Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: ihTGXwDdQKJq4URPkDzmwiyx84Pw7692D2f7ytH4RqY=
Subject key identifier: A0:6F:05:60:A9:4A:3E:9D:40:02:8D:CA:08:2F:6A:4B:8E:61:2A:8E
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019A54BF8220396F2E09AB34B39375907B44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 01C5
Signing time: Wed 05 Nov 2025 16:00:28 +0000
Manifest this update: Wed 05 Nov 2025 16:00:28 +0000
Manifest next update: Thu 06 Nov 2025 16:00:28 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: nPWBY/nOuMASga+D8FsHPdI0RET+c1OSK2cGD0+YPyI=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:82:20:39:6f:2e:09:ab:34:b3:93:75:90:7b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Nov 5 16:00:28 2025 GMT
Not After : Nov 6 16:00:28 2025 GMT
Subject: CN=a06f0560a94a3e9d40028dca082f6a4b8e612a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:a4:08:04:62:4b:19:25:48:e2:87:22:75:
e1:46:44:a2:37:cd:4f:e1:82:b2:73:e9:e3:40:92:
7d:9a:aa:b8:30:4d:93:e8:a9:c3:1a:93:4c:a9:92:
59:d8:be:ac:99:e0:88:db:91:b8:ea:06:34:5f:d7:
5f:00:da:8c:dd:e8:aa:28:91:a1:78:a8:33:45:88:
38:b5:ae:bd:09:b0:bc:89:ff:71:98:ff:c3:1f:20:
bf:2d:e3:4b:4d:f8:eb:cf:48:f4:31:28:cf:05:e2:
f5:ac:a0:e5:48:c2:5a:33:e5:9d:c3:11:3e:d9:35:
f9:41:63:63:87:b8:63:ce:a5:a7:04:44:a4:de:e4:
6f:83:79:35:fc:17:22:1e:ef:7e:65:a4:6f:5b:cc:
fe:13:b7:60:e4:be:d6:d6:c0:a8:03:a1:1d:03:86:
ff:29:12:b1:d3:b9:f7:56:4f:04:a0:67:9c:17:d3:
01:4d:3c:e6:c6:c2:f4:78:dd:79:78:a3:7d:51:43:
c6:fe:67:93:ac:ae:1b:bb:eb:d7:c7:2c:15:8f:44:
61:58:8d:95:ba:71:a8:33:00:80:6b:19:d8:e0:9a:
2d:15:b1:97:17:bc:e9:85:8b:32:52:46:c1:26:7e:
98:c5:f5:63:6f:bb:bf:3f:c9:f9:0f:8b:f4:86:ff:
b4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6F:05:60:A9:4A:3E:9D:40:02:8D:CA:08:2F:6A:4B:8E:61:2A:8E
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:94:b6:a9:dd:98:7c:c2:18:0b:11:cd:db:0d:3b:a7:ff:57:
a9:79:3b:df:9c:55:4d:e8:8c:10:93:f9:56:2a:30:ca:ef:83:
88:ab:9f:8e:97:a5:e9:b1:6a:05:85:c9:d7:fa:24:e9:5d:a0:
4e:73:70:c5:15:07:e3:54:53:e5:e8:3b:83:9d:a9:80:46:af:
7e:49:2c:3f:9d:8a:41:09:c5:cf:60:7b:7b:50:81:f2:48:9b:
fd:c7:d7:6b:8d:dd:5d:6d:27:65:1e:e3:b3:d4:ad:57:42:f3:
ff:99:df:03:09:a5:29:3d:89:9c:81:bc:b4:53:1a:b1:21:26:
1c:70:1e:9d:c1:77:f8:8b:a0:3b:5e:ab:5e:95:16:28:64:37:
94:f0:e1:ce:e5:63:82:0a:4b:52:e6:05:8f:5c:9e:80:99:26:
1c:ce:80:88:43:3c:17:0a:0f:b5:4f:c5:7e:7a:a9:08:89:a4:
37:78:b6:0a:bd:95:c6:77:af:c4:5f:68:4a:b0:f4:54:7a:90:
bb:28:77:5c:61:b5:75:81:4d:e2:2f:b7:7f:dc:25:e0:b7:b0:
05:4e:4f:d9:ee:1a:e8:5f:f0:58:5c:9e:2d:f6:ae:1d:99:1b:
ab:f7:f3:65:b3:d6:e9:c6:76:d3:70:8d:cd:48:5c:f9:2c:2d:
2c:07:73:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:15:13 2025 by rpki-client