Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: TUrBW1wUTWbwrnS8f0B6KIcSeVITGacQykBstfYL0s8=
Subject key identifier: 94:2D:19:D2:36:42:25:E1:E6:47:9E:DB:F5:6A:B1:9A:1A:EF:83:94
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 019A725C468C0F0471032DCA1336A315273E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 03A5
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: C9qFa6dKfHT3AN+L9eSH5IQn3gK9e33Cj2OCSPW1Q5I=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:46:8c:0f:04:71:03:2d:ca:13:36:a3:15:27:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=942d19d2364225e1e6479edbf56ab19a1aef8394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:de:33:56:48:d2:c2:fc:71:2f:e2:49:1c:1b:
56:73:35:a7:6f:5e:b7:8f:71:b9:bc:24:eb:a1:cf:
c7:c7:65:8f:b2:3b:0d:da:e6:2a:4a:37:a8:56:ad:
c9:13:c9:3e:41:03:72:96:84:b7:5b:e6:fa:8e:5b:
5d:10:b4:63:a2:20:7c:d0:7c:f1:69:00:6b:18:a3:
b4:57:83:c4:45:4a:11:f8:82:44:c0:81:0f:f9:08:
c4:a8:66:e7:67:8e:ee:ac:23:f0:9e:fe:3a:56:63:
3f:6b:21:d0:81:14:7f:00:88:03:c1:be:cb:bf:6b:
d2:5c:ff:18:5d:52:ad:14:92:ae:61:ed:d0:82:79:
9a:b1:e9:6b:b8:fa:9f:1a:74:cc:a0:86:c6:53:60:
8b:91:2a:b2:02:9c:32:4d:82:07:42:06:48:80:c1:
d2:a4:7c:2f:5a:8f:47:4d:f2:e0:e9:9b:f0:db:84:
cb:d1:34:8c:25:4f:f7:9e:a4:45:44:e8:6d:9f:e0:
68:ef:5e:65:09:bc:91:7a:16:5d:f1:1a:d8:75:7c:
34:ad:dd:0b:37:98:c1:51:39:b6:99:a6:27:dc:95:
7b:d4:c5:37:bb:8c:dc:71:90:ca:2a:56:b5:0f:2c:
61:be:fe:72:46:ca:b0:8e:5e:e4:78:04:f6:af:8b:
42:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:19:D2:36:42:25:E1:E6:47:9E:DB:F5:6A:B1:9A:1A:EF:83:94
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a7:0a:d4:5e:e8:18:75:00:ec:76:91:31:59:d3:a4:86:17:
fd:d9:28:52:19:3a:bc:18:ac:25:b1:f7:70:76:e5:dc:38:33:
6e:43:a3:f9:b4:c7:58:bb:09:55:2b:5d:64:50:50:27:67:d6:
b4:d0:77:72:aa:34:32:c5:71:0e:20:64:58:f3:3f:79:17:cb:
cf:79:63:c3:a2:d4:78:e2:fa:53:f3:03:99:c8:e4:5c:07:15:
4d:14:c0:44:32:89:33:0c:05:f8:46:7c:8e:24:2e:0e:ed:3b:
43:b2:cb:4f:9d:95:c9:d1:cf:95:f2:92:1a:87:e7:95:35:92:
b6:75:c7:03:17:a8:b1:c4:7e:be:ce:55:32:26:0f:c3:5f:35:
d6:51:cb:31:e9:e5:b3:40:2f:a9:24:98:e3:b5:6c:96:33:de:
93:d8:a9:0b:12:de:da:49:b8:ef:86:14:04:fb:71:cd:fb:92:
20:e4:e8:40:23:ed:02:5f:fe:45:c2:77:aa:68:2c:03:08:f5:
9b:d1:e9:72:e8:c3:f4:e1:39:b8:46:5a:e9:17:7e:a5:e5:fc:
81:63:c2:c6:5a:b2:e6:0c:1e:e6:7d:2a:e6:77:c1:c4:3a:28:
d4:99:f9:71:d5:ad:58:d6:78:eb:0f:7f:dd:7d:0e:f2:31:db:
31:84:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:43 2025 by rpki-client