Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: NDdT8QWPXngGBf2cWYoklcZJucZkMnJWf+aOkbd1XP8=
Subject key identifier: 8F:28:EE:61:FD:35:5F:74:EA:08:41:81:53:73:4C:23:C1:2F:16:ED
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 019A71EEE2935A7EE70DE6562FC0C9B63DDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 020C
Signing time: Tue 11 Nov 2025 08:01:12 +0000
Manifest this update: Tue 11 Nov 2025 08:01:12 +0000
Manifest next update: Wed 12 Nov 2025 08:01:12 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: Bajytbn+pGbQ5J9Na68m5H+A+Vt4KDM8978Jeyex43k=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:e2:93:5a:7e:e7:0d:e6:56:2f:c0:c9:b6:3d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Nov 11 08:01:12 2025 GMT
Not After : Nov 12 08:01:12 2025 GMT
Subject: CN=8f28ee61fd355f74ea08418153734c23c12f16ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b6:25:fd:b8:d4:b0:59:c4:18:c6:75:f8:74:
cc:9d:87:96:de:da:c3:62:35:cc:c5:8a:2e:4a:61:
6f:de:39:4e:3b:70:34:06:83:a8:ef:3c:5f:28:18:
20:b5:d2:7b:f0:7d:32:07:1d:d4:72:14:8e:5d:04:
cc:34:ec:80:ca:1a:30:b7:d3:bb:6e:05:48:8f:2a:
77:9b:b4:3f:1f:16:ad:e7:cc:fa:c8:07:21:3d:fd:
8e:c0:5b:db:99:45:0a:b6:6e:34:0f:3a:e7:c0:a1:
fb:f9:cc:9c:9d:88:10:31:28:a5:f6:1e:7e:c8:59:
cd:de:2f:58:bf:02:02:e2:81:98:d6:99:db:09:bc:
5b:00:43:ef:db:d2:ab:46:61:12:14:7a:26:81:fa:
a6:cf:fb:4a:15:37:68:fc:84:36:a4:ea:c7:cc:18:
9a:88:de:da:3b:a6:93:d5:23:25:9c:ee:ff:9f:f7:
c7:b5:46:e8:dd:44:8d:1f:e5:74:35:7a:52:c6:2b:
1d:52:6d:f2:c0:5a:d7:c5:af:76:83:43:6e:0e:73:
5d:e9:ac:85:a9:37:e9:72:38:cb:a8:88:2c:bb:bb:
7c:d3:4c:e9:d0:69:d1:00:0c:df:ef:f5:c8:84:08:
f5:89:74:2f:5a:69:03:86:97:5d:06:d7:86:5b:5d:
67:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:28:EE:61:FD:35:5F:74:EA:08:41:81:53:73:4C:23:C1:2F:16:ED
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:e2:dd:92:53:c2:a9:d3:c8:de:66:e2:ec:cb:8f:a0:3d:fb:
96:4a:95:0e:83:31:59:5c:1f:88:cf:30:3d:e6:86:fd:ea:29:
0f:5c:52:3d:d0:ea:b4:1d:c1:ba:19:89:e0:95:45:2b:d9:83:
d2:1c:68:8e:3f:ec:d8:f8:7f:d8:21:d3:e6:f3:ca:d7:84:42:
87:91:53:4d:7d:94:5b:4e:d5:2c:e7:ad:1e:73:91:82:a8:6b:
a8:ad:9f:55:55:07:cb:23:d5:f9:26:bd:be:cc:bf:08:2e:ed:
5e:05:c6:d9:20:56:03:07:ea:c2:ce:30:7e:24:09:e2:cb:a9:
11:ed:ce:ff:94:97:42:d2:c6:62:9c:48:46:9d:c6:72:6e:d8:
15:5e:5b:c9:05:cd:f9:5c:12:c2:15:20:a0:d5:bf:bb:21:12:
c5:dc:08:fc:9a:3a:20:42:06:e3:0f:20:0a:63:1b:87:6e:a7:
0a:c9:e5:55:1b:57:5f:a3:11:ed:f8:58:b1:83:84:1e:3f:f0:
e2:b2:2e:28:b6:88:46:03:ac:d2:1c:e2:48:ed:67:56:a4:d0:
e1:30:7a:cb:ed:2a:99:d6:11:4d:b4:54:88:f1:12:75:4a:d7:
8c:9a:bd:be:76:a7:7d:26:91:69:44:1a:c1:61:50:4d:62:4d:
27:ec:a3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:55 2025 by rpki-client