Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
File: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft (raw, json)
Hash identifier: pvfLCgYwKZoc45IM4FlR1yis6+yxeymx7oh2M4fQDDQ=
Subject key identifier: A3:04:EE:54:D8:CA:A2:A3:BD:15:54:07:88:F8:3B:2A:F4:78:AA:C4
Authority key identifier: F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
Certificate issuer: /CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Certificate serial: 019A1E0790139FA41B04D8ADD9B2E4764785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
Manifest number: 1721
Signing time: Sun 26 Oct 2025 01:00:03 +0000
Manifest this update: Sun 26 Oct 2025 01:00:03 +0000
Manifest next update: Mon 27 Oct 2025 01:00:03 +0000
Files and hashes: 1: 1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl (hash: LxLzpp1lP+f1q4Sw5FXkcdcGiuBAJns49SxfdRhTh3I=)
2: 6ZeRNkK2gfkBTq-HCKi4E0wDn0g.roa (hash: EG2r/8KWDUcCkyQHYwdunKSI5bgRdtrDYdyzMOQ6sPg=)
3: 7zkL6is6uiT0K6jbnHgG4_foxLs.roa (hash: 7s5RovPfiSb41Rd6Pj/MwhULMmTO5+df4JKH36bwQEY=)
4: OtQ48GIqhoV8BbHUJtSPHtzr3bM.roa (hash: Qd9IkkyUrKLcvFwMqdzhvX7YcnKe2XLSIuFWdUOxwyk=)
5: RDfRFkINmnxAYr0i5lo-RrZfvvM.roa (hash: OK1hJOOaClcL1ul04CJbPRYEerL2hSCv/3xJn1BxpKo=)
6: W-3pllcOO_r6leZFXqyl0NNm9Ww.roa (hash: cCQm6IWECwZhgYdkg5jkkG+WaaUJSwWYVhY2RXgyFBM=)
7: gwNf7hRUcUlc_WP0obY5q2dBbnQ.roa (hash: rRyAeqxP/tdvl1xFzDmcY8amsglq1slf48aSCQfMHSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:90:13:9f:a4:1b:04:d8:ad:d9:b2:e4:76:47:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9856d674f0e9dbf6012d5b5d3d96b43afd76473
Validity
Not Before: Oct 26 01:00:03 2025 GMT
Not After : Oct 27 01:00:03 2025 GMT
Subject: CN=a304ee54d8caa2a3bd15540788f83b2af478aac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0e:73:24:24:bb:31:c8:c1:32:e4:d0:7f:03:
d5:e3:65:f8:c5:50:98:08:a7:a7:c7:96:78:6a:f2:
34:8d:75:c6:34:4f:31:56:5b:59:d8:ee:4c:70:59:
70:39:06:a0:2a:84:86:d0:2a:e4:39:d5:57:d9:f0:
32:1a:79:d4:bd:db:17:24:62:3b:df:db:19:84:bf:
51:72:75:77:40:77:c8:36:cd:5f:6c:94:29:b4:32:
b1:eb:da:b9:7a:0f:a1:7c:c0:52:05:ab:97:18:f0:
2d:6a:92:d3:95:eb:56:90:5a:13:d4:04:c1:75:e9:
fd:3c:8c:9c:a8:10:26:c8:26:20:15:6d:68:04:af:
fc:93:74:1c:1b:ec:ca:69:a2:85:bd:fe:98:6d:08:
33:2e:21:32:7c:7f:f1:a2:8b:a2:5e:f7:38:d8:bd:
30:fd:3b:90:c8:ab:41:6f:71:3c:95:38:50:9f:f5:
51:ef:fd:53:a5:d1:22:d1:18:4e:14:45:39:46:07:
bf:64:06:2f:e2:5a:83:d0:b5:37:e1:fb:29:72:30:
6c:08:18:83:38:35:1d:d4:bf:01:0a:54:9f:39:10:
8f:d5:93:16:3f:a3:08:59:4c:f1:47:75:6e:6b:78:
db:71:a5:8d:9a:c1:f5:24:d7:64:1c:14:7e:94:25:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:04:EE:54:D8:CA:A2:A3:BD:15:54:07:88:F8:3B:2A:F4:78:AA:C4
X509v3 Authority Key Identifier:
keyid:F9:85:6D:67:4F:0E:9D:BF:60:12:D5:B5:D3:D9:6B:43:AF:D7:64:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-YVtZ08Onb9gEtW109lrQ6_XZHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/9f9590-7f0a-41b3-ac4f-efd14db957fb/1/1-YVtZ08Onb9gEtW109lrQ6_XZHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9a:32:ca:c6:89:ee:69:2d:b8:59:a3:ec:25:7f:96:e8:ba:
09:12:51:b5:8a:c1:4b:00:26:3c:9d:a3:62:f5:de:2e:47:9d:
b9:96:94:5e:10:21:d1:85:f7:d9:09:97:f0:c2:d1:ca:3a:cf:
0d:a1:f0:e8:2e:20:f4:e9:fc:66:c6:8e:8f:10:18:db:79:b1:
66:12:1c:e1:14:a0:e9:8d:be:ab:bf:e8:93:5a:6a:20:6f:63:
db:c4:db:73:c0:35:60:64:62:e4:18:bf:f4:8d:8e:94:fe:c1:
c2:8b:f9:df:b6:45:bf:23:1c:bb:6a:40:af:a3:cb:fb:af:0c:
f0:80:97:fa:0f:78:8c:6e:e6:95:13:76:3f:61:01:cb:a0:da:
c2:ed:d5:aa:03:19:75:b8:22:3c:1f:0c:ac:17:d3:21:ee:52:
a8:f3:60:82:3a:39:16:99:24:5b:b5:e9:d6:87:9b:c5:40:bd:
73:ac:02:4a:ab:22:25:ac:7c:e8:f0:a1:98:97:5c:70:82:bf:
3a:e5:f3:fe:64:4b:ac:f9:61:f7:f1:16:af:48:02:0d:ac:b6:
85:f3:f8:aa:90:7f:3c:d0:26:31:33:1d:cb:fa:30:56:f6:cd:
44:5b:d9:ce:f9:90:6d:90:d2:4e:6a:59:a8:74:78:f8:d6:cd:
b8:44:b7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:35:14 2025 by rpki-client