Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json)
Hash identifier: pMdZTXocsul5NriwfFzYV6LTD9qQnfd/V1749RG4nDw=
Subject key identifier: A3:57:29:AB:0E:23:A9:17:BF:65:FB:6C:B1:FB:D8:14:F5:5A:C2:53
Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Certificate serial: 019A70DC5E08AF8CC9014D5C1D6E3BA04E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
Manifest number: 0200
Signing time: Tue 11 Nov 2025 03:01:21 +0000
Manifest this update: Tue 11 Nov 2025 03:01:21 +0000
Manifest next update: Wed 12 Nov 2025 03:01:21 +0000
Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: 6iEOJzW23NS6ztGluR/pszlzPGSb/hIJRAjmWN/7JJk=)
2: sq3j0A4FF53FDnj1cQeAQwKHwYY.roa (hash: nIuc2CbfmY1z7G8hRZW0vMUbc2VvwrAvS4OcpulV6G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5e:08:af:8c:c9:01:4d:5c:1d:6e:3b:a0:4e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8
Validity
Not Before: Nov 11 03:01:21 2025 GMT
Not After : Nov 12 03:01:21 2025 GMT
Subject: CN=a35729ab0e23a917bf65fb6cb1fbd814f55ac253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f5:f4:5c:21:22:8c:8a:6d:4d:22:4c:f5:a1:
0b:ba:e6:06:e9:dc:58:42:66:fa:ce:49:38:68:b0:
59:3d:63:95:ea:26:99:4e:84:bd:3e:bb:70:85:ff:
fa:6b:b8:ec:33:74:06:4c:6b:da:d1:d1:7c:41:55:
98:11:af:a8:22:19:86:fd:94:de:6c:be:fc:e4:b8:
0c:29:04:40:99:06:4d:c5:40:f9:00:9e:5c:1b:9f:
6f:8d:a6:b4:15:f7:65:37:69:c5:98:f9:f6:8f:31:
3c:56:99:8d:4b:a8:c0:b9:74:06:b9:2c:6a:1b:2e:
81:4a:9a:74:f3:b6:7e:9f:97:d1:8f:0e:60:96:3d:
00:10:d0:0a:fb:d5:3c:3e:5c:11:a0:f2:98:a8:44:
ba:e2:a3:32:68:52:51:30:2d:23:0b:d4:5f:d2:a7:
06:92:90:0b:01:42:4b:ae:4a:75:48:3f:b9:91:fc:
7e:12:d1:ae:2c:26:25:1f:bc:9c:4c:72:13:29:41:
a5:fa:db:3c:7e:42:7b:72:c1:f2:c4:1e:e6:73:cd:
c6:69:3c:ef:4a:9b:c2:a4:74:54:f6:91:92:91:a2:
49:8b:38:fa:f1:c3:e7:13:13:a4:94:f3:d5:12:82:
e6:3e:a8:ed:cc:f0:ea:b8:41:24:ad:3e:f7:94:27:
92:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:57:29:AB:0E:23:A9:17:BF:65:FB:6C:B1:FB:D8:14:F5:5A:C2:53
X509v3 Authority Key Identifier:
keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f7:f5:3b:9c:6f:ae:3c:34:be:a7:c2:81:d1:fc:7b:a5:39:
a0:f6:ad:44:ac:e1:3d:22:73:c5:c2:b8:da:6a:d0:d4:a9:7b:
ba:8c:48:7d:79:11:14:57:ed:e4:4c:00:e1:38:d7:b4:85:bb:
b2:c3:f6:a9:17:d8:a7:f2:70:8f:ec:1e:fa:0c:d7:69:2c:98:
98:46:21:48:95:5c:70:2f:4f:e9:6a:9d:bb:d8:a4:11:0d:da:
c6:10:b8:ee:77:d4:ca:88:9c:14:9c:29:26:ac:ec:c7:72:2d:
34:f8:a7:5b:49:6d:a7:a0:9f:c2:e5:65:3d:7a:48:7c:ef:c6:
98:30:75:f2:ab:4a:6f:79:df:c1:0a:98:f8:da:46:77:96:b3:
f0:34:d6:f8:30:16:9a:ba:85:c9:ea:1d:d5:ed:46:45:9a:92:
39:6f:60:7b:66:0b:65:e6:94:0d:1a:98:69:0e:88:cf:45:63:
47:ef:bc:86:75:1e:23:cc:52:0d:21:a1:b3:63:00:0a:49:23:
7a:d0:48:90:dc:da:42:5b:63:91:b1:84:75:4f:7f:5a:a6:2f:
43:bc:ae:6f:86:85:dd:c8:ef:ee:09:b4:f4:16:bd:7a:d6:0c:
cd:ee:99:7a:d8:c9:d9:fd:5e:ba:1f:b8:ca:31:56:3f:cf:18:
df:49:c1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:56 2025 by rpki-client