Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: HRvgZJEWncCp9TEPCHX4FyO2MYMPLBEC3sMTK6RgpX0=
Subject key identifier: DF:ED:03:96:EF:BB:28:CC:BB:87:EC:D7:51:59:B0:2E:12:15:81:A4
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019A71EEC5F362E0882658E3EDC54893C0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 08:01:04 +0000
Manifest this update: Tue 11 Nov 2025 08:01:04 +0000
Manifest next update: Wed 12 Nov 2025 08:01:04 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: XtqYUobTz6JmHxQVbQTRwHxUbNgIibLyI4H4ux7e7Sc=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c5:f3:62:e0:88:26:58:e3:ed:c5:48:93:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Nov 11 08:01:04 2025 GMT
Not After : Nov 12 08:01:04 2025 GMT
Subject: CN=dfed0396efbb28ccbb87ecd75159b02e121581a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c0:21:89:6e:22:2c:ee:1f:b2:85:b2:a6:ec:
c3:f3:e1:4b:d1:7c:c4:84:7b:36:d3:ac:34:86:51:
dd:e1:41:bd:01:ee:e3:34:1c:68:0a:4b:df:2a:8d:
d1:45:0d:61:7d:37:8c:19:87:3b:d8:27:33:8c:74:
04:c6:7f:e2:79:d4:1b:8b:75:e1:42:08:74:bc:3d:
25:2f:05:a2:9d:0f:f2:d6:56:d1:8b:05:bf:d1:35:
4b:73:ae:ac:4a:15:c8:93:47:d8:35:83:53:e0:e4:
1d:cd:48:6f:72:ee:50:0e:0e:ad:1b:13:97:38:aa:
22:da:4e:4e:d9:05:26:55:45:27:01:12:cd:73:71:
0c:76:51:e9:17:8b:cd:d1:6a:97:f2:b5:8e:4b:06:
6c:e2:09:98:86:7e:ad:47:f3:9d:91:34:c2:9b:04:
7d:2d:3d:ab:02:96:fe:ff:54:c8:5f:1b:9f:5c:d9:
64:d2:12:7c:3f:a1:2f:5d:f5:93:ef:6d:90:32:c2:
a4:a4:d9:0d:65:a1:69:2f:19:39:ec:77:0a:63:33:
10:50:2f:d1:60:5b:9f:41:3f:4e:ed:37:61:f0:67:
8d:69:93:a0:3b:3c:6c:f4:77:18:b4:d5:c0:ec:73:
ba:62:35:03:f3:92:e6:91:81:38:5d:78:90:a9:7f:
f0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:ED:03:96:EF:BB:28:CC:BB:87:EC:D7:51:59:B0:2E:12:15:81:A4
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ec:d2:59:c2:29:3b:4d:ca:44:3d:90:93:17:35:ed:3c:92:
9e:72:7c:c3:55:08:91:a2:8c:42:fb:fe:5c:e2:b7:09:66:62:
6f:25:7f:ad:7b:7b:52:6e:9a:e3:ca:f2:37:71:b4:b5:08:a7:
9f:b0:c3:24:ca:cd:3f:5f:4a:a7:55:65:e3:b5:c5:e2:06:72:
ff:39:d3:fd:4d:a6:45:3b:bd:bc:00:d8:66:8e:b9:67:2e:ad:
fa:3a:d0:aa:00:8e:9c:14:cf:d3:23:39:f0:78:39:68:ec:a6:
4b:3a:bf:a2:a1:05:fd:e6:e7:28:8b:44:87:a6:c8:a9:b6:91:
56:aa:0e:a8:58:5c:21:a3:4b:71:17:94:fa:88:90:99:60:13:
d6:2c:da:bd:ef:e1:78:82:ba:ea:03:4a:15:74:1b:f6:7c:c4:
ad:bd:09:a3:e0:0c:e9:e5:68:6d:13:36:89:2d:bd:47:6a:24:
e4:ed:17:5c:fa:26:bc:0d:ca:6c:0c:3c:1e:ab:43:2b:ef:2a:
e9:3c:96:c9:86:cb:a0:e5:b9:32:db:d6:00:24:b5:16:fe:cf:
9a:00:2b:d0:bf:e3:44:ac:95:1f:4a:45:ce:5a:9a:a9:4b:cc:
a3:bb:9c:a4:9b:cb:d0:30:85:dd:f2:1e:50:76:10:8c:65:0b:
d1:d3:7a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:10 2025 by rpki-client