Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
File: 1M8PvV9uF1mQPMad4NxOokwfg98.mft (raw, json)
Hash identifier: ujc3sVrMJygrEp2+JH4J3UNqQQs4MynA15yHoglAXtU=
Subject key identifier: 4F:BA:51:5F:E7:E3:41:7E:3E:88:FC:A1:91:96:70:5E:DE:E4:C1:6C
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 019A70A4FBDE86B781D8D767FE37EC9F8DA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
Manifest number: 145A
Signing time: Tue 11 Nov 2025 02:00:51 +0000
Manifest this update: Tue 11 Nov 2025 02:00:51 +0000
Manifest next update: Wed 12 Nov 2025 02:00:51 +0000
Files and hashes: 1: 1M8PvV9uF1mQPMad4NxOokwfg98.crl (hash: k+7LEMNBonu434XpjbgGlw/koUInJt9KbrXIVWL3/90=)
2: 2ey3vHhd3-QInNXrg-NGMozvrhY.roa (hash: ovgLpC9Adt54hQhibAMsDZRZRFyhlOqmedeXSHCh2UU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:fb:de:86:b7:81:d8:d7:67:fe:37:ec:9f:8d:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Nov 11 02:00:51 2025 GMT
Not After : Nov 12 02:00:51 2025 GMT
Subject: CN=4fba515fe7e3417e3e88fca19196705edee4c16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:0d:43:02:56:08:ab:4b:00:ab:a4:53:84:
22:b8:e8:3c:97:7f:8c:04:84:0c:32:fb:0d:4b:84:
f4:65:29:b1:87:64:36:8e:05:54:a0:3e:0c:e3:d5:
4c:b4:ea:41:8b:fb:71:e3:35:80:cd:68:5f:9c:0b:
1e:35:83:ae:a4:d8:04:4b:2e:2c:df:3b:bf:01:2e:
22:a1:70:6f:54:2c:33:ba:e0:15:e8:01:0b:10:3b:
a7:76:c0:51:60:77:4b:50:6a:74:38:0d:7e:55:ec:
52:cb:09:5f:01:4f:9b:27:78:e9:86:78:ef:0e:56:
7f:40:ca:4b:ac:0a:47:ad:e5:02:ac:ea:9e:e7:b9:
44:e1:6b:06:38:b5:46:d1:c1:ee:55:94:79:2c:53:
23:26:03:d7:27:b4:e6:3e:61:26:42:46:10:11:b3:
01:33:e6:4c:da:7a:fb:28:0d:5e:53:0a:51:7b:97:
2b:a6:3f:ef:db:de:b8:36:1c:60:be:1d:1f:f0:72:
84:24:17:4e:70:c0:0f:c9:ba:f3:df:9e:7c:94:a0:
f0:76:a5:be:bf:6b:f9:0a:f6:53:53:9a:0b:bb:74:
a1:d1:18:d5:6c:3a:71:13:5f:a9:e8:1a:40:96:3f:
c2:1c:a8:e6:b7:28:97:75:62:4b:bc:a8:3f:0e:ae:
68:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:BA:51:5F:E7:E3:41:7E:3E:88:FC:A1:91:96:70:5E:DE:E4:C1:6C
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:31:34:28:de:10:7d:6e:b0:a5:fe:73:dd:18:36:92:ab:aa:
0c:b7:c4:ec:cc:1c:41:93:be:71:50:d0:e1:6b:d0:ec:aa:a4:
fd:9b:7d:92:01:6c:d1:c1:55:0b:b9:9e:35:4f:b5:89:59:80:
77:c8:5f:8d:e9:e5:9f:c2:e8:04:ea:57:68:1e:f3:b5:58:6d:
5d:ee:ce:bc:49:a6:cd:d3:a9:bd:7b:f2:89:f8:c7:55:c2:57:
fb:ba:32:fd:de:fd:0b:a2:ed:b9:fb:df:fa:5d:35:26:ff:05:
19:83:23:3e:a7:09:37:c6:8e:11:cb:ea:5b:75:b4:e4:bc:7c:
17:30:23:07:cd:2d:84:1b:c4:7b:32:81:1d:56:92:f0:89:cf:
ea:60:e1:56:a9:77:b4:b9:aa:87:b3:42:af:de:a7:25:4a:27:
ec:f5:77:2e:22:24:80:d4:24:b9:91:ed:8d:a2:c1:1a:c5:81:
c4:2f:dd:cb:25:21:07:f4:8c:d8:75:24:af:65:db:30:f0:b2:
24:21:76:f7:bd:51:41:e0:0f:a5:0b:b7:8f:6b:0e:96:a3:0d:
63:9a:90:4b:db:69:1c:e1:2f:9e:66:d8:9a:2a:1f:4e:fd:54:
37:95:9a:b4:0a:8a:91:d7:d8:da:fd:8e:bb:6a:10:91:10:03:
65:00:e0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:46 2025 by rpki-client