Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
File: D1T54Kep6u6svFsQMQI1t_0O7QM.mft (raw, json)
Hash identifier: +htfx9zBvsPufxH1deIhTZgQvT9LAxgaioev/5/2hyw=
Subject key identifier: 1B:FC:3D:32:91:41:2D:72:8F:85:2E:AF:2A:72:B2:DA:88:30:7D:3F
Authority key identifier: 0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
Certificate issuer: /CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Certificate serial: 019A714A26A819876AEB18F11DC1C9D0DA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
Manifest number: 131B
Signing time: Tue 11 Nov 2025 05:01:16 +0000
Manifest this update: Tue 11 Nov 2025 05:01:16 +0000
Manifest next update: Wed 12 Nov 2025 05:01:16 +0000
Files and hashes: 1: D1T54Kep6u6svFsQMQI1t_0O7QM.crl (hash: cAhSz5aHFcVubBodbW/m1UDkAxEt3+lOb/gLqYe8Zgo=)
2: n_c4PLsmjJy0yCliC8En4sc8wCw.roa (hash: cMBCvEWECFAcwZYZaTXi+y0wWCPFximX6N1nRpp3vNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:26:a8:19:87:6a:eb:18:f1:1d:c1:c9:d0:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f54f9e0a7a9eaeeacbc5b10310235b7fd0eed03
Validity
Not Before: Nov 11 05:01:16 2025 GMT
Not After : Nov 12 05:01:16 2025 GMT
Subject: CN=1bfc3d3291412d728f852eaf2a72b2da88307d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e2:6f:b8:58:ae:e0:13:e7:f1:8c:2f:f6:3a:
5f:ee:c8:3b:01:0a:08:75:49:7b:c2:cb:36:c0:f9:
7f:ab:e9:fb:f3:6a:62:c2:11:be:98:5a:46:3f:9a:
7c:20:bc:2c:15:0a:9b:75:a2:c1:14:a2:b5:89:16:
b4:0a:b0:ad:69:b6:eb:4d:8c:c9:4f:d0:fb:1e:dd:
41:2c:d0:63:bb:c6:f8:b8:2f:38:80:45:9d:47:42:
2c:ee:9f:8b:26:47:f6:44:e7:72:91:d9:5d:7f:c8:
11:f9:6c:02:31:66:69:cf:a1:23:98:ad:94:cd:8f:
12:d1:a1:b3:50:8c:a2:14:89:00:a9:76:a2:02:c5:
f4:7d:e5:2e:ba:23:44:a4:ba:61:13:7e:f4:47:ed:
3f:ec:3c:93:97:dc:34:6c:4c:52:e6:15:33:91:5d:
3a:ba:99:d3:2c:78:92:96:7e:bd:27:a8:f0:bc:03:
82:8b:95:2a:d8:4f:eb:06:76:f4:86:4e:76:4a:81:
78:75:0b:a5:ba:e2:b6:6f:e4:6c:dc:da:e8:48:bb:
31:a9:fa:35:d3:fd:d6:58:4d:2c:aa:6f:5c:cd:73:
3d:8b:3b:28:8e:fd:17:d4:82:cc:2e:31:db:0d:bb:
b0:9f:7f:35:61:9c:a2:05:30:69:74:bb:dd:f7:28:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:3D:32:91:41:2D:72:8F:85:2E:AF:2A:72:B2:DA:88:30:7D:3F
X509v3 Authority Key Identifier:
keyid:0F:54:F9:E0:A7:A9:EA:EE:AC:BC:5B:10:31:02:35:B7:FD:0E:ED:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1T54Kep6u6svFsQMQI1t_0O7QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9059c8-bbd8-4f6e-a60e-ef26c344ef01/1/D1T54Kep6u6svFsQMQI1t_0O7QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:e2:35:56:fa:26:66:04:b1:81:8d:d1:a3:da:c8:79:d5:c4:
8c:2e:a8:33:74:e3:41:c7:16:c4:43:b2:18:c5:81:99:55:09:
c9:7b:07:61:22:cd:a6:f2:30:0c:1a:e6:a2:c9:31:f8:66:6c:
14:e8:52:7d:fa:17:b5:7d:4e:c8:eb:60:f7:94:9f:0f:07:0b:
2b:44:42:b7:a1:24:2a:ff:b6:27:a3:a5:c9:40:27:86:66:c4:
b9:8b:2d:69:bc:ec:60:85:80:f7:c5:08:d9:b4:f4:21:e2:36:
ec:c5:ff:3d:81:09:7a:6c:ef:80:7e:33:dc:c2:fc:8b:43:1e:
97:3a:d5:46:c0:3c:d0:75:9a:77:55:9e:40:b2:01:38:d2:e1:
f9:ab:5a:b9:91:74:eb:41:07:da:89:5c:c3:39:52:b1:6d:e2:
f8:9f:ab:0d:ae:97:2e:75:8a:83:fe:70:37:44:b9:69:b6:fa:
0d:51:31:a7:c2:24:cd:aa:0c:82:20:46:34:2e:a0:50:2f:6a:
76:fc:d4:f1:a4:40:e0:52:67:93:90:74:6e:e8:04:cc:c6:74:
b0:21:e8:ba:85:5f:f3:3e:1e:ad:b2:ac:27:7b:ff:c9:f3:74:
c1:d8:82:8d:c0:1d:0f:17:ae:14:0d:b9:c4:0c:39:16:ad:80:
91:14:94:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:20 2025 by rpki-client