Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
File: 1DNtXnTx-LfbEynwC7hXJBrnTRk.mft (raw, json)
Hash identifier: RnRVL5NZLZ/b17lMbRDReZwrm8+8gd2yC1O5urCqYPs=
Subject key identifier: 2F:E6:05:A0:F0:11:CE:63:58:C0:F7:79:94:B8:DE:15:50:5B:4B:DC
Authority key identifier: D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
Certificate issuer: /CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Certificate serial: 019A0FA723C6AF643DF1080C622019E2E4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
Manifest number: 0475
Signing time: Thu 23 Oct 2025 06:00:03 +0000
Manifest this update: Thu 23 Oct 2025 06:00:03 +0000
Manifest next update: Fri 24 Oct 2025 06:00:03 +0000
Files and hashes: 1: 1DNtXnTx-LfbEynwC7hXJBrnTRk.crl (hash: 22n8OXwemjp5AXfQ66QoYefo9G3e+Gafun6r8ZEhTQk=)
2: L86Czh-hgFnJfXYShvX9w1KKWEg.roa (hash: UlpXjqDOYfOCQf+VBo1cHNYWZUpj4u/uB6dnGVYlbBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 06:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0f:a7:23:c6:af:64:3d:f1:08:0c:62:20:19:e2:e4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4336d5e74f1f8b7db1329f00bb857241ae74d19
Validity
Not Before: Oct 23 06:00:03 2025 GMT
Not After : Oct 24 06:00:03 2025 GMT
Subject: CN=2fe605a0f011ce6358c0f77994b8de15505b4bdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:23:95:fd:3a:b2:f1:77:08:48:ef:e5:83:d2:
e1:69:d9:a6:19:16:54:34:9b:51:1e:a0:94:ba:4e:
a3:35:0f:01:03:60:aa:74:bd:7b:28:ef:1a:12:18:
c7:db:95:f4:da:6f:1f:79:56:76:48:8d:f3:3d:08:
bc:79:6d:09:9c:0e:51:eb:19:2a:6c:91:df:ec:4d:
6e:5d:04:50:41:09:f0:55:61:67:a8:52:f3:f8:c3:
4d:a6:66:74:9b:d4:e7:e0:92:62:11:c8:72:4e:d0:
c4:19:34:56:58:a5:7b:ac:01:e7:1b:b0:2e:06:e7:
ca:23:fc:f9:8a:d7:0b:cc:3d:01:85:8a:f7:69:27:
65:4b:a0:09:a5:40:70:11:1a:56:24:dd:b0:4f:88:
ed:bd:cb:c9:33:d1:76:e2:16:c6:11:50:b9:22:87:
7d:bb:f4:b4:34:03:b3:3a:76:4b:5d:f2:56:58:00:
bc:eb:1b:6f:b3:66:e4:cd:ab:2e:63:73:e9:f2:e1:
74:7e:f6:e0:4c:70:de:e7:a2:7a:7b:cf:ac:c1:f7:
43:5c:d9:20:c0:f5:3e:b2:05:76:8b:2e:a2:cd:06:
71:28:22:0e:cb:8c:16:61:c2:eb:4d:63:de:49:a1:
61:74:48:cf:10:95:ac:59:76:bf:15:d7:a2:ff:ce:
0d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E6:05:A0:F0:11:CE:63:58:C0:F7:79:94:B8:DE:15:50:5B:4B:DC
X509v3 Authority Key Identifier:
keyid:D4:33:6D:5E:74:F1:F8:B7:DB:13:29:F0:0B:B8:57:24:1A:E7:4D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DNtXnTx-LfbEynwC7hXJBrnTRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/3a6bdd-0d3c-4a0d-8db6-2dd25184b0d0/1/1DNtXnTx-LfbEynwC7hXJBrnTRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ae:23:ca:8c:98:9f:2e:75:2b:f2:2b:ee:7b:e9:a4:ed:1e:
2d:de:6a:48:29:29:f9:7d:e6:6d:bd:fe:80:ea:09:22:fb:69:
49:a5:16:87:1c:11:2d:49:87:a8:72:1c:4d:03:90:ba:b1:8b:
85:89:a9:f1:d3:37:a0:07:49:22:d3:93:d1:5b:8b:56:39:ad:
24:07:32:dd:81:8b:24:11:34:de:3d:04:d1:70:b8:ed:b1:d4:
a3:75:7a:cd:a3:18:2c:88:26:93:cb:2a:69:8d:24:65:65:01:
0c:3c:2b:91:80:24:f8:6d:99:38:1e:41:5f:73:f8:85:3d:4f:
89:fc:19:82:f3:ca:f6:bb:c8:c5:c2:fb:4a:ff:9f:d7:d8:d7:
e9:28:59:c4:6c:94:0f:f8:ff:8b:d1:b8:0d:ce:43:8c:46:0e:
b3:5a:a6:60:4f:22:86:37:5c:ec:b2:2b:b3:73:2d:13:32:0a:
de:9b:5c:91:c8:93:08:bc:a7:5a:8d:1b:d3:41:e3:9c:a1:33:
7a:44:fa:46:b5:cd:e6:2e:2b:69:3c:0d:89:a2:ee:79:a7:34:
09:ea:2f:9b:c1:b2:d1:52:78:82:c4:4d:9c:27:d5:de:78:79:
d1:32:11:ec:4a:6a:31:1e:23:70:05:da:c7:0d:77:47:68:c5:
81:c9:c2:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 12:58:35 2025 by rpki-client