Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: zAKmyOyE3uJeiZr3BlBhpla5a9k2zmMlEe6VKa4D3SQ=
Subject key identifier: 25:31:38:F7:90:2D:61:F4:A2:9C:2B:F4:4F:7A:74:E8:B3:05:84:58
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019A4E189D170DB7B4DC89287B37145E03B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 15DF
Signing time: Tue 04 Nov 2025 09:00:27 +0000
Manifest this update: Tue 04 Nov 2025 09:00:27 +0000
Manifest next update: Wed 05 Nov 2025 09:00:27 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: BW7tbINNokJ1EGaF2VWIy5XjznjUyS53QsKaYbtZtX8=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9d:17:0d:b7:b4:dc:89:28:7b:37:14:5e:03:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Nov 4 09:00:27 2025 GMT
Not After : Nov 5 09:00:27 2025 GMT
Subject: CN=253138f7902d61f4a29c2bf44f7a74e8b3058458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:ac:11:8b:4c:56:32:17:38:4d:25:86:fe:
bf:36:70:15:df:05:c1:fd:5a:78:71:15:44:9a:e3:
a4:7b:79:57:56:4b:3c:04:d5:c6:d2:25:e3:6a:7e:
e4:88:b4:80:78:13:4d:63:5c:d3:5b:6c:c4:03:02:
8d:d9:56:9a:48:b1:13:66:86:06:d5:c8:fe:d9:c1:
c8:12:2a:6f:7a:31:5f:7d:5a:6f:a1:21:85:ee:3e:
00:0e:27:39:36:e7:74:ad:da:32:49:b8:63:59:04:
6f:92:86:63:95:7a:ec:d1:2e:9e:76:e0:e8:9b:2c:
90:49:39:0b:d8:cf:5d:18:e0:e1:0a:ed:6f:56:8a:
5b:e9:a1:22:92:1a:e1:f9:89:c1:fe:53:e1:37:98:
3c:20:8f:3b:77:5c:25:40:69:08:c4:2b:db:7b:c5:
f8:8b:83:78:50:08:a1:64:04:01:67:90:94:1e:20:
58:e9:43:29:c0:c6:eb:49:84:a2:da:0a:e0:42:22:
40:08:80:f5:40:29:8f:5e:00:7e:d8:5c:4e:ad:14:
6b:21:bc:3f:3c:39:76:16:59:eb:a8:c9:2f:00:57:
83:1e:f3:7e:fe:02:fb:49:15:75:87:a2:fa:14:81:
89:12:86:76:f3:17:3a:6e:0d:05:47:6a:ef:63:f4:
05:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:31:38:F7:90:2D:61:F4:A2:9C:2B:F4:4F:7A:74:E8:B3:05:84:58
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b1:97:22:19:23:c9:86:08:a3:fc:f8:4e:37:3c:6c:74:c6:
c5:9c:92:1b:4e:5d:87:c3:74:bf:f8:e3:d1:de:5b:71:5c:91:
7a:f5:8a:d1:1b:b7:e5:1a:05:94:4a:f5:33:a3:97:83:8d:12:
76:9c:0d:60:cb:24:fa:6f:c9:8d:39:29:bc:1d:cd:1c:49:b8:
f6:e9:42:a3:a6:6b:d8:20:14:67:c9:aa:15:6c:89:c6:83:fb:
32:23:cd:6c:c1:96:f1:d4:c8:f0:37:58:23:1e:d3:ab:c4:a7:
b0:d0:19:8f:88:14:d6:a6:89:b4:4e:95:f3:51:f7:aa:f4:a2:
8c:54:ab:c0:42:d6:77:27:28:7e:c9:43:ff:5a:74:24:a4:e0:
98:9c:52:fd:72:03:71:c9:f8:72:5c:4d:3c:5f:8c:10:12:91:
4f:74:a0:9d:50:de:e3:4d:a1:37:ed:d7:aa:a1:5a:ab:05:ff:
24:35:eb:35:72:cf:9a:0c:c6:70:82:86:92:b2:e9:67:82:8c:
63:5d:5d:2a:3a:9f:e6:2a:0c:6f:4f:20:5f:b8:3e:08:99:b9:
04:e7:0b:ae:7c:f6:20:52:6b:91:ed:05:dd:a8:70:90:26:29:
1e:cd:e8:cd:c5:db:df:78:92:cd:cd:55:f8:f7:e3:2f:64:94:
85:a4:72:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:07 2025 by rpki-client