Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: pQ8NCD0XYI/4dCDhX6bGYxHWADvcnSPRLt6Ub0Ev4B8=
Subject key identifier: 0E:A2:4C:7D:06:3E:AF:8D:C1:6D:35:2E:49:F1:30:4F:92:07:97:EF
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 019A7149AA8E855B132DA3AA15948C067CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 04A5
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: CXUei7buNWi750pg5kBZn7MNpE6Il2xeXEsqHlAq3X8=)
2: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (hash: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:aa:8e:85:5b:13:2d:a3:aa:15:94:8c:06:7c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=0ea24c7d063eaf8dc16d352e49f1304f920797ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:e5:fa:dd:83:44:3d:45:b8:3c:51:9d:f1:
e5:eb:a9:39:95:81:57:91:7e:81:de:c4:b4:03:fc:
df:17:3c:52:0a:bb:3a:ba:b4:73:86:8c:1c:f8:22:
77:f1:82:12:89:cd:03:11:41:4b:cd:c8:35:95:c3:
8a:b5:2d:87:d7:32:7b:43:d4:38:bb:86:9c:5f:d1:
ea:14:58:c5:76:13:c0:93:b0:98:4e:31:3a:32:2d:
ec:32:55:20:d8:a6:50:74:4b:4c:af:73:16:9d:4e:
6d:75:0b:8a:b8:95:d9:75:88:b0:c6:bf:d4:55:9f:
2b:a1:9f:3a:d0:32:0c:79:39:92:57:52:7e:29:73:
ed:81:cd:34:b2:41:b9:5a:3d:30:a6:36:fa:b3:a0:
21:ac:f8:00:73:72:0e:38:78:ac:3a:89:57:14:7b:
2d:5e:ec:55:b2:ac:fb:7a:c0:df:ba:a6:bc:d5:db:
74:63:e0:ad:a0:ad:04:d9:61:61:11:7a:74:46:81:
d4:a4:c6:59:10:c6:84:9f:87:2f:a9:71:c0:ac:4e:
77:e1:dd:23:d1:a9:e2:55:2d:06:5d:a2:b0:21:37:
f7:2c:1d:8b:18:aa:97:1e:a2:47:e4:81:bf:db:3e:
72:fb:d9:4f:27:61:e5:24:40:f1:cc:f2:58:37:b3:
c1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A2:4C:7D:06:3E:AF:8D:C1:6D:35:2E:49:F1:30:4F:92:07:97:EF
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:dd:d8:60:9a:5e:48:9a:1b:d5:5d:0a:1e:32:21:33:52:0c:
02:c1:35:66:61:58:14:5b:46:01:f0:11:ac:e5:73:da:06:e7:
26:b7:23:4b:15:1f:53:f5:e7:15:be:3f:58:78:d8:a4:f8:b2:
20:75:ca:14:e5:a2:a1:6b:9c:f6:13:76:31:c7:a3:9c:e6:1d:
ae:16:86:31:b9:37:2e:65:2d:15:a9:f3:53:2c:c2:19:31:20:
b3:68:42:3d:cf:c8:90:de:0d:dd:6e:5d:70:04:19:2e:d1:06:
8c:d1:13:9c:96:10:70:d8:6d:6e:ec:72:3b:9f:b7:ca:e0:5c:
1b:40:b0:43:40:0f:fa:54:64:c2:c2:91:ae:4c:85:0e:74:b7:
82:6e:57:2d:7e:a7:a7:84:a0:3b:c5:55:3f:4c:db:5b:b8:1a:
94:a5:02:72:59:68:65:c7:97:ad:f8:17:f5:18:59:ae:60:23:
16:9d:6c:49:f1:c5:dd:e9:53:e0:41:4a:f2:ad:2c:97:86:ff:
4a:a9:e2:aa:12:21:5d:45:8c:3e:29:e2:0e:0a:78:9f:53:e9:
c9:2c:a8:21:d1:41:f9:c7:62:0f:a7:a1:4a:6e:b1:d2:f1:63:
b2:b5:a2:fa:12:64:f6:63:74:46:b6:fe:00:26:d0:55:66:61:
25:5a:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:53 2025 by rpki-client