Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
File: 1O219t5yQ2FIs1pZA38jNBUN2zY.mft (raw, json)
Hash identifier: hpiaBESJC+8ga/G0OMGjjgREIKBw1twIMflLe7jgCBY=
Subject key identifier: A6:7A:C3:D0:5E:E5:65:C8:67:34:C7:02:5C:E8:65:53:8F:57:8E:A5
Authority key identifier: D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
Certificate issuer: /CN=d4edb5f6de72436148b35a59037f2334150ddb36
Certificate serial: 019A4E18E79C815DCC563FA282E07C20CD29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
Manifest number: 169F
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 1O219t5yQ2FIs1pZA38jNBUN2zY.crl (hash: /UxuJ5yn4kVokgw9D+/ncfEXUQcUymCs2p9y+lhmivI=)
2: CUxoxoHUFgCcWdXLBL1XTZtblHU.roa (hash: nuVV0ajPUp0XSEkxw4hsRxKF9YmW1aG+8tY3rAw4VUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e7:9c:81:5d:cc:56:3f:a2:82:e0:7c:20:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4edb5f6de72436148b35a59037f2334150ddb36
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=a67ac3d05ee565c86734c7025ce865538f578ea5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b7:11:f4:eb:0a:9e:e8:c1:09:42:38:c4:c7:
a2:a9:b6:da:05:13:c4:33:4b:32:bb:48:91:68:56:
03:94:d1:49:77:9f:1d:a5:32:e2:11:50:c5:23:f0:
42:49:95:f9:c6:a4:b0:df:39:45:d1:ad:f1:c5:86:
cc:92:a8:57:d4:3b:da:fd:25:1d:6b:50:ed:6e:b5:
3d:32:9d:c1:ff:10:1f:ab:12:a0:fe:15:15:71:ac:
07:2d:05:67:1f:ef:f0:0e:e7:44:07:02:75:39:d2:
b4:30:27:3f:db:f5:3b:b9:94:07:1f:23:f1:0a:76:
e7:f2:90:13:dc:d8:2d:92:2d:71:77:e5:7a:f3:3f:
97:6f:87:bb:0f:07:a4:7c:e0:f5:1e:4f:08:b4:22:
de:d3:47:aa:df:49:99:77:60:dd:53:8d:40:2f:34:
dc:25:81:00:59:02:8b:fa:86:40:b1:af:65:02:0f:
d0:1a:13:69:d1:2b:2d:47:21:ef:94:a0:1b:6a:75:
b9:a3:4e:d9:d1:43:03:27:3f:d2:f7:90:86:71:7f:
1d:ab:85:30:2b:12:1a:6c:e8:50:85:2a:ad:c3:bb:
49:6f:10:7d:f4:bd:18:95:5f:b8:9e:e8:52:04:90:
68:20:db:02:5e:8d:13:7c:a0:f1:e3:85:08:12:ca:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:7A:C3:D0:5E:E5:65:C8:67:34:C7:02:5C:E8:65:53:8F:57:8E:A5
X509v3 Authority Key Identifier:
keyid:D4:ED:B5:F6:DE:72:43:61:48:B3:5A:59:03:7F:23:34:15:0D:DB:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1O219t5yQ2FIs1pZA38jNBUN2zY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3a5258-989d-400b-b7b7-454c93c065a0/1/1O219t5yQ2FIs1pZA38jNBUN2zY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:f0:03:50:29:12:35:fe:f5:1a:0f:20:b8:5d:78:d6:fd:c3:
6b:c5:36:2a:dd:99:3d:b6:ae:d4:1d:c0:b5:57:ed:dc:04:df:
b6:09:09:27:1d:7a:32:46:27:62:90:a0:cb:d2:3b:e1:3a:f1:
81:eb:fd:e7:91:83:5c:77:95:06:d0:e0:a0:f1:b1:18:c4:47:
12:9f:43:52:17:f6:73:99:52:16:29:93:0c:2c:87:df:07:e3:
1f:eb:bb:57:b8:13:e9:19:c1:10:0b:db:43:8e:9c:51:61:c5:
1e:af:c4:ed:cb:d6:c7:69:75:cb:cf:df:44:b3:74:5d:f2:1c:
0a:64:21:6b:09:3d:ae:49:2b:3e:c9:ab:45:ac:2d:ff:e3:e7:
1e:1a:b1:79:b8:33:5c:0e:11:2c:6b:8c:61:75:ff:d4:ed:a7:
b7:8e:23:c2:1a:2c:94:12:cd:a9:6f:f6:15:e8:f3:fc:0a:26:
23:bc:81:e4:2b:e6:05:87:f3:e6:79:1d:83:1b:ad:d5:9d:7a:
e0:78:75:cc:a4:4f:d3:73:c1:c0:0a:bb:e4:b1:9b:0b:2e:e3:
63:c7:c0:a1:9a:a1:e8:55:f5:a2:7e:a5:99:33:20:65:50:82:
e5:3a:e1:ab:b8:4d:b5:b3:f9:ec:81:d9:6f:db:2e:2f:f1:b0:
8e:df:cb:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:32:20 2025 by rpki-client