Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: R8j11IXFvtXJ844+7yZBuQKXwW8LLaKN8kEvym8tP04=
Subject key identifier: 0F:0E:4D:4A:98:AF:4F:6A:35:1B:DD:4F:3F:1E:0C:4C:A3:50:F2:FF
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 019A71B7898B6E2ED422155F7AE97DD2F5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 0578
Signing time: Tue 11 Nov 2025 07:00:44 +0000
Manifest this update: Tue 11 Nov 2025 07:00:44 +0000
Manifest next update: Wed 12 Nov 2025 07:00:44 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: VxY6MjaDLItIE08orP+7AAFzSKvy5Uz7SGEShuFRbfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:89:8b:6e:2e:d4:22:15:5f:7a:e9:7d:d2:f5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Nov 11 07:00:44 2025 GMT
Not After : Nov 12 07:00:44 2025 GMT
Subject: CN=0f0e4d4a98af4f6a351bdd4f3f1e0c4ca350f2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bf:af:15:ea:1a:a2:50:f4:d7:31:df:a6:eb:
cd:25:c7:6f:e4:1d:d0:28:c3:f6:44:36:26:52:2f:
00:b5:bd:3a:d7:4e:cb:71:c0:42:7a:a7:eb:b5:18:
3e:59:52:98:c8:fa:d6:b9:f9:ff:16:37:22:18:43:
e3:f0:5d:12:f5:84:28:33:c7:ef:9b:24:79:ad:df:
77:19:00:71:76:49:64:f5:3b:1b:bd:3b:4d:49:08:
92:44:c8:0b:dd:be:f8:e5:43:b0:94:22:6d:aa:ec:
2d:7a:09:b9:5f:28:a2:a4:a2:f6:46:a4:6d:b2:39:
38:7d:f6:de:d0:0e:8b:49:9a:5f:ea:8d:45:5f:9c:
3e:e8:04:c4:39:f3:d2:f2:ba:7b:09:b0:1f:3b:ae:
53:69:89:d6:9b:e9:28:13:1c:db:06:1e:78:76:b9:
ba:c0:76:e3:35:a6:e6:ef:73:27:50:46:32:86:e4:
08:f1:92:17:7e:08:99:4c:84:ff:00:62:5e:4e:d9:
88:ab:6f:1d:7e:bf:da:89:68:be:d9:d5:b8:94:0e:
71:48:57:a7:07:43:c0:7b:e7:69:9a:95:61:aa:da:
b9:89:76:76:6f:2f:ae:3f:e4:3b:63:18:8e:88:5c:
f0:c6:27:6f:f5:e0:42:be:87:13:b7:ce:0d:3c:82:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:0E:4D:4A:98:AF:4F:6A:35:1B:DD:4F:3F:1E:0C:4C:A3:50:F2:FF
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:d2:51:c2:61:27:14:65:2b:c1:31:15:26:c7:e6:50:95:
9b:d2:b8:54:72:5b:37:92:c3:3b:f7:a5:2e:73:a1:63:83:9e:
5f:b9:56:2e:c5:54:bb:f4:18:a6:03:e7:93:ee:50:81:c0:34:
81:52:42:04:3b:b2:41:d8:5c:95:2f:d4:e0:68:f2:87:b8:16:
21:ef:10:bd:f4:2e:b0:77:f8:93:27:8a:1a:96:72:bc:39:15:
46:1a:6a:20:ae:57:a9:7a:fa:14:22:b8:70:8b:bb:e0:b3:e4:
03:f1:6a:78:23:f4:a6:cd:4b:12:67:15:08:8a:36:6a:de:4f:
ac:9e:51:55:eb:19:08:75:16:a5:32:66:c5:77:98:35:a8:1d:
b1:a8:2b:29:c6:d7:6c:56:3e:34:e7:7a:ca:1b:72:18:b0:d8:
d7:64:08:48:61:9e:e5:f2:55:e8:ee:34:1f:dc:ba:82:18:9a:
75:43:3d:02:8b:2b:a6:8a:72:d3:04:42:72:96:44:e8:04:65:
05:03:a6:b7:88:e7:50:2f:bf:94:2d:cb:14:75:6e:96:99:3a:
c0:36:65:50:67:9f:73:fe:72:ea:50:64:46:1c:e2:be:bd:c2:
66:63:df:87:05:21:81:fa:df:23:1b:e6:6e:4c:e5:37:f0:9c:
21:85:98:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:41 2025 by rpki-client