Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: Leng9R/3kl7LgWQ5wrXfn/Z8XgOdu7DRJ0hqPmY4XDs=
Subject key identifier: 52:B7:6F:01:75:E9:58:DD:FB:A7:DE:92:95:05:FB:5A:71:DA:7B:4D
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 019A4EF51D7A1735C638227C4FAA8BED4713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 13:01:17 +0000
Manifest this update: Tue 04 Nov 2025 13:01:17 +0000
Manifest next update: Wed 05 Nov 2025 13:01:17 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: t5l9ObpBJIsXzAptC3kYR3KQbssjpcRkBK2ZkQw/76I=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:1d:7a:17:35:c6:38:22:7c:4f:aa:8b:ed:47:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Nov 4 13:01:17 2025 GMT
Not After : Nov 5 13:01:17 2025 GMT
Subject: CN=52b76f0175e958ddfba7de929505fb5a71da7b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:89:b3:7a:ea:8e:a9:93:45:fa:6f:df:95:50:
98:26:d4:6e:9b:e5:b6:1a:f2:e0:98:23:d0:0b:73:
78:83:3b:ec:8f:fe:0f:26:70:78:17:de:81:79:da:
2f:95:93:67:ad:d5:77:59:47:8d:3a:35:40:28:85:
15:0f:0a:38:be:1a:a1:bf:87:a6:59:bb:c3:a4:ce:
d1:9e:e1:04:29:d1:90:0c:02:8a:b8:0a:be:54:50:
01:fd:6d:5f:88:b8:6b:81:56:70:1d:0a:df:d1:54:
bf:3f:ea:52:22:b1:c6:f6:fc:ed:b7:87:92:c1:6a:
e2:02:32:df:98:d6:92:ae:8a:26:07:f7:44:79:23:
5c:12:34:92:f9:64:0b:23:64:e8:7d:1f:33:15:f1:
c7:2e:9a:76:46:dd:be:5d:2c:fc:79:d2:67:2d:62:
b6:0f:19:dd:16:d9:17:cd:1a:55:aa:1d:d4:a6:22:
28:ae:97:bf:26:33:4d:50:a1:c5:74:19:3e:53:40:
dd:14:4a:3b:aa:f4:a0:15:91:15:8e:9f:09:38:ff:
04:1d:77:94:cb:b1:12:8b:84:11:4e:ff:4b:74:e8:
4d:22:f2:9d:7c:1f:e8:49:9a:6c:7c:af:dd:7c:e0:
76:62:90:1a:d9:2f:14:1f:b5:21:45:71:db:e7:c1:
01:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B7:6F:01:75:E9:58:DD:FB:A7:DE:92:95:05:FB:5A:71:DA:7B:4D
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:3d:16:94:6c:ed:7b:78:69:0d:10:c6:eb:df:4b:6a:73:91:
e3:90:76:0e:6e:29:63:14:c3:04:41:3f:ac:f3:f9:e1:a6:9a:
3d:af:70:c8:26:08:6f:d9:a2:be:72:20:d1:ed:b5:05:b1:c5:
98:a6:fa:04:10:96:fd:c0:92:20:53:5d:01:53:7e:9b:87:12:
3f:f1:4e:c0:89:55:33:84:09:35:46:03:56:ea:00:3e:02:cd:
e9:87:5c:1f:26:b8:ac:4c:85:b5:80:ae:68:ec:98:5f:be:eb:
ef:75:7b:4e:b7:13:ae:e4:da:19:20:7b:5f:c2:8a:f9:06:ea:
ac:bf:6c:3a:ef:bc:61:24:c9:e4:b7:16:c7:74:1a:7a:bd:ce:
e4:37:c6:1e:ce:0a:8f:e6:bc:1e:dd:1f:a7:f8:b1:1a:de:6f:
06:23:e1:50:ed:cb:55:28:f6:8c:17:17:03:88:28:88:0c:6c:
84:17:5b:2c:98:40:1b:8f:3b:61:da:e9:2d:eb:38:cc:f6:60:
cb:b9:96:ff:62:48:a0:9c:e4:d2:b3:64:5b:63:48:95:13:94:
22:a4:d0:c7:d7:d5:1a:f2:b6:99:83:92:e4:74:6f:59:09:a5:
86:7c:b5:72:53:25:a1:9c:94:5a:4d:ca:fe:60:bf:4f:da:4c:
ce:a1:d2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:34 2025 by rpki-client