Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: 45wwrHNzPoXcxBBr8UIMO3qdNAdGR1c+QBV7vIbuc0I=
Subject key identifier: E0:98:D2:79:C9:BB:A5:19:4C:5C:C3:12:3D:EB:64:E8:9F:D8:5D:79
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 019A71EEC8A51390FA99F7E773D73C6B6E8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0C28
Signing time: Tue 11 Nov 2025 08:01:05 +0000
Manifest this update: Tue 11 Nov 2025 08:01:05 +0000
Manifest next update: Wed 12 Nov 2025 08:01:05 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: sKQ87GFylSHUJ7jaibGsPY+wTdD76za1xJmDlsAeBOY=)
2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:c8:a5:13:90:fa:99:f7:e7:73:d7:3c:6b:6e:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Nov 11 08:01:05 2025 GMT
Not After : Nov 12 08:01:05 2025 GMT
Subject: CN=e098d279c9bba5194c5cc3123deb64e89fd85d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:99:59:91:60:27:0f:fa:dd:0c:08:03:57:
b3:75:bd:c0:d4:1c:f9:20:56:3d:83:d0:80:07:d0:
4a:92:d2:1f:6c:d3:33:0e:04:e8:4e:cf:ea:79:81:
af:0f:8f:8a:fd:da:91:5c:b0:96:15:6e:8e:5a:50:
09:d1:5d:bf:2e:9b:5d:58:e3:1a:c8:54:a5:98:b4:
20:91:e5:9e:c7:49:25:45:2f:c6:d0:60:13:8d:5c:
70:80:7a:1a:64:db:27:25:7d:d7:93:f8:75:30:f7:
74:87:e0:cb:90:38:cd:40:8f:fb:65:45:e5:02:5f:
e9:21:d5:f5:6d:f7:a2:22:92:9d:05:19:f7:9f:e3:
40:57:db:95:b4:44:1b:f3:d8:9e:c4:6f:21:f2:44:
95:f3:b5:a1:f5:00:07:30:6f:5b:52:4d:52:8b:85:
2d:a1:d4:ae:33:bd:87:3c:8b:d2:9c:ce:13:fd:83:
d9:bf:e0:9f:be:41:e5:f0:9d:da:df:90:78:02:e0:
25:fb:db:9c:41:e3:97:97:c5:5e:17:47:a9:8c:8c:
0e:2e:2b:12:87:19:75:39:6c:e2:db:0e:7c:50:f2:
a8:11:2a:75:05:44:b1:6a:30:78:8d:1f:65:37:7c:
66:1a:9e:e1:a7:16:bb:77:d2:1b:1b:21:04:ef:90:
9e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:98:D2:79:C9:BB:A5:19:4C:5C:C3:12:3D:EB:64:E8:9F:D8:5D:79
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:0b:75:26:dd:f1:70:78:a1:b7:8a:ac:1d:10:fb:8c:df:05:
c1:9a:aa:de:51:90:c4:8a:04:ac:cb:1c:c5:11:79:d1:71:74:
8d:d6:4f:0c:81:3e:5d:87:27:98:74:2c:c3:b6:b0:9f:2c:46:
70:9c:dc:4d:27:76:41:ba:d3:8f:6d:50:11:ea:38:0c:c6:10:
31:30:1e:0a:07:4a:87:ce:21:cc:aa:0c:38:db:aa:27:0d:d8:
ea:93:74:76:64:f5:43:38:20:7f:75:c7:62:1c:27:95:62:68:
c1:0c:b2:ae:22:19:6d:f1:39:e8:83:9a:a4:f4:2b:55:8c:97:
51:9e:af:53:4c:91:e5:b8:eb:f5:c7:9d:35:dc:68:7f:16:9e:
0d:27:42:f8:bf:27:80:86:41:69:ef:f3:63:44:14:ab:1c:e3:
71:b5:b0:99:5b:de:32:24:65:e7:6d:0a:75:ab:f8:50:a8:39:
dc:62:13:55:8a:07:48:c4:18:f5:ba:90:e0:2c:5e:c8:92:2a:
95:0e:2a:d8:18:f5:81:76:d1:65:b4:2d:cc:df:c5:03:46:cf:
f2:c7:fa:57:61:6d:33:d6:82:be:9d:b6:dd:a1:7d:ee:3f:da:
f4:0b:6c:30:3f:5d:6d:e2:12:e6:59:a6:76:23:6e:13:f3:b2:
6a:7c:f1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:31 2025 by rpki-client