Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
File: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft (raw, json)
Hash identifier: Cq38iT1a+NePEZ4YB5CSY5En6RNYkEoJrB0VTJe0R4I=
Subject key identifier: 20:D8:CA:4C:0E:89:D9:54:70:64:5A:0A:9F:B6:A3:6F:80:3E:7F:80
Authority key identifier: FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
Certificate issuer: /CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Certificate serial: 019A71B7ED31454B003814ED7248B3E4A678
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
Manifest number: 0D4B
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: 1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl (hash: 2QqlrDxHagfgsLgjU3pn2ix6VIXaw3dJvbhXv7CeinQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ed:31:45:4b:00:38:14:ed:72:48:b3:e4:a6:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb8e60e56399ff93460b3427cd55274b5a83e726
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=20d8ca4c0e89d95470645a0a9fb6a36f803e7f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5c:78:e3:ac:9b:9d:74:44:72:53:da:03:cd:
c1:8b:d0:2b:05:9a:c6:6c:de:a3:fc:53:8e:6c:8a:
b9:b4:87:f7:20:27:6e:a6:15:90:fc:7c:19:5c:00:
6b:e5:00:9b:cf:51:1a:4e:b3:e8:f8:e8:e0:f2:67:
c4:52:47:9c:b8:c4:19:bf:d9:dc:fd:ba:99:0c:cf:
f0:53:d6:ab:5f:49:78:dc:c2:0e:d8:4f:24:e9:d1:
92:c4:9a:f5:b3:b5:5d:87:dd:f5:9d:56:5d:a2:03:
15:2b:02:1d:3b:0b:ba:49:d7:61:89:e4:e6:3f:16:
d8:91:69:db:64:91:e1:67:25:69:64:75:b3:e2:27:
64:58:0b:98:ab:15:bc:75:1b:e4:56:b3:65:38:3e:
13:eb:cc:c3:59:54:72:a1:55:1a:fb:20:10:c7:33:
35:4b:4c:8d:6d:71:7f:46:17:ef:87:c2:1a:41:49:
b0:89:62:ec:d9:af:e1:5f:cf:c3:8e:53:76:31:a8:
71:49:83:fe:9c:1d:e3:6f:43:02:01:2e:1a:bb:20:
58:46:00:d4:62:e0:9b:03:ea:36:54:1a:c7:70:52:
9f:2e:e6:c6:87:35:1b:d9:9d:7e:bb:1d:a2:ff:8b:
c5:2f:d0:a0:fa:43:e3:b7:f0:20:4e:a0:cd:9b:f3:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D8:CA:4C:0E:89:D9:54:70:64:5A:0A:9F:B6:A3:6F:80:3E:7F:80
X509v3 Authority Key Identifier:
keyid:FB:8E:60:E5:63:99:FF:93:46:0B:34:27:CD:55:27:4B:5A:83:E7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/c64ceb-8610-40e9-82af-eeb6cdd6fcff/1/1-45g5WOZ_5NGCzQnzVUnS1qD5yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f4:63:0f:b7:f0:67:17:3c:d3:11:a9:bd:0a:34:e4:1f:95:
72:f6:02:32:fd:fd:6d:1d:3a:e1:e6:5a:92:3a:c0:2b:de:db:
b3:9f:5d:2d:12:2e:9b:6a:28:0e:6d:31:33:50:33:bb:0d:2d:
d1:a7:e6:e2:6f:8d:4f:57:54:b1:4c:4d:67:0a:d0:6b:2d:87:
ea:e0:13:3b:ee:79:6f:34:df:93:f4:68:bc:90:ff:39:77:14:
36:40:37:a2:c1:ba:30:15:37:d7:93:f5:7d:97:74:0d:ff:f4:
54:4e:55:10:90:e4:9b:13:9a:94:9d:79:90:22:cb:24:dd:79:
fe:40:c3:b1:0e:3e:19:b0:f8:d4:cd:be:4e:01:5d:0d:df:33:
4a:bd:69:e1:ca:c2:25:aa:fd:20:67:42:14:2e:84:d5:4a:1e:
bf:1c:1e:ef:12:49:02:a0:94:df:2a:bd:0f:28:fe:c2:14:e5:
96:70:3d:bc:a9:35:ac:41:9b:be:de:5e:24:36:c2:28:91:ab:
93:16:62:80:71:20:81:4a:3d:c0:b7:95:d0:62:02:bc:6e:37:
e0:c5:96:49:57:8e:e7:84:88:a8:0b:aa:c8:a7:4f:93:e5:25:
93:21:d7:30:18:e3:7c:4e:50:f6:be:3e:df:07:a7:2e:97:80:
c1:09:a7:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:13 2025 by rpki-client