Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
File: md1vCIIq4LpQVFQkVpI_r5BA9dA.mft (raw, json)
Hash identifier: AlUth2zAeJN85on8fjo0GiQpcKCWczTHGE5+zCg6YT4=
Subject key identifier: 1A:35:94:A1:36:CC:24:ED:C3:68:3B:4F:C0:32:AB:0F:21:DA:B0:DB
Authority key identifier: 99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
Certificate issuer: /CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Certificate serial: 019A5187290DB05F9875E9F82D04604DC02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
Manifest number: 10F9
Signing time: Wed 05 Nov 2025 01:00:03 +0000
Manifest this update: Wed 05 Nov 2025 01:00:03 +0000
Manifest next update: Thu 06 Nov 2025 01:00:03 +0000
Files and hashes: 1: NUWfScDSH56OaOCaPfBblPu0Ydg.roa (hash: a4F0KmJ+v3pAeFAh9qDTsIqvwa1PoPI9PowXceZRGfg=)
2: md1vCIIq4LpQVFQkVpI_r5BA9dA.crl (hash: U+VvxbukZPYYB/s3AIIOFK3HgpM5DwZMRQqCEDTryJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:29:0d:b0:5f:98:75:e9:f8:2d:04:60:4d:c0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99dd6f08822ae0ba5054542456923faf9040f5d0
Validity
Not Before: Nov 5 01:00:03 2025 GMT
Not After : Nov 6 01:00:03 2025 GMT
Subject: CN=1a3594a136cc24edc3683b4fc032ab0f21dab0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:3f:73:30:22:19:d4:c6:b8:86:09:e8:ee:
12:81:95:a5:24:cc:1b:86:f8:e6:e3:ef:5f:d5:d6:
79:cb:09:21:47:45:4f:ad:05:c0:50:12:75:35:ca:
cb:fe:4b:0d:b9:cc:42:00:1c:e7:7e:f0:0a:b3:c2:
3f:86:06:0c:0f:d5:42:de:6e:3d:5f:17:52:8c:72:
b4:d2:1a:45:08:ab:a0:92:da:17:19:10:da:d8:88:
75:5e:57:60:29:b0:49:42:96:9f:2f:3f:7b:2a:ba:
32:6b:5d:84:9f:10:02:35:09:90:8e:79:55:02:02:
1d:1e:ad:35:29:ab:35:0f:93:99:36:7d:3a:62:17:
31:4f:a8:5c:ee:5e:91:f0:90:72:86:5c:17:11:1a:
60:64:7e:ba:db:97:af:e7:ad:98:32:2c:b6:6f:e2:
a6:e6:d3:54:95:66:da:f7:f9:f2:e1:f8:3b:13:d2:
b0:1f:cd:24:e0:8f:24:88:7c:85:24:58:2e:05:e2:
70:0b:cf:1d:7d:7d:70:13:07:8d:60:f8:9e:15:d1:
21:a3:f6:c5:8f:e4:c1:9d:be:c0:f6:e1:a0:7c:a9:
3d:0d:a4:e7:24:24:d2:82:06:ff:7b:bb:23:66:1f:
66:ff:f7:9e:f8:93:3e:1c:ad:13:cb:c8:4e:21:76:
ab:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:35:94:A1:36:CC:24:ED:C3:68:3B:4F:C0:32:AB:0F:21:DA:B0:DB
X509v3 Authority Key Identifier:
keyid:99:DD:6F:08:82:2A:E0:BA:50:54:54:24:56:92:3F:AF:90:40:F5:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md1vCIIq4LpQVFQkVpI_r5BA9dA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/cec2a9-3013-42b4-9483-a72c404f26fd/1/md1vCIIq4LpQVFQkVpI_r5BA9dA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a7:b1:27:20:a8:f5:57:ec:d3:98:92:05:38:b3:20:5a:1e:
14:b5:6a:21:93:1f:a7:46:23:97:18:66:40:de:ba:88:5d:92:
9b:b9:0c:19:00:ea:e0:ab:7a:d1:e7:45:d8:8c:e6:fd:f4:36:
65:bc:00:55:83:39:71:69:fc:cd:ac:09:ca:50:e8:d5:3e:36:
88:84:0f:ec:8d:9d:ac:95:4b:4f:0b:68:c6:2b:ec:74:8c:aa:
aa:38:ef:e8:d5:d6:23:1f:ac:ae:89:fd:62:0d:a5:d7:bf:5e:
bf:e9:9c:79:3a:b2:3b:40:f3:70:10:da:10:cd:f5:8e:1f:df:
46:5d:6a:c4:3c:16:f9:2a:23:62:62:e2:d1:32:0c:4a:10:44:
cb:e0:d2:10:14:d3:62:a5:83:1d:e6:84:4f:3a:1a:16:b8:9a:
64:e7:56:1f:9c:24:e1:ab:5f:a8:85:72:d4:43:5c:41:93:d2:
2b:bf:65:90:42:1e:b7:c5:b6:7b:33:14:73:90:cc:a2:60:f4:
c8:87:01:42:1b:38:5a:b9:6c:36:8f:57:a7:cc:91:ce:35:84:
e4:d7:16:cb:54:3b:ca:04:0b:04:96:8a:cb:89:11:33:e6:2e:
16:f4:ff:82:28:c3:ee:ec:51:02:1f:ae:b9:96:c7:02:33:5d:
85:5b:64:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:18:43 2025 by rpki-client