Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: 9LNezUUuXObhG1LZQTIhlOHqJF+FUd6v8KPQIaZIOEE=
Subject key identifier: 02:A0:1E:B5:EA:28:A9:C1:DB:43:34:B4:A2:CE:79:9A:A3:EF:AF:7F
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 019A4E86818AF701BAB913E9C0D71C59C593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0BD3
Signing time: Tue 04 Nov 2025 11:00:29 +0000
Manifest this update: Tue 04 Nov 2025 11:00:29 +0000
Manifest next update: Wed 05 Nov 2025 11:00:29 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: eIe7Jckj+xFijwUvmMjS7IC7L6i5eqYZYUZta2zAM7c=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:81:8a:f7:01:ba:b9:13:e9:c0:d7:1c:59:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Nov 4 11:00:29 2025 GMT
Not After : Nov 5 11:00:29 2025 GMT
Subject: CN=02a01eb5ea28a9c1db4334b4a2ce799aa3efaf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ff:73:66:53:5c:f5:d2:32:89:b3:3b:38:ba:
5f:b2:0a:ae:17:4f:33:ae:82:1f:b1:4f:c1:6a:a8:
5e:ef:19:90:e7:b5:c8:9f:db:f7:de:85:df:22:82:
2b:77:df:9d:97:74:0b:79:41:df:42:e5:36:7a:62:
65:10:57:68:db:96:dc:ac:2b:13:d5:bd:d1:08:b6:
e1:b7:36:38:b5:7b:29:f7:a2:eb:7a:90:87:92:10:
e4:f4:ee:9a:9a:e6:f0:60:05:50:9c:35:87:45:7a:
57:e7:a8:96:1b:90:51:62:f1:4b:1e:54:3e:67:eb:
8c:6a:95:6e:a6:b1:52:21:b1:bf:30:9d:89:bd:81:
7c:8f:58:46:7f:74:95:ba:d4:bd:5a:44:80:84:4a:
6f:d4:29:f6:62:06:6e:52:41:34:43:8b:f7:69:d1:
d1:37:da:7c:ac:2a:7c:bf:36:17:11:96:b7:a9:e6:
04:1b:cc:29:ab:ee:e6:d6:3a:ed:96:45:4d:4e:31:
ff:57:d2:23:c8:9f:55:65:56:21:db:8c:8a:43:38:
5b:b9:3a:f8:c1:9a:6b:cf:7a:60:cb:ec:d7:7f:8c:
04:8f:f0:1f:a0:a2:23:84:dd:fa:19:fb:e3:06:f4:
84:59:2c:52:ec:32:2b:d6:a5:1f:85:4b:b5:8b:9b:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A0:1E:B5:EA:28:A9:C1:DB:43:34:B4:A2:CE:79:9A:A3:EF:AF:7F
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:6c:3a:31:b5:0a:b6:65:74:1e:0a:59:b0:4d:6c:b1:33:cf:
06:9b:96:61:9b:c7:b0:57:08:e6:21:20:53:86:8d:4b:d6:6b:
2a:d0:45:90:c5:60:df:57:24:5a:fb:6d:95:0d:43:28:86:0d:
78:0f:bb:17:8f:b7:40:b2:50:7b:66:82:c3:9a:62:71:96:e6:
cd:92:95:62:f0:7c:c5:ba:00:41:7c:47:d7:a1:8c:48:e2:ac:
7c:91:ee:36:51:d6:a5:01:ca:33:46:01:14:cf:47:f2:18:be:
3f:8c:8e:24:fd:46:6f:62:39:66:bc:8d:07:ff:2c:2a:8f:c0:
18:f5:b3:7b:d8:a8:52:5d:99:fe:49:4c:17:f8:86:0c:0b:6b:
d3:9a:60:96:51:49:14:5a:b5:f5:2a:f2:94:cb:28:81:f5:87:
71:b4:35:84:ed:41:4e:76:b8:8e:cd:56:9b:af:f1:61:6b:eb:
ec:7a:2c:65:df:97:93:70:ce:78:3c:34:74:65:3a:49:74:74:
a2:20:32:c1:ab:a4:1a:29:19:ba:b3:27:e0:ca:31:80:35:e6:
ce:85:6c:1c:f0:18:6d:b8:ad:76:f8:d9:c7:b4:ef:3b:14:84:
09:65:d4:7d:33:c4:98:92:b5:d2:42:5a:7b:1a:c5:a3:e0:ea:
7c:0f:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:40 2025 by rpki-client