Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: qm+OFX4yc1fl8tIk1jyoxCfBS5R+jPQ4jj+Jyc15mhk=
Subject key identifier: 0B:08:9E:3B:BE:E5:30:B0:30:EE:60:76:88:72:51:B8:85:DA:3D:27
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 019A1B072F61AAB6090A2E507E2FEBE6C62E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 06D3
Signing time: Sat 25 Oct 2025 11:00:46 +0000
Manifest this update: Sat 25 Oct 2025 11:00:46 +0000
Manifest next update: Sun 26 Oct 2025 11:00:46 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: HChBP7XsIhsKTvZWRMKiQbvpjL74yexJxSzb4wTKSfU=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:07:2f:61:aa:b6:09:0a:2e:50:7e:2f:eb:e6:c6:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Oct 25 11:00:46 2025 GMT
Not After : Oct 26 11:00:46 2025 GMT
Subject: CN=0b089e3bbee530b030ee6076887251b885da3d27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ad:58:ea:3c:7f:e5:25:ba:8e:8b:57:52:6d:
c2:fa:9d:ce:c6:a4:34:0a:7b:ed:be:55:5d:a1:21:
98:e0:3c:3b:0f:76:6f:7f:00:4c:50:d2:02:f8:07:
ab:80:31:c1:41:70:eb:88:e7:62:4a:42:a7:1c:06:
4a:00:42:23:1c:ac:12:74:ee:cf:43:84:fe:0c:e0:
d6:ab:ae:a0:dd:88:bb:cf:40:e1:45:36:e9:8e:49:
55:9e:ee:e8:56:64:e4:5e:b5:ba:e7:68:12:08:3a:
6a:35:15:7b:dc:ef:59:11:7e:49:e9:59:71:c5:0a:
9f:37:71:42:d2:8e:67:48:5c:56:fa:cc:2d:ed:eb:
5d:3e:77:f8:40:50:c6:95:d6:fb:1c:85:d8:37:26:
81:e8:40:66:bf:26:b4:9f:57:6d:2d:af:f9:e8:08:
98:ec:a1:b4:17:bf:f1:46:69:45:06:07:95:55:7d:
89:c4:33:50:2d:1b:94:d3:de:92:5b:bb:b3:30:a5:
d0:e8:64:71:09:ac:2e:0f:cc:03:0e:9b:c6:0e:96:
6f:a2:a6:ce:1b:67:13:a4:56:fd:ac:45:31:5d:a7:
66:da:f1:93:32:4d:2d:df:ca:64:1a:87:46:95:90:
3b:ae:9c:43:8d:90:f0:a8:88:57:fc:ea:60:d8:0a:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:08:9E:3B:BE:E5:30:B0:30:EE:60:76:88:72:51:B8:85:DA:3D:27
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:88:0a:c3:d0:65:03:8d:dc:ed:4e:85:e1:86:88:97:87:82:
87:92:f9:55:ea:57:5d:c6:f5:8b:d5:25:93:1b:20:d8:7c:eb:
d5:2e:d0:ea:2c:b5:50:1e:14:9c:55:50:5b:bc:2e:87:2a:8f:
e5:e4:f3:80:80:a6:67:4e:9a:0c:1c:33:54:3e:16:5e:9b:02:
ea:cf:88:4a:30:63:57:17:eb:7b:f5:46:b1:9e:70:17:cb:06:
b4:bc:49:ff:3b:df:3d:8a:28:c4:8a:24:2b:46:78:45:39:c1:
82:2f:df:cf:17:40:a1:10:3e:8d:52:7c:7c:67:e1:be:8f:a9:
36:ff:cf:22:77:69:21:cf:c9:b4:0a:3b:f6:cf:87:88:27:08:
9d:bb:4c:f3:aa:43:9d:4c:8f:30:88:18:81:ef:30:02:b9:0d:
96:c6:f5:3f:8b:3f:a5:c2:75:f7:2e:5a:1d:c0:7b:4f:d4:3c:
ba:b3:2f:2a:27:a6:2a:be:b0:f7:11:4f:f5:86:79:9e:26:9a:
22:1d:da:6b:d4:2c:96:96:59:e7:b6:30:d2:36:4a:a9:30:c6:
c1:0a:30:ab:99:05:79:7a:96:06:f5:74:0f:41:4a:a5:d0:72:
c4:12:46:38:9c:21:2f:36:13:c6:4a:5b:a6:47:30:e2:86:5d:
9d:fb:09:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 12:14:27 2025 by rpki-client