Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
File: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft (raw, json)
Hash identifier: YHoHGnCTikHroQydPsi6cfbN6UFTDRJIKfWPbTJuTp0=
Subject key identifier: 7F:E5:C8:40:35:14:A6:D7:73:6D:F1:40:57:06:DB:D7:33:9B:00:3B
Authority key identifier: D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
Certificate issuer: /CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Certificate serial: 019A725CE0C674342E379A906A985D28D771
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
Manifest number: 03B5
Signing time: Tue 11 Nov 2025 10:01:20 +0000
Manifest this update: Tue 11 Nov 2025 10:01:20 +0000
Manifest next update: Wed 12 Nov 2025 10:01:20 +0000
Files and hashes: 1: 1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl (hash: olthO5nH0EyuaTKd8FWSX434QA5aot9jIfJYdoLx3xA=)
2: d97Ch2oOF5rboQAm4Ny7S68pdDs.roa (hash: GTey3KF1CvpIvjeJCgqABtZ3XGUGtGoEyAaxaxLHaVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e0:c6:74:34:2e:37:9a:90:6a:98:5d:28:d7:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5a89094e12e54dd901e32d33ce5131e046ee70c
Validity
Not Before: Nov 11 10:01:20 2025 GMT
Not After : Nov 12 10:01:20 2025 GMT
Subject: CN=7fe5c8403514a6d7736df1405706dbd7339b003b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8f:37:1e:0c:98:04:b5:7e:73:c7:bb:04:13:
d8:fc:01:a4:a6:5c:c7:51:0e:1e:bc:5c:9e:4b:eb:
42:ec:9e:b6:ac:22:7e:b4:c0:19:a3:6d:37:20:95:
ca:9a:40:4f:a9:7e:80:a4:e0:0e:c3:6d:32:d7:74:
43:63:e2:72:28:48:65:fe:bc:e1:61:f1:29:6a:95:
fe:8d:bb:b5:f6:6c:4f:28:53:69:fa:a5:db:4b:14:
73:d6:49:2a:84:4c:bc:54:cc:88:06:df:da:37:71:
53:47:85:24:b6:f7:5b:ca:b1:73:95:cb:37:4b:39:
72:6d:0e:8a:98:76:c1:c2:0d:c1:f6:d5:38:61:d8:
4a:a2:d9:f9:aa:a6:6a:9b:f4:73:50:7d:0e:ab:ae:
80:40:10:d2:4b:7a:8b:96:d8:6d:26:81:1a:c4:f6:
26:9a:1f:87:d0:3e:3a:6c:de:12:03:85:ab:56:1a:
77:d2:6a:e8:8e:5a:12:e4:83:d3:69:a2:0a:42:09:
32:c1:be:8c:f9:b8:7a:b6:86:be:37:78:77:7b:bb:
93:56:ed:6e:6c:39:02:95:22:90:83:23:ab:b1:5c:
92:ad:34:da:fa:05:27:df:34:3f:5c:bc:3b:bd:15:
28:f8:1d:b7:62:f4:f7:9d:33:14:76:2e:75:45:eb:
cd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:E5:C8:40:35:14:A6:D7:73:6D:F1:40:57:06:DB:D7:33:9B:00:3B
X509v3 Authority Key Identifier:
keyid:D5:A8:90:94:E1:2E:54:DD:90:1E:32:D3:3C:E5:13:1E:04:6E:E7:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1aiQlOEuVN2QHjLTPOUTHgRu5ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/22d20e-0bd6-49fb-b9c3-e20d707c00fb/1/1aiQlOEuVN2QHjLTPOUTHgRu5ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:f1:08:3c:32:b2:fb:8b:6e:0b:43:71:27:a2:75:72:a1:38:
8e:03:a8:d5:9c:ed:1f:3f:11:12:cd:08:93:f5:d5:a1:1f:d8:
82:7f:5f:f4:ea:b6:d3:68:10:90:61:84:d6:27:ec:62:e5:8f:
d8:95:0d:b7:67:b8:9b:9d:68:89:23:73:8f:59:be:a2:7d:13:
4f:2c:5b:39:0c:16:c1:94:3e:0d:be:be:d7:80:3d:83:67:cd:
9f:f2:19:94:e4:fc:6e:89:fd:8f:31:85:67:f8:54:e3:80:23:
bf:5a:f5:0c:2f:a3:1f:c3:b4:4b:17:91:e1:77:0e:20:96:87:
1f:4c:f1:4e:c0:be:24:df:6a:af:7a:d8:61:ab:4c:40:f1:ec:
1e:85:ab:61:ed:05:73:5f:4c:0d:e8:d7:b3:1d:b8:dd:42:fa:
d3:e1:b7:1a:92:da:b6:a8:78:32:b0:cc:03:8f:2c:eb:85:34:
2d:cb:40:18:ca:bf:df:09:07:a9:75:de:3c:01:ef:5c:be:02:
9d:d1:f0:11:c2:c7:02:ce:b2:1e:64:be:7f:c3:35:10:7f:87:
01:12:e5:93:b8:f1:15:08:37:96:84:6d:45:a8:e4:60:5b:39:
61:2d:64:b4:c8:23:a9:72:53:ec:ff:6e:87:ea:13:d4:f1:44:
68:7d:cf:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:30 2025 by rpki-client