34:CB:4B:67:92:2E:70:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eIPfTosyV2d5vTjNMtLZ5IucPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7e7fce-4841-476b-84c0-a54eb8566bef/1/1-eIPfTosyV2d5vTjNMtLZ5IucPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:5c:2a:09:7e:64:99:10:93:6d:ef:61:af:d7:8c:d4:04:7e:
19:c4:e1:60:99:2a:f3:11:44:1f:b9:ea:52:db:3e:a6:18:55:
f4:6f:e0:db:15:dc:3b:cb:f4:be:a6:f1:f6:28:50:4c:84:e6:
66:91:fe:09:05:07:af:c4:93:9c:dd:3b:66:83:6d:1c:46:e4:
d0:57:e2:54:1a:63:91:e3:79:70:d0:f5:66:9d:f6:d3:bf:9d:
7b:75:b0:8c:ac:36:74:fe:d6:ff:1a:dc:c3:ed:14:f6:c7:73:
04:22:f6:64:79:b1:96:2d:9b:f9:5a:fc:11:62:d3:fd:85:ef:
20:5d:96:a8:3d:6f:8b:05:52:e1:07:5a:f5:a9:fb:4d:c3:42:
e8:28:96:f0:20:e6:70:f6:4b:f8:22:58:72:29:21:1c:73:3d:
c0:46:9e:8d:33:4d:96:d2:ec:fc:68:29:66:db:79:7d:5c:5c:
00:51:2f:cf:55:b7:61:df:4c:86:ea:e7:3c:26:c9:26:a7:d6:
4d:94:9a:17:3f:86:c4:4a:2e:76:74:fa:f9:fd:34:a9:80:60:
d4:a1:96:d2:41:22:7d:dd:30:76:35:78:63:d8:7b:a1:e7:39:
1a:16:1e:08:8f:8b:0d:31:83:05:1f:2c:d8:dc:c7:4b:a5:f1:
de:ce:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:25 2025 by rpki-client