Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File: m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier: 6DICyepecSCtv3KThjyFWz74JL3BzhXRg9j2UzC6Z6Q=
Subject key identifier: EA:6F:C7:7C:F3:DD:A4:65:8C:2C:B5:A3:8B:23:2B:2F:3A:1C:D9:79
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer: /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial: 019A725C62B88D3A1756300A7AEEFDF5F1A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: ThVojn3zYPKAatqULn9XD+pGrjtjYjarGzlNC28RKQg=)
2: rT8y0BCfTCAABxNQ5qnQez4Fr8I.roa (hash: zR6w/3gh7WRxc5V8iDYO22idpuoYZT3WfKeiyZYkIzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:62:b8:8d:3a:17:56:30:0a:7a:ee:fd:f5:f1:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=ea6fc77cf3dda4658c2cb5a38b232b2f3a1cd979
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:8f:fd:c1:ae:2c:dd:e9:cb:ea:36:8e:59:93:
9b:7f:9e:17:c2:34:f8:7c:88:47:77:f9:d7:a1:6e:
b5:b0:fc:6d:d3:ba:f1:67:97:32:3d:35:3a:ff:7c:
04:b5:17:01:10:38:43:69:69:f0:fc:6d:21:4d:73:
de:e1:3c:54:c9:8e:32:3a:16:5d:ce:08:52:9d:e2:
21:22:15:ff:e6:8a:6a:21:94:5b:ad:d1:3a:d0:66:
08:01:cf:f8:a2:aa:4c:78:0d:d0:93:d9:57:f5:ef:
d0:40:a6:e6:4f:74:37:20:9d:cc:a8:30:8e:d2:9d:
0c:33:a9:3f:94:86:97:ba:f8:3d:10:db:03:6b:3f:
d5:e8:16:ed:62:46:c1:ea:e8:a3:cb:b2:f5:03:c3:
b0:6a:92:d5:7d:6b:89:40:1e:38:3f:e5:c4:a4:84:
46:e5:47:57:54:73:7b:d3:72:e9:d1:40:59:bc:10:
65:a0:94:5d:85:4f:e2:28:da:ba:de:38:a4:ec:77:
c1:fd:82:16:14:bc:7a:2c:d1:e7:fb:59:68:48:dc:
80:c3:ea:ef:85:93:fd:05:21:38:df:d4:50:d1:7e:
f7:4c:a5:e4:74:9c:ea:a5:41:86:73:2a:db:ff:e5:
4d:bb:14:d5:50:b0:5d:d8:17:d8:54:99:d4:e1:7c:
21:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:6F:C7:7C:F3:DD:A4:65:8C:2C:B5:A3:8B:23:2B:2F:3A:1C:D9:79
X509v3 Authority Key Identifier:
keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:93:6d:4a:22:59:af:94:b2:d4:f0:e0:12:00:66:2a:5f:
d7:1e:9b:0b:f2:ae:06:16:8e:a3:64:ce:81:61:e3:93:64:26:
30:1e:d1:3a:8b:6e:d2:f7:7f:4a:48:e0:ef:a9:54:d0:54:cb:
7f:4e:6d:59:63:46:80:7f:12:fa:be:2f:13:d8:67:64:63:7a:
c4:ad:ed:00:f5:12:5f:96:c5:ef:93:da:71:69:3d:5f:00:6f:
bc:ba:43:6b:01:4c:99:84:74:38:07:d2:1b:b2:64:2b:8a:9e:
03:06:a4:a9:bd:93:d6:7a:aa:11:51:df:f3:96:2e:c8:30:ec:
5f:ce:91:05:db:00:c2:b0:c5:50:a3:e1:60:6e:a1:fa:4d:19:
f0:b7:7b:6f:3d:c5:8a:87:ff:2f:fa:d3:9b:39:38:c8:10:63:
c3:43:8f:80:61:39:60:a8:8c:67:f5:81:21:a4:13:07:d3:62:
39:3a:c8:a8:25:e5:f6:7b:fc:74:0c:f8:99:4d:a5:8b:3a:e8:
49:f2:af:a0:ad:ae:41:ea:80:d5:30:f3:ad:cf:6f:01:bf:56:
2d:da:30:5f:a7:d5:ea:a9:de:03:92:ee:c5:9c:9d:ac:ce:00:
a7:6c:e9:f8:ce:aa:34:5e:f9:59:d3:ee:0d:0a:9d:77:51:67:
ef:6d:37:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:12 2025 by rpki-client