Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: HvBfE02HsMz1AX4/JEWsHeU7XZr066D+XTFeE1kV0GA=
Subject key identifier: 7A:CF:06:26:77:84:86:39:06:FD:03:31:E0:70:D9:9F:38:89:2D:CF
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019A4EF57A58FF2652F1ECD40EE5CFA9FFB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 1326
Signing time: Tue 04 Nov 2025 13:01:41 +0000
Manifest this update: Tue 04 Nov 2025 13:01:41 +0000
Manifest next update: Wed 05 Nov 2025 13:01:41 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: zAxSnimC50I1wygEPEjxPBatIE/VZ5GEZyPoq3+/l7Q=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:7a:58:ff:26:52:f1:ec:d4:0e:e5:cf:a9:ff:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Nov 4 13:01:41 2025 GMT
Not After : Nov 5 13:01:41 2025 GMT
Subject: CN=7acf06267784863906fd0331e070d99f38892dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:a6:11:c9:8b:a8:e4:89:9d:59:e5:04:48:
75:e0:7f:52:5e:8c:a1:60:b7:3d:ec:f3:e6:5f:62:
3d:4c:8d:c3:b5:d1:7d:37:06:3b:a9:bb:99:8d:aa:
04:24:c0:8f:68:52:a3:27:79:fa:3d:c3:f5:81:c2:
83:4d:00:a3:50:5d:b5:49:5b:ca:75:9b:e5:1b:7c:
31:26:1e:d2:56:ec:7a:c1:47:9b:ea:72:c3:d9:fb:
21:a2:d4:c4:d3:eb:63:48:2e:65:c9:e0:be:e2:54:
bd:b9:db:67:14:05:ae:ec:fe:50:7b:2e:80:e3:95:
ad:83:46:90:0c:6d:6d:8c:b4:49:3a:bb:8b:8e:cb:
c8:ad:fe:aa:98:d4:39:17:c2:7c:49:20:7d:6e:28:
cb:d7:37:c0:05:59:42:5a:7e:c2:da:c0:1c:45:b2:
55:c3:62:01:82:c0:04:eb:a5:77:ce:9b:dc:14:3b:
55:12:5e:3d:7b:e2:87:bc:e3:09:10:36:63:62:11:
a8:3a:06:39:c7:32:d3:47:94:55:a4:02:cf:e0:df:
4a:fd:17:39:1f:97:82:bb:41:7b:66:90:bb:6c:98:
36:c3:2d:be:aa:fb:e3:5b:b8:59:cc:39:0b:86:23:
35:74:45:30:c0:28:da:ca:29:8b:6a:bb:50:54:30:
56:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:CF:06:26:77:84:86:39:06:FD:03:31:E0:70:D9:9F:38:89:2D:CF
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:49:50:df:3a:52:f1:0d:b0:93:aa:6a:6a:36:8f:aa:75:4d:
ba:8f:ce:10:65:1c:d9:85:8f:95:47:60:f9:1e:f6:11:ef:0e:
f8:23:3e:55:de:47:31:3f:e7:8d:f5:e6:d2:4d:3f:d1:5a:77:
a6:ad:c2:ae:50:41:ae:47:0d:7d:3f:c0:d8:31:dc:20:5f:59:
55:ed:9c:fe:98:0b:35:38:d1:68:75:47:31:20:20:c3:3b:39:
80:34:7e:93:5a:c4:b8:1e:9b:71:2c:b8:27:00:f8:16:14:7b:
dc:75:a9:ae:64:4b:37:5c:41:ee:0e:e5:21:e7:64:ab:8d:e1:
53:32:52:86:1d:b2:d5:14:80:36:1a:6d:c0:eb:1f:ed:dc:c1:
59:a4:a1:54:0e:5a:8e:e0:45:9f:cb:4d:6d:a7:87:ac:78:81:
db:06:eb:2d:c3:0b:16:3c:5b:48:2c:b7:6d:2e:b9:75:17:ae:
1f:11:06:38:ae:fd:14:1c:f4:f6:44:06:6f:85:af:2b:ae:a9:
f1:cc:39:78:87:53:0c:03:f0:da:b4:9c:11:23:a5:f9:95:d1:
61:f3:8b:22:5d:e7:67:af:73:11:8c:76:bb:fb:5c:90:a7:a9:
9e:cf:05:21:c8:ab:75:11:ba:d7:13:9c:d8:a5:cc:8d:4d:4d:
73:4b:1c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:17 2025 by rpki-client