Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
File: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft (raw, json)
Hash identifier: EHdJsc/+3RERIoeaqR8RMKhbYfgXxRo7n0rM8zbf0+4=
Subject key identifier: 09:BC:5B:12:B6:F2:A2:58:0F:17:D7:48:EF:79:0A:49:72:2C:FC:75
Authority key identifier: D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
Certificate issuer: /CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Certificate serial: 019A5074C0E10FF89D36E9C46E2646A1A758
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
Manifest number: 0C55
Signing time: Tue 04 Nov 2025 20:00:19 +0000
Manifest this update: Tue 04 Nov 2025 20:00:19 +0000
Manifest next update: Wed 05 Nov 2025 20:00:19 +0000
Files and hashes: 1: 1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl (hash: WLNZ7B4sBGTpH7rcN0WQ3sa3pK6fGbTkmqa/8gX4Lv4=)
2: It-Yns2Nwvw18OgbQ81pWbtQZ7M.roa (hash: 7H+X0erT0owXhcTltBjLEsiIIl6BxhT41pVVMePz04w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c0:e1:0f:f8:9d:36:e9:c4:6e:26:46:a1:a7:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c0d694d59d7d36ba421a3050f4ec7dd3781efd
Validity
Not Before: Nov 4 20:00:19 2025 GMT
Not After : Nov 5 20:00:19 2025 GMT
Subject: CN=09bc5b12b6f2a2580f17d748ef790a49722cfc75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:b7:7a:9f:86:61:00:63:8b:04:d2:c2:06:
a9:9c:82:1f:90:17:6a:2b:34:0b:3d:02:8e:47:48:
7c:44:91:18:c3:99:97:1a:fe:d7:d3:9b:e8:02:09:
cb:3b:af:6f:5e:3d:52:d3:9e:10:f5:02:d3:38:94:
eb:ef:fc:bd:09:ed:1d:a9:4a:7a:16:22:06:c5:73:
fd:68:6d:68:eb:c5:f6:54:29:6c:58:21:09:19:30:
5f:05:43:31:08:19:76:a0:20:bd:89:69:15:47:c6:
98:70:ed:41:07:5c:d1:7b:2f:f4:d1:cd:6f:f0:2d:
8b:4f:7f:40:8b:af:2b:1d:02:71:d9:b7:fe:e0:8f:
15:02:be:5e:43:a2:fa:98:93:ca:17:73:19:0a:22:
0a:91:1c:b9:ff:c2:fe:c2:55:41:fa:2a:06:89:ac:
88:bf:1d:e6:50:ef:b3:95:b8:34:44:05:da:6d:92:
2c:93:4a:5e:0e:17:f7:4d:97:58:c9:c6:02:67:42:
2a:bb:12:72:c0:f2:9c:ac:a0:35:82:04:c1:74:0a:
50:e6:a6:c6:01:fb:bb:91:b2:29:d6:3d:5d:c1:89:
fd:19:42:8e:ee:44:b9:f7:1f:21:b0:4c:48:58:f0:
c7:93:e3:3a:7d:f4:57:39:5e:f6:0e:61:36:71:1d:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BC:5B:12:B6:F2:A2:58:0F:17:D7:48:EF:79:0A:49:72:2C:FC:75
X509v3 Authority Key Identifier:
keyid:D4:C0:D6:94:D5:9D:7D:36:BA:42:1A:30:50:F4:EC:7D:D3:78:1E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MDWlNWdfTa6QhowUPTsfdN4Hv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/41ccce-acd8-4fb8-b148-a79510e613e8/1/1MDWlNWdfTa6QhowUPTsfdN4Hv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:57:80:85:41:64:b5:6e:f3:11:76:05:90:39:33:4a:5b:8c:
bf:fa:83:d7:38:95:ea:9b:98:1b:1a:8e:f4:d8:a0:1e:e7:82:
e4:f1:b5:8c:bb:fa:61:93:2c:84:d3:2f:e6:68:80:77:c6:85:
72:60:5c:90:09:ce:04:4a:18:26:3c:64:e6:c2:09:a2:ba:00:
80:7c:3d:7b:65:4e:37:17:c6:2e:07:77:28:b4:63:e2:10:08:
ae:a9:b6:6d:62:1f:d3:5a:10:ce:da:4e:be:b2:50:55:f4:15:
3b:52:75:44:1f:01:bb:ee:49:ad:34:15:15:d8:cf:8a:bd:31:
c0:18:51:66:a8:1d:86:a3:ef:eb:3d:b1:3e:3c:73:b9:6a:49:
2f:00:06:16:57:e0:a1:c6:2d:40:a7:36:1e:69:88:3e:53:8b:
f5:a3:ea:e5:84:c4:b4:04:de:5c:70:c2:e7:59:a2:5b:9a:cf:
d4:ec:bb:92:d0:90:52:7b:78:44:2a:61:81:51:43:fb:a3:da:
a4:38:a3:02:43:40:75:97:46:8b:dc:de:2a:d1:79:56:f1:d1:
24:cc:d1:b8:9a:59:a3:84:e8:cb:2c:07:2e:a7:f9:67:4b:2e:
1c:1f:9b:83:40:81:89:33:97:8f:63:2f:63:09:b7:74:65:7c:
b2:12:45:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:12:32 2025 by rpki-client