Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
File: 1-eZZ5-721ztobrHSlWxx875bvXc.mft (raw, json)
Hash identifier: 0A+SESP38t3qvqrmgrG/U7aMqTUWYbElNQ3tn7LqVv8=
Subject key identifier: 40:CB:61:55:CA:A8:4A:DA:F6:83:2B:9B:9F:6D:A4:D6:B9:AB:62:42
Authority key identifier: F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
Certificate issuer: /CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Certificate serial: 019A71EEBCB522CFF62B1180110D4163E89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 08:01:02 +0000
Manifest this update: Tue 11 Nov 2025 08:01:02 +0000
Manifest next update: Wed 12 Nov 2025 08:01:02 +0000
Files and hashes: 1: 1-eZZ5-721ztobrHSlWxx875bvXc.crl (hash: 9y84539zTifIiWzzNe7k3baJBmHUYdV5407f2xcyqJY=)
2: RRxWR41Hund7xXvTLqB2r5qi970.roa (hash: rUpiHcsIUELuq5TefHF1+krXhbgfuQVPMP1TCObsJG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:bc:b5:22:cf:f6:2b:11:80:11:0d:41:63:e8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e659e7eef6d73b686eb1d2956c71f3be5bbd77
Validity
Not Before: Nov 11 08:01:02 2025 GMT
Not After : Nov 12 08:01:02 2025 GMT
Subject: CN=40cb6155caa84adaf6832b9b9f6da4d6b9ab6242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:da:2d:01:e5:6e:1a:4a:d2:d8:f7:c3:5f:
ef:7a:11:82:fe:7c:5d:36:9b:fc:22:8e:66:52:93:
66:b5:ca:ba:7b:59:56:df:00:d7:6f:e1:c9:19:20:
84:22:af:af:c8:0e:44:af:92:9c:8d:9e:20:38:87:
a5:e6:db:38:31:7c:df:08:74:68:52:79:68:8f:a8:
46:3c:f2:57:b5:07:21:30:49:47:3d:3b:03:d8:c7:
a1:a0:0f:e4:d3:4c:0a:bb:a8:95:dd:ab:3a:29:c8:
5d:45:7a:60:83:ac:21:58:e9:9b:8c:72:9a:83:bb:
bb:46:3c:49:53:4d:75:2d:f8:1b:f4:54:87:10:7c:
0b:1a:b3:19:5c:10:32:c5:fc:6d:39:a7:4c:7c:96:
42:8a:c0:76:c7:84:8a:f3:44:02:f0:25:fd:3c:b3:
77:35:05:a6:94:2f:ad:f9:2f:c1:46:13:fc:74:9a:
54:3d:5e:79:44:e2:37:8d:a1:5c:96:35:c2:55:86:
92:e6:4b:00:5c:74:94:05:c0:ce:18:f7:d4:9a:a2:
ef:03:b0:d4:91:aa:f2:9c:01:d0:83:3e:12:5f:87:
5e:f0:87:82:07:03:2d:cb:97:31:60:1c:88:0a:ea:
cc:88:14:3d:b1:6e:b9:6a:f5:39:70:1a:3f:a2:9f:
4a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CB:61:55:CA:A8:4A:DA:F6:83:2B:9B:9F:6D:A4:D6:B9:AB:62:42
X509v3 Authority Key Identifier:
keyid:F9:E6:59:E7:EE:F6:D7:3B:68:6E:B1:D2:95:6C:71:F3:BE:5B:BD:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eZZ5-721ztobrHSlWxx875bvXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb8db5-1189-4351-bde7-206bcca78421/1/1-eZZ5-721ztobrHSlWxx875bvXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:9d:28:03:8f:d0:f4:3e:83:d3:a2:eb:8b:33:85:1d:ac:
20:2e:af:c3:c4:b3:a5:aa:2f:b9:a7:90:ad:18:42:9d:72:09:
80:ae:a5:9d:03:67:d4:23:96:7b:b0:4c:52:66:fd:2c:48:7c:
78:61:d3:20:d1:e3:56:44:93:29:5e:7e:77:b5:54:58:ec:4b:
79:ef:53:b0:af:68:f3:e9:92:07:70:02:8b:86:a1:7c:7b:93:
cc:36:32:ee:ae:de:4c:5e:05:5e:57:f7:0f:0f:57:bc:4c:34:
d6:b4:d5:5e:09:ef:c5:0d:6a:00:96:3a:ac:3f:bc:74:13:d6:
ac:49:59:e0:4d:2b:cd:f4:91:34:32:bb:9b:31:da:c1:a2:66:
84:e8:7d:23:b0:85:f9:c7:53:10:04:1f:6a:42:80:ad:dc:cf:
51:69:ab:31:0c:ed:4d:ae:df:1d:c9:1a:14:3c:9b:bc:ee:14:
05:30:32:fd:eb:f7:05:a3:d5:57:0f:7d:a6:37:d6:62:d5:77:
89:98:8b:d5:90:21:91:7e:81:3a:e5:b5:eb:df:ef:10:cb:51:
49:7c:f2:f4:3c:50:e3:f1:92:d3:44:31:5d:33:73:13:08:52:
ef:d6:ab:c8:d9:ca:8d:34:54:9f:cd:82:d8:05:4d:d8:1f:6a:
93:1b:43:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:25 2025 by rpki-client