Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
File: 1873Xgl6YxiGszyB9kql67wMMqA.mft (raw, json)
Hash identifier: 9DLS+wYdABPIRnH8Dd/v0cnPuMDNyejyFjvaqVKRwiw=
Subject key identifier: E1:5B:7A:0B:59:93:5A:0A:BB:A0:C2:48:04:6A:B4:D9:49:82:10:75
Authority key identifier: D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
Certificate issuer: /CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Certificate serial: 019A53E3CB5299A0F78E8A82DEE011D960FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
Manifest number: 0540
Signing time: Wed 05 Nov 2025 12:00:28 +0000
Manifest this update: Wed 05 Nov 2025 12:00:28 +0000
Manifest next update: Thu 06 Nov 2025 12:00:28 +0000
Files and hashes: 1: 1873Xgl6YxiGszyB9kql67wMMqA.crl (hash: Ndw1OtMXokSHS4xNlGaK6wAyaNp2c5mR39kM8ipO5OI=)
2: tavXsXu7Wm_kIdKnzfVPzxktMGQ.roa (hash: PDEUyoKVmJLpE4EXJZCm2eA6jcMg8DukO+sjxPMBeZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e3:cb:52:99:a0:f7:8e:8a:82:de:e0:11:d9:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cef75e097a631886b33c81f64aa5ebbc0c32a0
Validity
Not Before: Nov 5 12:00:28 2025 GMT
Not After : Nov 6 12:00:28 2025 GMT
Subject: CN=e15b7a0b59935a0abba0c248046ab4d949821075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:46:b0:08:ff:bd:58:23:4e:bf:2c:e9:df:fe:
13:38:75:be:5c:5f:ed:40:61:a3:95:51:d3:e5:fb:
5f:92:93:b0:0b:64:ac:63:a8:94:d8:36:ae:3b:23:
fc:b8:1a:40:14:e6:4d:98:2f:0a:98:51:1d:68:cb:
ad:a6:76:71:a5:e1:aa:2d:7a:81:84:f5:fd:b2:51:
f5:86:5e:13:99:69:6f:b8:70:c1:a8:1c:a4:09:e2:
a8:7d:5a:48:dc:c0:46:4a:ef:49:c2:1b:b4:2e:fa:
8b:9a:91:1f:e0:64:e5:70:93:b9:7c:5f:1e:f1:19:
f4:3b:01:c5:14:2b:78:4b:51:52:06:e6:7e:91:26:
47:7d:54:db:36:df:73:5c:84:a7:d0:87:71:a2:12:
89:79:28:1d:6e:eb:3b:ad:ff:50:66:ae:c4:ce:d3:
d6:c6:17:ef:ec:dd:12:e4:04:ca:7e:72:83:3c:97:
2b:1f:c1:27:e1:99:62:4c:1c:83:9d:fc:21:fe:76:
97:61:2e:4d:9d:1c:d7:9d:ca:6e:8a:a3:0f:6c:fa:
eb:21:82:c0:8a:69:ad:e2:85:03:89:3e:04:60:c1:
72:be:9b:b5:8c:fd:bc:50:ca:48:5e:9f:68:a8:72:
fd:9b:c3:75:e2:f4:fa:4d:67:39:3a:be:b3:e2:2d:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5B:7A:0B:59:93:5A:0A:BB:A0:C2:48:04:6A:B4:D9:49:82:10:75
X509v3 Authority Key Identifier:
keyid:D7:CE:F7:5E:09:7A:63:18:86:B3:3C:81:F6:4A:A5:EB:BC:0C:32:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1873Xgl6YxiGszyB9kql67wMMqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4f0d5-7e43-46be-b092-5ba501e0b370/1/1873Xgl6YxiGszyB9kql67wMMqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b8:0a:2f:fb:25:8b:20:67:8b:51:b5:5b:30:33:06:2e:ec:
a6:56:f5:28:37:73:e3:b7:2e:b1:98:36:62:e2:66:3c:c7:65:
60:82:3a:e6:ac:97:54:f8:67:75:12:94:9a:da:24:84:de:de:
c9:10:2f:f0:d7:e2:00:09:c8:ea:9b:31:22:7c:83:f3:72:17:
a1:ad:de:bd:16:e8:47:76:55:fb:a7:cf:bc:0c:53:6d:8f:11:
cc:14:f1:a5:73:d3:25:64:b3:97:7b:f9:47:6f:ba:24:0f:49:
4c:eb:88:5f:c3:f2:93:91:72:49:21:68:dd:0e:27:59:54:1f:
bb:b2:26:1e:2a:c6:65:93:d7:62:f5:0e:6c:fe:97:f7:b3:1a:
92:a7:91:6c:9a:7b:db:e1:d3:7c:9c:47:cc:c7:07:1f:80:2f:
f8:38:61:5a:12:3a:e5:2b:00:37:d3:84:dd:f1:2f:bd:4a:3a:
44:84:9e:05:06:b1:56:4a:7e:41:fb:e1:e6:8c:75:79:29:86:
33:82:9d:2b:58:c2:81:cd:f3:36:9b:f5:e5:7e:f7:22:c8:b4:
85:8b:8c:43:b8:22:aa:75:85:39:7e:1f:07:09:a7:04:fa:c0:
8c:9d:a4:da:a3:5d:9b:8d:52:e4:34:d9:36:e6:da:a5:4d:3a:
24:a6:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:36:36 2025 by rpki-client