Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: YOZyLTF4jt5v3Gxws2Hcc9Nu7w9Y5RHx9X8OBvYReVA=
Subject key identifier: C0:59:95:DC:F0:A9:FA:C8:58:E9:BF:B1:85:AB:9B:09:61:B5:6D:7E
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019A503DBEFC5F5163245191683F94464516
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 0828
Signing time: Tue 04 Nov 2025 19:00:15 +0000
Manifest this update: Tue 04 Nov 2025 19:00:15 +0000
Manifest next update: Wed 05 Nov 2025 19:00:15 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: TkUGB9KqttjtED3LxjluuvnIxBqmzTXwuLvhxJYs+DA=)
2: wvcELSI8p3zOC9FNSdvAaOhzdZI.roa (hash: aWdD7yZCiGD/jhoFXeJkT3mN7GJI55ijye/m8elp9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:be:fc:5f:51:63:24:51:91:68:3f:94:46:45:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Nov 4 19:00:15 2025 GMT
Not After : Nov 5 19:00:15 2025 GMT
Subject: CN=c05995dcf0a9fac858e9bfb185ab9b0961b56d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:71:5c:66:16:3d:10:eb:14:60:f4:a8:70:39:
2b:7c:e7:6b:fc:b4:7f:43:4e:3e:9f:15:ec:a3:a9:
5b:33:12:fb:e1:bd:c5:7d:a0:4e:4a:fe:67:58:ca:
7f:61:96:37:30:91:79:c6:8f:50:63:7b:00:af:08:
21:d6:5b:77:c7:9d:e4:24:69:6d:6f:21:6a:5d:02:
28:33:b8:3f:48:c5:8a:c3:23:dc:5b:bf:1d:21:10:
2c:62:43:31:94:11:0a:72:a2:cc:6d:b2:99:ef:c9:
1a:06:c0:6f:92:4d:45:fe:b9:fd:5c:bf:f6:5b:ee:
68:fd:b2:8e:53:b2:b5:a5:5b:ad:34:f2:ae:71:87:
51:08:a6:f6:3b:e9:86:3f:07:63:28:4f:55:d4:14:
0b:3a:07:0d:c0:1e:9f:54:b1:1a:3d:87:f2:73:c7:
72:56:af:2b:bf:4f:57:e7:65:37:87:11:c8:d8:8c:
80:26:50:d3:b6:ad:0d:ba:10:c1:20:77:97:c0:02:
37:d9:b7:cc:52:30:25:52:15:95:c6:64:d8:43:38:
71:b4:dd:70:7a:fa:60:f1:85:2a:2f:31:ed:b8:ba:
55:7c:6b:0c:71:53:91:36:84:1b:55:bf:de:7d:ec:
7f:94:fd:63:4d:58:1e:80:a8:99:09:02:d2:73:4c:
26:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:59:95:DC:F0:A9:FA:C8:58:E9:BF:B1:85:AB:9B:09:61:B5:6D:7E
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:02:47:3c:bc:6c:e1:78:8c:57:05:72:9b:a1:04:c5:ac:
bc:5e:43:95:34:a0:47:50:ad:91:c6:59:72:6e:e7:22:da:65:
e8:8d:7d:aa:5b:dc:61:4b:d5:32:54:56:0a:b0:e6:a5:48:f8:
fc:a1:f4:49:3f:40:54:85:bf:e1:5f:9d:71:eb:46:27:82:23:
69:12:d0:be:f6:c7:27:74:6f:b2:21:6e:41:e7:e6:c8:82:18:
27:85:0e:96:bc:60:78:51:ea:62:79:58:f8:9f:bc:0a:8c:a8:
47:b4:8f:16:52:d2:9e:8e:2f:50:f7:df:9b:fc:f2:43:fc:d3:
8f:dd:14:54:26:6f:8b:0f:3c:2e:b2:d6:a7:c3:3a:73:e7:40:
44:0f:7a:a4:65:7c:3f:3e:d1:d8:23:cc:38:9b:93:74:21:cd:
b0:71:94:4c:9f:92:4f:26:e6:a7:d3:7a:62:f6:77:fb:e5:b7:
c8:a4:9c:d0:91:c2:43:e3:d8:e7:67:25:b4:62:f6:dc:1a:9b:
b9:20:91:c1:a0:1c:93:2b:c9:1c:5a:ea:75:da:9c:62:ef:ca:
d6:dd:c4:f6:fa:ff:5e:5e:3e:7d:92:6c:83:ed:b7:d8:ef:94:
1b:a8:19:e3:13:d6:a8:da:c0:1b:5c:43:81:a4:ce:a2:68:3c:
3a:4a:58:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:14 2025 by rpki-client