Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: zHvuqi5UFnPyMROhzIZ4MGeCN0kEp0+ggeHazRSxSr0=
Subject key identifier: 23:A7:F6:27:B2:32:9B:2C:90:74:E4:C0:77:73:DB:13:AC:3F:96:41
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 019A725CA18F0595158442901FB959CC0432
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0E19
Signing time: Tue 11 Nov 2025 10:01:04 +0000
Manifest this update: Tue 11 Nov 2025 10:01:04 +0000
Manifest next update: Wed 12 Nov 2025 10:01:04 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: Ol2aE+kDwspYQcJai+nCF81JvR3OHFKFliJ7KuJ7Kn8=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:a1:8f:05:95:15:84:42:90:1f:b9:59:cc:04:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Nov 11 10:01:04 2025 GMT
Not After : Nov 12 10:01:04 2025 GMT
Subject: CN=23a7f627b2329b2c9074e4c07773db13ac3f9641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b3:b1:bb:30:98:80:ad:61:9a:20:07:64:f3:
29:85:68:78:cc:6e:6d:5c:da:73:dc:d6:fa:75:da:
8a:ec:79:b9:ef:11:c5:aa:35:72:60:27:14:8a:5d:
f4:ec:68:1f:3c:44:41:a5:7d:b3:08:8a:77:71:1a:
41:b9:8a:9f:0e:41:8d:36:88:b2:cd:32:77:07:f6:
49:d9:97:61:5c:75:2a:f3:24:ef:6e:a2:57:54:6c:
60:af:bc:e7:4e:33:dd:34:55:7a:03:04:e4:a9:81:
af:0e:54:63:c4:03:2d:0e:12:e6:0a:c8:6b:f1:41:
2e:90:c6:eb:8d:ee:68:d3:66:ea:8b:33:bc:cb:4f:
1e:46:c3:bf:f2:27:1b:de:c5:70:ef:98:0e:38:ec:
c6:3c:e6:b5:36:75:a6:43:14:80:38:d6:40:27:cb:
48:04:82:9d:a4:69:10:72:e3:89:13:50:d9:32:bc:
34:7c:a8:54:6e:ec:00:3e:8d:f2:c8:ab:8b:d4:9b:
41:04:6e:d6:ea:ef:af:5a:43:d2:64:fd:25:a9:fc:
a8:80:ee:9f:7b:0d:b2:90:3b:e9:4f:0b:4a:96:88:
80:98:36:76:68:66:a1:cd:fc:b1:89:f5:a4:dc:a9:
91:78:08:85:66:49:d0:b2:16:39:f1:82:e8:0c:d2:
db:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A7:F6:27:B2:32:9B:2C:90:74:E4:C0:77:73:DB:13:AC:3F:96:41
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:59:f9:f8:a3:43:e8:60:0a:b1:9c:3f:b9:c5:df:2d:64:42:
fd:a0:1e:88:b3:42:15:10:3c:e5:46:48:fd:00:27:9d:73:49:
5a:3c:a8:ed:e4:26:16:a9:38:86:d1:10:43:bd:78:9f:74:5a:
7c:2f:f7:15:1c:af:2c:ae:68:6f:1c:13:40:fd:1c:ed:1b:0f:
a6:ab:3f:62:e5:e7:f8:e5:95:88:9f:2e:7e:f6:e0:ac:33:7b:
54:53:3d:66:a1:04:0e:4f:dc:af:e5:5a:b4:d2:22:6e:b5:6e:
5e:b6:dc:c8:96:75:f8:74:06:31:8d:3a:ae:1c:96:7c:83:92:
c9:b6:04:fa:8c:98:12:7d:e5:1f:33:d2:46:87:47:ac:6c:b2:
61:aa:28:87:df:54:17:1c:4d:d8:e1:a1:1a:a9:f8:c4:eb:a5:
73:dd:1d:46:b9:99:8e:30:fe:e0:42:72:91:40:b9:19:ea:1f:
d0:d0:8e:87:47:52:6a:c5:0c:51:f8:0a:08:d1:29:ba:22:4d:
c7:72:62:48:6e:94:2c:a2:fc:94:77:8b:80:d6:a4:d7:79:78:
fe:a8:40:c7:92:f0:d2:b7:6a:40:bc:15:78:87:ba:ac:fa:4d:
49:17:f6:3c:05:24:42:71:75:4d:e9:7c:5c:2b:8a:b1:f6:c8:
69:21:09:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:45 2025 by rpki-client