Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: bpIFrQDi5eukEIh9peMRnsrFkNQ3a69Dkc8HuUBXLDk=
Subject key identifier: 15:81:56:66:F3:F9:2C:A8:E2:1A:40:46:2E:0C:81:2A:0D:32:01:B6
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019A44A787AB9280545A698B4AE9C34433DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: D8
Signing time: Sun 02 Nov 2025 13:00:21 +0000
Manifest this update: Sun 02 Nov 2025 13:00:21 +0000
Manifest next update: Mon 03 Nov 2025 13:00:21 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 4oL/NPGXdbOzLAxqltm4Gni/wULIAOPVIqPWQmGlGy0=)
2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Nov 2025 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:44:a7:87:ab:92:80:54:5a:69:8b:4a:e9:c3:44:33:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Nov 2 13:00:21 2025 GMT
Not After : Nov 3 13:00:21 2025 GMT
Subject: CN=15815666f3f92ca8e21a40462e0c812a0d3201b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:56:e2:af:8f:28:cb:73:36:35:97:b8:73:04:
50:26:e1:51:f8:9e:7c:e0:f2:40:19:0e:27:22:cd:
9b:ee:72:13:a5:32:cb:ca:ae:ef:7a:fa:5e:07:3c:
e7:86:3f:00:f3:cc:d8:50:12:10:dd:33:af:5b:f2:
0b:15:8d:66:25:8f:31:5d:07:a9:32:b8:97:a0:d2:
85:3f:8d:a9:23:e7:ac:ef:c4:ec:68:41:70:16:f7:
5e:31:9b:1a:da:64:56:a3:30:78:28:96:ed:a8:35:
e6:a4:a0:a6:ae:13:3a:c1:8b:88:04:04:8e:e0:93:
39:3e:96:46:fa:2c:f5:36:94:bf:6c:81:7f:3f:9f:
bd:83:c8:02:04:10:68:09:31:6d:91:ae:dd:5a:59:
03:f1:84:c5:1d:d9:b4:3b:f8:45:a9:89:a9:dc:87:
1f:2c:f7:e8:31:27:b5:4e:40:e8:2a:9a:3c:83:35:
7b:d4:e0:55:df:41:95:b9:9b:1d:89:a8:7b:ee:47:
30:3c:87:9e:c9:4c:f7:cb:bb:16:55:93:89:cf:39:
b5:f7:aa:fc:63:89:1b:f7:3e:94:f0:62:d0:dc:b7:
d4:10:ee:63:14:6c:7f:89:6d:38:21:ff:b3:a5:c1:
d3:c3:f1:45:a5:ea:ab:7e:2b:58:3b:6c:64:53:9b:
54:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:81:56:66:F3:F9:2C:A8:E2:1A:40:46:2E:0C:81:2A:0D:32:01:B6
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b7:7f:55:7a:22:f3:11:cc:9f:36:66:1a:d3:ed:1d:39:f8:
ce:b5:27:63:f5:c5:c4:3e:ec:05:05:fd:81:2f:14:13:db:91:
74:00:c9:da:76:a9:9c:72:35:bd:db:fc:a7:42:9d:30:29:2f:
00:07:44:d7:df:36:45:90:45:da:99:57:2a:77:ea:68:e1:41:
d6:e7:93:82:9e:3a:3b:df:ca:d2:9a:5b:a5:63:70:1a:46:6d:
0d:0e:98:21:e9:c2:c2:52:73:e8:89:07:95:e8:db:8c:2d:23:
70:99:45:ac:8c:ef:66:24:52:78:84:43:2a:c3:69:d2:90:04:
94:1f:6a:e2:c2:c7:9d:9a:c9:af:22:e1:44:69:eb:8e:c8:14:
ad:32:b9:1e:5e:ff:67:7b:6b:d4:20:58:60:70:b5:54:f6:d3:
af:09:77:ac:de:4c:d0:4a:9c:93:1f:8e:f0:ac:1a:c2:e8:d7:
f6:22:b5:fb:48:5f:b6:bd:3e:83:ca:60:91:68:46:a2:d9:33:
f4:b7:8c:6a:24:85:c0:1d:d4:75:96:38:bf:b9:06:61:b6:f6:
60:57:7d:c0:97:3b:d9:f6:b6:b4:46:62:e8:87:de:f4:68:15:
50:0a:9e:c5:7d:7d:23:3d:66:5f:5a:18:84:7a:66:d4:54:a9:
7c:5a:33:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 2 17:28:52 2025 by rpki-client