Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: bVYsgYpChq5Ll4G9l8B5V7e3h/yuJSK2rbtXW04zfKo=
Subject key identifier: 0A:96:27:91:14:F9:3F:DB:8D:30:52:8F:35:5D:B9:03:14:D1:A7:BA
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 019A7293BC445E1E8E7D036CFAC2F5DDA677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0D46
Signing time: Tue 11 Nov 2025 11:01:15 +0000
Manifest this update: Tue 11 Nov 2025 11:01:15 +0000
Manifest next update: Wed 12 Nov 2025 11:01:15 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: OPRkN3qgXo57/0TSgGwf08KIFxC2X+ep+4q3uoqFSeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:bc:44:5e:1e:8e:7d:03:6c:fa:c2:f5:dd:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Nov 11 11:01:15 2025 GMT
Not After : Nov 12 11:01:15 2025 GMT
Subject: CN=0a96279114f93fdb8d30528f355db90314d1a7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:eb:b8:0f:02:dd:4f:07:5f:5c:77:2b:d5:2b:
2c:36:99:3f:ba:ec:50:e9:32:5c:a2:76:b8:d3:0f:
8d:9f:de:5d:d8:94:65:aa:69:34:a6:7d:d2:06:95:
1a:49:ac:14:06:4c:a9:a2:62:fc:5c:15:f5:91:1c:
b5:75:d0:e0:ac:43:d7:de:ed:f5:47:8a:48:ff:f2:
b5:ce:b0:38:a9:7b:03:d2:99:91:f0:48:21:8c:7b:
d0:08:39:e3:05:0b:0f:50:54:af:1e:4b:5e:a4:f4:
c2:61:ac:39:65:4d:88:47:da:d7:42:b6:83:0f:6f:
70:7b:be:2c:f6:3f:54:c0:f0:9d:f7:5a:ef:ea:3a:
fb:ff:14:d3:12:90:b1:5a:42:41:9b:91:51:34:e1:
23:68:99:df:7d:08:06:58:ef:c4:19:62:57:e0:19:
d1:fb:f6:99:41:9b:75:ae:97:8f:f4:35:99:41:4d:
aa:7e:65:55:fd:a6:aa:e8:2c:f5:90:c0:bd:20:04:
a6:d6:71:11:09:16:0c:07:25:c6:22:4f:6b:c9:29:
08:80:ea:dd:6d:49:1f:f2:a6:f3:11:19:0a:fa:e1:
ed:92:8b:ac:4b:87:f4:f5:16:f8:9f:e4:47:f7:84:
14:58:2e:ea:49:b1:f7:75:c5:bb:cd:38:40:70:3f:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:96:27:91:14:F9:3F:DB:8D:30:52:8F:35:5D:B9:03:14:D1:A7:BA
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:91:c0:8e:d1:b8:91:d3:54:4c:56:0d:05:a3:23:c9:16:c8:
df:bd:ae:25:a4:f1:89:d7:ad:dd:4b:54:66:60:36:31:f3:44:
5d:5f:92:ca:f8:9e:4b:c6:ad:11:79:23:b0:1d:5b:b9:39:ce:
fe:df:6c:8d:04:90:92:ff:6f:82:8a:49:6b:93:73:dd:9e:7d:
61:6b:fb:39:94:f4:54:df:8d:b7:1b:33:80:0c:dd:8a:df:df:
f9:49:79:8e:5b:25:a1:ca:60:d0:7f:13:f9:5b:da:76:43:f2:
d0:e2:eb:8a:90:1c:7b:dc:30:ca:5c:c4:80:9f:37:6e:de:b0:
75:71:53:9e:b8:b5:65:69:0b:74:9c:c2:6c:0e:40:db:90:67:
e6:3b:41:d5:56:aa:6c:87:d3:97:62:13:3b:07:8f:2f:14:bf:
c7:c2:89:b2:db:40:51:fe:54:bf:63:db:89:64:1f:ce:07:79:
3b:7d:24:08:34:4d:5c:ac:02:bc:af:63:18:3c:3d:e7:5d:20:
e0:5f:ae:ea:29:54:3d:84:51:bd:1a:fd:cf:4f:6d:89:84:a2:
41:94:c5:e6:a7:40:cd:fa:c6:69:46:c9:77:c1:50:8b:50:4a:
d1:03:22:bb:32:b1:1c:42:66:ce:6e:89:3a:5c:50:61:c7:22:
9e:0a:93:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:34 2025 by rpki-client