Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: bEk2H+3TLYr1VeZ+kmhT1lEaubFJwdgz6cRSOL4rHiM=
Subject key identifier: F3:D3:EC:DB:FD:4A:12:32:35:19:F7:09:B6:25:DB:A1:6F:CD:00:26
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019A4C9878E1495EA52BE2969CB07723DB53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 1540
Signing time: Tue 04 Nov 2025 02:00:51 +0000
Manifest this update: Tue 04 Nov 2025 02:00:51 +0000
Manifest next update: Wed 05 Nov 2025 02:00:51 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: 99eqQ6JnkQmBdu7oI8GtNLsCxAgZKUGY+h1ucyeAw9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:78:e1:49:5e:a5:2b:e2:96:9c:b0:77:23:db:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Nov 4 02:00:51 2025 GMT
Not After : Nov 5 02:00:51 2025 GMT
Subject: CN=f3d3ecdbfd4a12323519f709b625dba16fcd0026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:54:1c:f2:52:68:02:5b:d2:0c:b6:9e:c2:
cb:65:eb:99:c6:f4:4b:20:67:5f:b8:e6:50:00:b7:
08:3c:01:1b:f8:dd:dd:ec:b8:56:95:d2:81:f0:ac:
c1:57:33:89:42:69:ac:9c:1e:6c:8e:7f:85:1f:f5:
f6:eb:e9:ca:06:54:c1:f6:c2:80:33:e8:ef:7c:fa:
42:7d:0e:47:19:36:7f:6a:aa:26:54:7e:21:db:71:
f1:5b:17:ff:5a:31:1e:b0:be:fe:2b:2e:b0:9a:af:
2d:fa:bf:6d:03:6e:2c:94:b6:28:06:d6:cc:c5:ee:
ab:5f:86:83:92:22:b9:9f:52:ab:16:5e:4a:35:21:
a8:df:cc:ce:42:2e:ca:a2:14:e5:b9:2d:5c:82:52:
89:f7:f0:bb:60:1a:d0:7a:f9:97:eb:9b:76:80:9a:
d9:86:96:ee:4c:32:f9:0e:ef:21:30:b3:ba:5c:9d:
c6:bc:22:8e:b4:b0:74:83:10:8a:8d:42:16:1d:92:
31:5c:c5:03:b2:86:78:a6:e4:f5:84:a7:dd:a7:03:
a1:da:66:41:d1:af:07:6f:44:ab:8e:02:c6:41:ff:
fa:c1:84:5c:a1:b0:cd:f0:6b:b2:ef:ff:7c:4c:ee:
1c:3e:81:21:f6:d8:af:20:69:bb:18:7e:7b:c3:b8:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D3:EC:DB:FD:4A:12:32:35:19:F7:09:B6:25:DB:A1:6F:CD:00:26
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:b8:ce:17:d4:97:a8:cd:69:cb:cd:c4:56:f3:f3:c1:5d:28:
14:f2:9b:fe:52:3a:3b:97:4f:e6:84:52:06:4b:09:ac:77:f0:
e8:d1:96:fb:ef:a4:a5:7e:5f:e9:60:7c:41:4f:38:11:3c:4c:
64:fb:c1:b0:60:ad:f8:0a:07:8f:9e:7e:15:f9:e3:3b:82:e5:
6e:a6:62:bd:27:12:29:79:44:78:3e:4f:fa:17:ce:7e:ce:e9:
f3:7d:44:70:77:12:e9:66:5d:5e:40:70:15:06:b3:6b:79:12:
f0:a0:05:d7:c8:bb:f8:d6:2a:91:d9:24:1d:dc:00:c7:d9:e3:
e7:0e:cb:be:b7:d4:74:1d:71:3d:fc:b8:bd:da:57:66:64:fd:
49:8c:d1:f8:88:aa:1c:5b:63:50:60:45:20:05:b6:2b:f5:7c:
27:f7:b4:f2:62:36:2d:79:4b:09:0b:95:fb:4a:cb:2e:26:5e:
01:dd:5e:87:86:e9:bb:1a:70:c5:fc:e7:e9:59:7b:f2:f4:36:
5c:71:ff:e8:3e:4d:45:7d:21:ea:7b:b9:20:d9:6b:d9:0c:a9:
97:da:8b:0e:a2:0c:34:6e:28:31:c6:3f:c3:7e:9d:6e:16:f3:
24:0f:f9:76:0d:4b:f6:48:a8:f0:ac:32:ea:bd:07:35:21:95:
53:cc:3e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:54 2025 by rpki-client