Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
File: 24oKPWpEpYME4bHb9i5dehaziHo.mft (raw, json)
Hash identifier: P6oOgEs6n4nuHGj00tIE5lC1G7aaOsr/Lv5SKawnOk4=
Subject key identifier: 15:D9:C2:A8:D6:F4:03:66:9F:A5:0D:6A:81:98:24:0C:8E:06:05:A1
Authority key identifier: DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
Certificate issuer: /CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Certificate serial: 019A725C7424AB7EE939C7DC5B7D49193E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:52 +0000
Manifest this update: Tue 11 Nov 2025 10:00:52 +0000
Manifest next update: Wed 12 Nov 2025 10:00:52 +0000
Files and hashes: 1: 24oKPWpEpYME4bHb9i5dehaziHo.crl (hash: JmRYRjVZ+xy0Fuxrw1ihgBceV9CPzH3Ca39dJdm0D0s=)
2: wHHMwXNW_N83G6X6FvCX0cxSHMc.roa (hash: EDHNa2I735GRLd+NXqVnh5LuTlV6xmWH1ELRRt1kANs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:74:24:ab:7e:e9:39:c7:dc:5b:7d:49:19:3e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8a0a3d6a44a58304e1b1dbf62e5d7a16b3887a
Validity
Not Before: Nov 11 10:00:52 2025 GMT
Not After : Nov 12 10:00:52 2025 GMT
Subject: CN=15d9c2a8d6f403669fa50d6a8198240c8e0605a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:ce:cd:be:0e:45:d1:48:4c:31:c3:e5:bd:
ca:e6:9d:1f:51:bf:cc:a3:9d:24:f4:ba:0b:ec:7f:
00:5b:09:e2:7d:8f:f6:27:9f:25:fd:5e:06:32:fa:
4c:e0:e2:78:fe:eb:b8:06:7c:b3:7a:68:02:1d:fc:
bf:23:41:df:34:4d:b7:b1:0c:fe:49:c6:f7:3f:38:
cf:f0:ab:69:2a:ac:ad:f6:bb:e1:52:48:02:e1:c1:
59:b7:e0:15:fa:b8:c0:fb:e3:55:71:c6:bf:4d:95:
87:bc:1f:ac:b1:fa:a3:4d:89:4c:10:7c:d1:21:96:
a4:ef:a1:1d:b9:1f:cd:aa:ab:b1:b4:f3:f4:2b:11:
b0:3f:91:db:96:7b:cb:fb:0e:b2:88:46:00:bb:72:
c6:37:85:91:21:7f:26:69:35:86:39:a7:4c:96:fe:
22:62:ed:89:95:5d:d9:1f:59:e5:a0:04:a7:16:76:
a1:d7:ab:e8:88:00:ea:f3:27:b6:1f:23:6e:28:ce:
1b:f0:51:08:6a:1f:3c:98:d7:1f:c3:5c:f4:71:67:
b8:b8:5f:9b:bb:8f:bd:49:c2:b3:78:78:df:00:57:
af:43:59:dc:31:55:93:66:e0:2a:64:60:80:24:e3:
b6:d1:18:ce:19:ef:e7:b2:ef:c8:4a:1d:02:56:2e:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:D9:C2:A8:D6:F4:03:66:9F:A5:0D:6A:81:98:24:0C:8E:06:05:A1
X509v3 Authority Key Identifier:
keyid:DB:8A:0A:3D:6A:44:A5:83:04:E1:B1:DB:F6:2E:5D:7A:16:B3:88:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24oKPWpEpYME4bHb9i5dehaziHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e5a253-19cf-4ce8-9c5c-56c6d551a932/1/24oKPWpEpYME4bHb9i5dehaziHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:be:16:0a:2a:41:6d:59:70:bb:81:03:6f:ea:a9:63:ba:62:
42:43:4d:6e:8a:f6:ac:28:ca:c7:40:5a:04:2c:f8:9c:85:69:
f5:61:4a:6c:c4:be:91:ab:c4:5d:ec:2f:1e:18:f0:f3:cd:dc:
77:97:86:c1:2c:03:30:76:9a:bd:ba:13:79:17:54:38:fe:74:
d5:56:e6:29:bd:a1:4a:b7:7c:74:73:a8:42:1f:06:e1:cf:a8:
b1:ec:18:49:4d:d6:b4:66:90:7b:8e:c6:3b:7e:32:19:6c:6d:
90:f7:15:ac:65:cf:e9:86:15:72:87:06:ff:f1:33:c1:74:8c:
6e:15:93:08:6b:23:d2:d3:bd:eb:7f:40:fd:42:fa:0a:55:b3:
0b:56:05:4a:4b:6e:7a:da:fc:6b:39:83:f7:0c:86:ae:86:18:
f2:8b:48:c8:09:9d:5b:f1:9c:45:ef:99:84:58:82:f0:f0:94:
d9:e7:92:f1:79:71:e8:da:5f:59:52:64:3c:87:aa:4a:45:7c:
51:f6:11:7c:d5:55:a5:a0:51:a7:57:14:e9:8b:f1:5c:33:2b:
57:85:79:ef:ff:2e:7d:e5:4f:12:de:97:75:17:bd:d4:2b:10:
c5:1d:12:83:df:bf:69:59:09:1c:0d:67:52:43:8b:b4:60:81:
f2:a6:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:37 2025 by rpki-client