Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json)
Hash identifier: QZsRt+qP8nbpJoB3BN7UWiPHXki7o2qxX9vWrqlA0CU=
Subject key identifier: C7:AA:A3:E6:85:CE:0C:BB:16:36:62:A3:14:95:DC:12:DA:75:24:B0
Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Certificate serial: 019A51F5B45FD4CAEDBC4288B2394D16EB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
Manifest number: 0946
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: 9YZnsXsyi1uamwzGDHCvRXWhUXoZXrZjnVZlmaTiKNA=)
2: JAyc3IZZlhE05kFH0gGLLaWCHBs.roa (hash: BPAa+FA4FmMjmalDh9g/vYV5efTsypi7ozqO1bsspFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:b4:5f:d4:ca:ed:bc:42:88:b2:39:4d:16:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=c7aaa3e685ce0cbb163662a31495dc12da7524b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c0:25:7c:04:a1:bd:55:d2:bd:25:f6:a7:8d:
e6:73:9c:11:c1:05:23:7b:9f:5f:ad:5e:df:cc:58:
b8:71:d9:79:93:a9:94:37:e0:8f:01:3c:f0:ad:8f:
fa:10:6e:78:bb:13:a0:97:ea:54:b3:d3:00:ed:0c:
4f:7f:f8:d3:f3:14:cc:1a:8e:f9:02:cf:46:63:11:
63:8d:57:77:56:ff:7d:06:3d:22:e4:2f:c2:14:74:
3c:cf:93:f2:9b:c7:d3:1c:69:20:86:47:3a:c0:ea:
ac:59:aa:3d:6b:f6:d8:db:91:e6:c9:7a:de:b4:6a:
bd:c8:8a:c3:3a:d4:f2:ed:80:d6:e8:b7:5d:a4:74:
c9:fd:bb:be:02:dd:f7:cd:54:33:c5:51:e9:94:35:
ec:93:0d:6f:62:e2:61:82:2d:96:e7:68:f2:26:b9:
6f:ea:aa:6c:4d:07:20:53:ac:20:59:10:c0:f8:81:
a0:2a:fe:38:b4:a5:b9:db:bf:ae:eb:19:ec:5a:b8:
3a:78:37:96:2d:05:72:a0:fd:0a:ef:cf:39:c4:99:
b2:32:a2:68:92:91:59:ef:a5:65:da:1c:b4:af:b1:
38:32:e5:be:fa:b2:0d:4c:cd:82:7f:76:5e:c3:77:
e9:d5:89:7e:b2:4f:36:2e:ee:31:cc:dd:ac:4a:c9:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AA:A3:E6:85:CE:0C:BB:16:36:62:A3:14:95:DC:12:DA:75:24:B0
X509v3 Authority Key Identifier:
keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:cc:8c:5d:18:a3:b3:b5:36:47:04:09:77:f3:f2:74:b6:31:
e6:e9:d3:3e:17:f3:29:7b:4f:4e:b4:27:db:b8:1f:a0:4d:79:
e2:51:54:e7:98:e7:f9:59:6c:47:91:98:c7:f6:fd:b6:2d:65:
05:6a:42:28:48:75:46:31:ab:04:82:45:f3:b1:ba:10:6c:cf:
01:f2:a8:64:3f:54:c9:f4:06:bb:b4:5d:bd:79:77:0e:45:ed:
b4:37:9c:73:7e:9a:20:ae:25:d4:ad:da:f3:b2:b3:3e:49:9c:
1d:83:5c:ce:fd:6b:36:23:54:31:f9:29:51:b6:9b:0a:59:e6:
05:f3:be:d6:ef:3d:dc:be:09:81:14:19:2b:d9:ed:6a:00:87:
6b:53:af:e9:97:e7:72:1e:a0:0f:d6:91:1c:a2:e6:97:51:cd:
c3:75:1f:d1:98:d7:4d:3f:af:41:6d:af:44:19:b8:8d:c9:90:
74:74:42:07:6a:99:be:70:b4:1f:94:2b:23:35:60:8c:91:b3:
85:69:c4:4e:83:54:8e:ee:b9:d4:65:31:00:55:ce:d4:2b:72:
ab:31:24:0e:88:7c:22:1f:96:a5:3c:6c:4f:8d:52:92:84:91:
bc:38:18:33:8b:ae:f9:a7:31:f0:98:a6:94:66:1a:4f:71:b1:
2f:e0:71:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:17 2025 by rpki-client