Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
File: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft (raw, json)
Hash identifier: nyaa3GlExqO4bZB8L9DMBVfkHt92pYgdAKXRZHlrh44=
Subject key identifier: 95:99:15:B7:52:78:42:48:F7:6B:19:1A:EB:2F:76:5B:9D:B8:E0:16
Authority key identifier: 57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
Certificate issuer: /CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Certificate serial: 019A4E18CDBD017C510424C06A44F0E657ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 09:00:39 +0000
Manifest this update: Tue 04 Nov 2025 09:00:39 +0000
Manifest next update: Wed 05 Nov 2025 09:00:39 +0000
Files and hashes: 1: CmGGaWB9_WmWpyhCzFVUlN7rb6c.roa (hash: wxQvo+G+ZM9xHSY4rXReEADz55sy+G82AZg77QhhlvE=)
2: V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl (hash: JBHg9TLcUKK/40KPVwolt29bSyVoY9+sBjMw07xmlgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:cd:bd:01:7c:51:04:24:c0:6a:44:f0:e6:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575024fa222d09f6ed99d0c8e6b7ced168e3a775
Validity
Not Before: Nov 4 09:00:39 2025 GMT
Not After : Nov 5 09:00:39 2025 GMT
Subject: CN=959915b752784248f76b191aeb2f765b9db8e016
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:25:37:fd:4c:7a:42:7e:88:e2:6b:3a:5e:
6d:bc:47:02:de:dc:72:c4:84:ae:fd:a1:49:e3:e5:
89:b6:28:f2:3d:e8:03:bc:fc:10:63:00:2f:69:64:
9b:05:9d:72:cb:e3:df:7c:5b:aa:a2:45:d7:5e:1c:
2a:cc:a0:6f:e4:09:46:5b:78:a6:a2:44:e3:9d:79:
75:ca:73:8a:11:4d:82:0e:4d:15:d4:96:af:4a:66:
44:23:46:74:bd:ad:64:d2:93:ec:31:55:ef:93:34:
bc:29:bd:8e:96:9f:6a:97:f0:4c:30:dd:a7:df:59:
d1:e4:a1:d3:5d:5f:2c:da:58:27:7e:4a:f0:06:4b:
21:a9:70:9e:cc:93:b2:51:e7:be:7c:4a:d7:f5:8b:
83:72:3a:be:84:63:0c:ac:8c:90:20:c6:53:2e:cf:
18:a7:60:65:ac:99:0a:e7:1e:02:f3:58:5c:56:23:
60:b3:b6:78:ce:b5:e7:ec:9e:c7:48:4d:43:e2:8f:
8b:b2:66:09:49:03:b2:31:89:0c:f3:f8:9b:12:59:
e1:f5:87:60:f1:81:7e:c4:ba:12:f5:e0:74:ca:0e:
26:55:18:5c:3a:78:73:af:25:2c:53:22:9e:b8:cc:
42:89:74:33:e7:96:ad:73:06:34:eb:22:6b:c4:f2:
6a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:99:15:B7:52:78:42:48:F7:6B:19:1A:EB:2F:76:5B:9D:B8:E0:16
X509v3 Authority Key Identifier:
keyid:57:50:24:FA:22:2D:09:F6:ED:99:D0:C8:E6:B7:CE:D1:68:E3:A7:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/e12f62-c9ab-4cf0-ae60-e66186c7a689/1/V1Ak-iItCfbtmdDI5rfO0Wjjp3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:31:d7:90:6b:3f:34:3d:8c:ad:8d:07:08:57:de:ae:6f:b6:
55:9a:8f:97:1d:4f:7a:18:c6:1a:7c:54:7e:3a:b1:0c:67:e0:
e1:02:c3:35:e9:89:00:e4:15:82:d5:38:e2:3a:36:42:35:40:
04:c9:93:27:28:a3:b5:95:73:ae:e2:19:7e:60:25:bc:99:21:
b3:74:f6:69:b8:0c:e8:94:b2:0d:18:04:49:52:7b:b2:00:6d:
77:ce:f9:3a:6f:2e:dc:bb:06:71:9e:45:62:1e:43:2e:2e:54:
6b:86:4f:e3:9c:b2:8b:bd:d6:40:ac:4d:38:87:fa:04:47:a5:
1a:b9:88:c9:58:19:5d:ea:4f:b8:e3:1b:13:e3:df:70:e1:89:
60:80:09:83:50:5b:e5:90:d0:c8:97:4e:4c:fd:6b:a4:01:6b:
63:80:53:b9:26:df:03:f0:c5:75:db:ef:6d:7f:61:69:c6:53:
5c:e7:6a:6f:57:31:c7:d6:6f:f2:57:ac:cc:73:59:d0:c5:c3:
3a:11:15:7f:4d:34:74:e4:f7:fb:57:4a:9c:99:8c:dc:6c:b0:
cf:f6:5a:ac:24:6c:88:27:58:9a:57:f1:5d:b7:ee:4a:92:c2:
f4:c1:bc:90:36:fe:20:ae:fc:c0:8d:37:8d:8e:ce:42:0b:c4:
27:e1:c5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:50:58 2025 by rpki-client