Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
File: 1-n6xEVEw-slAkQYeMUYqVlImiFo.mft (raw, json)
Hash identifier: E8L61BTaGONCRoUjq50G62ZP5PQC+AIxUYjPzl2clQc=
Subject key identifier: 9F:A5:A9:D7:7D:A4:BD:65:57:79:19:60:85:3A:7D:78:79:89:C3:41
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 019A4EF478932BF79FE07F8FE9EDB5DE3253
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
Manifest number: 0BF4
Signing time: Tue 04 Nov 2025 13:00:35 +0000
Manifest this update: Tue 04 Nov 2025 13:00:35 +0000
Manifest next update: Wed 05 Nov 2025 13:00:35 +0000
Files and hashes: 1: 1-n6xEVEw-slAkQYeMUYqVlImiFo.crl (hash: HgMHkw5Zpez/ux0BK6lyrbSWLl+BhL9HIY5ZJ7pcDvY=)
2: 8jLs6VGmOeqUeiHElaeR3LqYElI.roa (hash: Atd4yjEwjoj5JGYuPikoIPA1A5Gpt38GxeMnhualwSA=)
3: heyE1gtTjLmdNCX82aeJdr0FIAo.roa (hash: ZejOC6mn1mNz9pg99nxI8IIG+SDEeycsyMgYYFPq42A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:78:93:2b:f7:9f:e0:7f:8f:e9:ed:b5:de:32:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Nov 4 13:00:35 2025 GMT
Not After : Nov 5 13:00:35 2025 GMT
Subject: CN=9fa5a9d77da4bd6557791960853a7d787989c341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ac:94:4a:10:47:32:db:1d:11:09:5f:b0:50:
b2:4d:63:d2:be:3f:79:d3:80:65:fa:3f:ec:9e:83:
43:65:cf:ef:3f:be:b3:1c:7c:c6:b8:9f:cf:47:0a:
75:1b:45:e1:02:98:5a:a5:66:b6:fc:99:33:ec:09:
ae:c8:fa:b1:e2:70:ea:5d:a7:aa:15:c5:1a:59:70:
a7:2c:4b:2c:38:9d:15:34:c8:6e:d6:5d:f5:85:63:
da:15:f6:a9:d3:22:c3:65:95:dd:e5:f3:d3:22:ec:
59:64:6f:9d:05:ec:ed:8b:9e:ce:ab:8b:67:46:d5:
30:a6:22:24:e0:4d:05:cc:12:2f:f6:50:ca:8f:0b:
91:33:65:3a:4f:c0:2d:2e:76:7b:67:d4:33:8d:48:
c6:26:3b:4d:2e:5d:ee:7a:db:5b:5f:e8:69:21:00:
bc:3d:cd:8e:74:cd:24:6e:ed:87:64:f4:57:e3:98:
43:5f:2d:8d:83:5f:75:6b:3a:8d:a3:51:f9:28:c5:
86:b6:db:6b:8f:4e:4e:63:32:83:fc:0f:fc:d2:74:
89:90:80:3f:b8:dd:64:2a:3c:07:99:37:be:3f:ff:
da:cb:47:99:cd:58:23:92:85:ef:06:e6:c2:17:fc:
10:31:e0:46:d2:10:e2:6e:3e:04:1f:9c:49:38:f9:
04:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A5:A9:D7:7D:A4:BD:65:57:79:19:60:85:3A:7D:78:79:89:C3:41
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f2:bc:eb:1d:28:98:cc:13:06:63:cf:9c:05:ad:28:ed:a0:
df:bf:5e:c5:aa:b4:7b:fb:2e:18:7f:bc:ef:4b:3b:4a:ff:85:
b1:bf:27:56:46:f7:af:e1:a6:f9:9e:f1:f8:6a:ce:35:b4:f5:
10:a6:49:27:9b:af:6a:c2:cd:0c:50:96:bb:57:22:12:98:84:
83:2a:1b:12:ed:ef:1e:58:bb:88:d8:0f:b7:88:7b:d2:15:30:
35:53:bd:9a:56:71:dc:b3:ac:75:e4:1c:98:05:00:9d:e9:58:
c9:99:ec:0d:d8:ae:94:d3:9b:72:46:44:5e:3d:d3:9a:cf:bc:
69:11:fa:b8:a3:5f:a9:a0:a9:24:35:d1:21:ce:47:a3:32:df:
e7:4a:72:1c:61:f9:d9:da:d8:bd:fa:5b:58:96:3f:26:12:a0:
97:69:0a:a0:41:34:4f:d5:65:2d:86:a8:23:1e:9e:58:7f:41:
39:bb:fa:31:8f:33:3f:4a:37:f2:83:87:bc:6d:ec:07:47:23:
87:ec:cf:77:08:2c:43:4f:d4:1d:e4:7a:4f:13:48:59:04:c1:
15:0d:dc:2a:39:ef:fe:a1:af:54:72:1c:f4:31:af:23:99:6e:
6f:9d:50:a2:cb:31:3e:80:1b:88:59:f1:c3:6b:96:83:81:6a:
cb:78:28:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client