Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
File: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft (raw, json)
Hash identifier: GfCa7jo5fGzs6vZ0dw34k2MOwsttZxa3o82F368QqBs=
Subject key identifier: ED:DF:19:63:99:E0:09:5A:01:9B:0C:93:14:4F:89:D1:13:52:33:E5
Authority key identifier: D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
Certificate issuer: /CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Certificate serial: 019A72938EC8570840A899D368FD984C5512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
Manifest number: 0E66
Signing time: Tue 11 Nov 2025 11:01:03 +0000
Manifest this update: Tue 11 Nov 2025 11:01:03 +0000
Manifest next update: Wed 12 Nov 2025 11:01:03 +0000
Files and hashes: 1: 1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl (hash: ZMeGJ5tVcCANWb1Arxzbs9xYPpVjzQzBUcddA70sneU=)
2: DJNwK4d1O-0W4wKdXnOfs7vSo0I.roa (hash: 4ioCgLyFFC/qkKUBjTLDnN9rjQ3ov2Q43NX+vQC3BfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8e:c8:57:08:40:a8:99:d3:68:fd:98:4c:55:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d634007414cff16cdcf3a3aa22a96677f8be2b68
Validity
Not Before: Nov 11 11:01:03 2025 GMT
Not After : Nov 12 11:01:03 2025 GMT
Subject: CN=eddf196399e0095a019b0c93144f89d1135233e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:82:be:28:4e:13:87:7c:f8:9e:0f:f3:ab:1a:
c5:2a:d9:d3:93:4b:79:0d:9b:2e:c1:79:28:54:1c:
cf:91:4e:b3:8c:7e:48:0c:3a:64:9c:25:c8:fc:72:
1a:9e:d7:98:8f:f4:29:65:a2:b6:c5:8a:55:8e:f1:
7d:99:68:01:67:ac:c3:08:c2:c8:11:8f:01:92:3e:
a5:61:36:c0:8a:c8:34:29:a6:57:9c:55:9a:00:85:
51:ab:15:55:9f:8a:53:0b:19:53:aa:82:b4:a6:bf:
58:4b:9c:24:ea:62:70:3a:36:21:8b:91:f7:b7:41:
43:e7:7e:8b:6d:ff:f0:90:83:80:48:eb:95:89:0a:
72:a9:e9:6c:7e:dd:99:fd:a6:70:3a:03:7d:f1:12:
c5:05:29:d3:64:f9:ba:db:8a:b4:73:02:46:b8:55:
69:71:0a:4e:17:7c:23:dd:d3:81:aa:7a:77:b3:e1:
0b:62:8d:90:8f:1d:80:dd:2c:61:ea:52:33:25:29:
f3:ca:2a:e4:ad:93:4a:b5:07:aa:3f:33:e1:bf:02:
4b:5f:7b:33:12:59:7f:49:3b:de:80:31:2a:d5:ad:
3b:06:b1:a6:34:92:2d:0a:db:6c:23:86:f2:48:04:
ba:93:8d:84:0a:09:e2:4c:48:d6:65:23:25:7f:7f:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DF:19:63:99:E0:09:5A:01:9B:0C:93:14:4F:89:D1:13:52:33:E5
X509v3 Authority Key Identifier:
keyid:D6:34:00:74:14:CF:F1:6C:DC:F3:A3:AA:22:A9:66:77:F8:BE:2B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jQAdBTP8Wzc86OqIqlmd_i-K2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d030ef-92cb-4cc5-86c8-decb92d1a523/1/1jQAdBTP8Wzc86OqIqlmd_i-K2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:17:cd:aa:ab:7a:16:31:f2:f2:27:c9:3d:1e:a8:42:12:26:
38:48:78:4a:de:22:d4:95:16:4d:18:55:b4:ec:85:6b:10:cc:
1a:0e:c5:42:7a:3e:1d:e5:34:ee:36:24:61:0c:bd:a8:1c:3c:
e3:5c:97:c2:84:fa:40:a4:c0:5c:e5:40:f4:7f:28:f4:96:fd:
5f:ba:a8:67:62:b4:8c:4e:bd:1c:ea:70:86:75:9c:0f:70:6e:
ce:ae:7d:8c:29:1e:5b:b0:ce:7c:57:20:4e:7d:d6:c2:2f:57:
1a:da:42:4c:d4:1e:5b:d5:cf:f0:e4:5b:a8:31:bd:d5:e1:de:
42:52:20:3c:f8:ae:c2:9f:d1:ea:07:4e:5f:18:0f:92:44:25:
05:d7:48:90:a1:2b:0c:6e:c5:11:5c:6f:77:28:15:02:3e:63:
96:32:84:fc:d1:d4:39:7e:7b:fb:20:9b:93:ca:4b:80:31:62:
d1:0e:31:f3:cb:57:87:6d:02:20:d9:54:d1:38:7f:9f:ee:3e:
c3:82:4d:92:64:63:24:92:d6:df:4c:34:12:9b:f5:66:6a:b7:
93:97:86:45:9a:75:8f:0a:c7:96:42:7d:92:43:47:03:21:2b:
31:32:5f:b5:75:30:15:c2:1c:2b:38:86:95:74:32:58:2e:be:
ad:08:4e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:40 2025 by rpki-client