Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: mHt6HE0O5MN8ysnXPTxMohlC7sIJMguWq2EHMP82bww=
Subject key identifier: 1B:D8:DC:24:73:07:2E:94:71:5A:A4:0F:01:EF:86:58:70:F0:39:C1
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019A7338704C5FC6B167E6FD63A22567A94D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 0FA6
Signing time: Tue 11 Nov 2025 14:01:09 +0000
Manifest this update: Tue 11 Nov 2025 14:01:09 +0000
Manifest next update: Wed 12 Nov 2025 14:01:09 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: IW/0YGFj/o7BQlkRHpggeyq9SW+NCNrV/K3uYbRbVKQ=)
2: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (hash: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:70:4c:5f:c6:b1:67:e6:fd:63:a2:25:67:a9:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Nov 11 14:01:09 2025 GMT
Not After : Nov 12 14:01:09 2025 GMT
Subject: CN=1bd8dc2473072e94715aa40f01ef865870f039c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:55:cc:15:51:cd:53:ae:28:13:5c:8b:98:e9:
7b:9f:f2:94:ae:0a:43:e0:f5:04:c0:f6:f7:ab:63:
b8:7b:c2:80:ce:f9:2d:53:b6:e5:e6:e8:bb:26:24:
1e:4f:dd:56:0b:c3:fa:6a:b6:59:f1:b4:93:d3:64:
29:ca:6f:4a:58:2a:2c:6e:a7:41:4b:bb:05:85:d2:
7d:34:8b:97:cd:07:61:1d:ca:f8:d3:d9:36:2d:5e:
84:da:f3:ff:80:87:3d:e6:87:35:6b:0b:4a:67:96:
6f:8c:77:ef:7a:9c:16:54:68:2a:55:9a:50:c3:ed:
43:c1:ff:b9:21:56:42:7d:3b:05:5c:6e:07:dc:7e:
fc:d2:71:07:c6:18:20:3e:bf:fe:3d:5b:09:f0:55:
fb:b7:3a:ef:e8:d6:53:a1:9b:61:b4:ac:f3:0b:85:
93:6c:c2:33:21:18:c6:df:2e:f1:e3:cf:07:6c:a8:
4c:5c:34:d3:cb:b2:d7:9f:64:54:7c:6a:c7:b1:01:
cc:57:37:ad:79:16:52:c0:96:69:e3:d0:41:68:94:
d3:f2:66:8e:70:71:a6:1e:e3:f9:06:10:7a:6e:db:
b7:b0:6b:12:b2:af:70:06:93:2e:00:cf:be:0a:35:
35:69:93:34:fb:9a:c5:63:0e:f6:fb:9b:13:7c:01:
bc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D8:DC:24:73:07:2E:94:71:5A:A4:0F:01:EF:86:58:70:F0:39:C1
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:80:f9:f6:7e:67:5d:9c:8d:29:bb:c1:21:d0:12:a2:12:
73:08:72:78:ed:62:46:95:a5:04:f2:25:bc:00:d0:6c:87:30:
4e:ab:42:46:26:49:68:23:0a:de:fe:47:e2:6b:96:ff:6f:90:
70:b8:23:80:6e:d4:6d:0f:2e:ea:1b:62:54:8c:72:3a:b2:cd:
d2:ba:b5:48:b1:8e:b0:8f:59:70:41:b1:1d:ae:7f:ab:29:fa:
84:37:7c:72:a2:a6:5c:23:d1:87:61:86:31:73:02:96:c6:9c:
b4:b9:3d:20:8e:be:68:99:87:67:8c:a6:0f:bb:1d:75:c2:87:
99:7f:dc:a2:f5:7a:88:24:31:f2:9d:22:98:8c:b2:20:46:ac:
aa:56:e4:b0:a5:c3:ea:80:6a:4c:99:b5:4f:d6:48:43:c8:c3:
1f:cf:b3:21:a3:bb:c3:67:b6:6b:b1:0a:69:c6:9d:cd:09:8f:
d9:ff:c8:31:a6:76:f1:9e:ea:c3:a2:d9:20:c6:86:16:c4:ca:
df:d7:3d:66:d8:ef:76:51:75:0b:9e:dd:2f:f6:e9:a8:2c:10:
50:4e:b4:20:72:94:a5:34:bb:4b:91:da:f0:6f:c6:0e:7d:86:
6c:06:dc:4c:be:e2:37:46:01:a3:f0:39:9a:ed:cf:ad:16:8f:
af:09:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:48 2025 by rpki-client