Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
File: 1kgpREOu0W0GuGrxT1pfClCDd0o.mft (raw, json)
Hash identifier: KzDHFuDhuf9evCZ6NMq6ae39vF55FCvLnrBOE6g94Uk=
Subject key identifier: 36:27:3E:BF:6E:A7:BB:D8:12:8A:40:2A:3B:0D:8C:A9:3E:29:07:8C
Authority key identifier: D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
Certificate issuer: /CN=d648294443aed16d06b86af14f5a5f0a5083774a
Certificate serial: 019A4D739B0B811EF58CF8942B23A9C04496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 06:00:13 +0000
Manifest this update: Tue 04 Nov 2025 06:00:13 +0000
Manifest next update: Wed 05 Nov 2025 06:00:13 +0000
Files and hashes: 1: 1kgpREOu0W0GuGrxT1pfClCDd0o.crl (hash: dMZWvLTrY4fBSLCInA4IzuvldCDChgr1aYng45d9+ZM=)
2: HUiYQLYoRn-P8-AKIUmGnSk_fUQ.roa (hash: ozdi5qHnRcow/nH1EVH0214AE7vAhAxmdAJcuT+IzE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9b:0b:81:1e:f5:8c:f8:94:2b:23:a9:c0:44:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d648294443aed16d06b86af14f5a5f0a5083774a
Validity
Not Before: Nov 4 06:00:13 2025 GMT
Not After : Nov 5 06:00:13 2025 GMT
Subject: CN=36273ebf6ea7bbd8128a402a3b0d8ca93e29078c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:d4:96:4b:01:96:1b:ed:07:37:ca:ee:4d:
b7:d5:d3:4d:b5:c6:90:8d:fb:76:31:f4:2f:e6:3b:
03:3c:ed:e7:19:01:c6:a5:b5:04:ef:fc:23:3f:df:
7a:a6:a9:d9:86:74:d6:c5:59:2b:33:4b:50:2b:7e:
1c:0f:14:d1:b2:94:e3:a3:36:a9:43:2a:e2:a8:d5:
43:c4:c2:c8:cb:3e:6c:34:dc:4a:8e:28:40:95:01:
99:62:4a:22:4d:f0:65:73:4a:37:d8:af:0c:b3:69:
b0:fd:94:21:80:f7:ce:ee:58:03:f1:5f:2b:45:84:
30:50:dc:e8:0f:bd:0d:67:a6:fa:c2:14:dd:b1:39:
46:74:41:c9:04:77:b9:82:31:06:8b:7f:1e:a6:10:
b0:f0:64:af:49:38:47:49:1f:29:20:36:45:6a:94:
c5:2b:bf:88:f4:7d:7a:0d:a5:c1:c0:93:d1:89:66:
d5:3d:0c:2c:28:72:31:58:94:da:9d:a1:63:f6:ac:
52:0b:c3:b6:ff:a4:54:67:de:fb:fd:09:e7:4d:66:
55:56:82:e1:8f:16:12:20:ad:34:4d:f0:45:26:7b:
8d:85:ba:2f:7c:63:4d:af:19:75:b3:c3:d1:9c:3c:
94:5f:37:38:7a:fc:24:ff:2f:8b:46:aa:55:f5:8d:
1f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:27:3E:BF:6E:A7:BB:D8:12:8A:40:2A:3B:0D:8C:A9:3E:29:07:8C
X509v3 Authority Key Identifier:
keyid:D6:48:29:44:43:AE:D1:6D:06:B8:6A:F1:4F:5A:5F:0A:50:83:77:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kgpREOu0W0GuGrxT1pfClCDd0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b587e9-33a9-4a86-8cd9-e57cc81f5233/1/1kgpREOu0W0GuGrxT1pfClCDd0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:73:ae:5a:e3:78:c9:c2:f1:00:82:4d:75:50:74:c5:fd:91:
41:78:d7:d2:e9:08:f8:c4:90:57:21:ca:16:d2:f1:d8:cf:36:
33:01:50:05:55:2d:50:25:87:08:03:34:87:b2:31:a9:23:9e:
ff:ff:e3:fe:97:a9:a3:de:a9:cf:81:25:b6:06:10:ce:28:f4:
01:98:f4:38:5a:b2:51:fe:52:35:0b:31:90:57:c4:08:88:50:
72:48:28:cc:f9:c0:bb:ba:78:e4:9a:1e:cb:ed:c0:e1:97:84:
1c:ad:6d:64:37:db:96:38:f9:d8:46:3b:c9:ce:37:59:23:30:
f4:e4:ba:70:e4:50:14:ee:ae:20:24:a5:fc:b2:fb:61:74:3f:
79:84:17:66:05:16:c9:1e:0c:b3:6e:a4:9b:92:5d:8f:a7:1b:
e5:c5:7a:86:b5:45:d5:e2:74:99:19:33:f6:ef:d0:18:78:b1:
22:65:5e:3a:42:b0:b1:2f:50:92:4d:fc:14:2a:f1:98:be:25:
5d:e9:84:3f:5d:e2:6c:7a:89:94:92:bd:7a:98:a1:ab:7d:9e:
49:fb:ef:d1:81:94:29:d8:f1:22:61:65:1b:e4:e6:d4:13:b0:
ee:38:17:40:79:40:e4:5e:87:d9:f5:68:d6:55:f4:a2:ee:4e:
f4:91:21:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:13 2025 by rpki-client