Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: B4VKi9ZFYvSdwrXB1vYMAqSrgd08GrwrWH4/MeSzzRs=
Subject key identifier: D2:28:48:B7:82:56:28:49:17:AD:BA:F7:29:EA:E3:84:02:B5:73:83
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 019A54C062F2E563CFA585DF336FC90B5400
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 01A4
Signing time: Wed 05 Nov 2025 16:01:25 +0000
Manifest this update: Wed 05 Nov 2025 16:01:25 +0000
Manifest next update: Thu 06 Nov 2025 16:01:25 +0000
Files and hashes: 1: 4xwaWRub9ONEDx1qZtSfGSWgm_U.roa (hash: DQtqDfCJ+g5/1BpTJ+JbAARxia0+c3cSAM/MeNxPjZQ=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: 4HS/368vaIKz2YgzbwJCKQSkTeN1ZTrofaHKpy2MB0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:62:f2:e5:63:cf:a5:85:df:33:6f:c9:0b:54:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Nov 5 16:01:25 2025 GMT
Not After : Nov 6 16:01:25 2025 GMT
Subject: CN=d22848b78256284917adbaf729eae38402b57383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e2:18:66:de:37:c0:75:f2:4e:c2:a5:3e:5c:
76:e2:a5:80:6a:29:01:91:1c:0f:19:dd:32:5d:4b:
bb:31:df:bf:6b:1a:c1:30:6c:5e:4c:c9:c3:b3:f4:
87:8b:b5:ed:dd:ff:db:2c:0e:8d:8d:9d:72:6c:1c:
34:ca:c4:5b:31:3d:60:8b:81:20:f4:51:f9:4a:ea:
4c:eb:da:10:ff:2e:df:20:5d:52:17:2d:6e:6d:a7:
1a:05:3d:21:94:cf:72:84:44:09:9a:74:26:80:5a:
00:a3:c5:fc:00:a6:0e:29:b5:b6:00:7f:fc:f1:ae:
92:87:6c:aa:1f:0a:a9:5e:1d:d0:fd:e0:be:71:83:
ff:59:b9:29:27:da:2f:e3:e2:65:49:3b:bf:da:a2:
88:7d:98:5c:e7:59:8f:3b:16:db:b5:c8:aa:3d:70:
79:a6:73:80:71:42:3b:97:03:83:7e:cc:34:a0:e3:
a7:4d:42:03:74:7b:7a:df:62:f9:9a:d9:bb:b2:27:
3f:97:f3:7e:f8:0b:f9:ea:97:e6:28:be:4b:dd:4f:
94:06:6b:c7:b1:92:7a:31:1b:2e:84:ce:5b:7a:2b:
c5:04:3e:07:b7:4d:a6:db:96:d3:e2:31:cb:d4:b6:
e4:ee:b3:bb:e2:7b:be:bd:86:9d:1c:fb:79:dd:42:
e3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:28:48:B7:82:56:28:49:17:AD:BA:F7:29:EA:E3:84:02:B5:73:83
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:db:1b:9d:c9:0b:17:2f:b9:d2:6e:7f:f8:af:ff:75:32:71:
b7:37:47:bb:bc:e2:51:39:de:d6:ee:e9:e1:df:a8:3a:a9:1a:
b5:1f:7a:72:11:f6:27:f5:7d:2e:71:2c:df:c1:0f:a4:04:46:
61:5c:f8:60:79:14:91:56:01:6f:be:9c:8d:d1:4a:53:e5:80:
7c:3c:62:64:cd:41:18:ca:a0:44:21:e8:70:14:9f:0d:82:ae:
26:bf:39:a4:6b:7d:5d:e7:48:fd:bd:6b:8d:25:2a:0f:24:b4:
bb:3d:7d:d3:50:b9:b1:82:cd:54:a3:2b:3e:43:1f:d1:79:f0:
32:6d:b9:92:b5:dc:66:4f:9e:57:37:f5:81:f3:4f:f4:fc:c8:
48:76:59:4a:a0:1a:ca:ee:c9:8a:f7:7a:dc:cc:dc:45:85:7e:
4d:eb:88:7e:21:ea:e2:64:75:ad:15:85:c9:b1:82:4a:6c:ef:
f5:26:de:80:82:25:19:31:91:37:59:8f:de:62:a9:dd:57:e3:
b7:0b:39:e4:b5:fe:be:b8:1b:70:26:f3:d5:eb:a6:3e:24:30:
a8:f8:41:79:65:46:2e:6b:62:db:0a:03:8f:ef:d8:23:c8:ea:
7d:c2:f1:c4:52:5c:5f:1c:45:ed:89:b1:d3:3e:d0:f9:cd:d5:
bb:e0:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:45:35 2025 by rpki-client