Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
File: 1F35i-yCdrgrqC2TdgRHukTRoZs.mft (raw, json)
Hash identifier: ogsIL69uX5KXKIm/u0AWhT8dpSKR1yRopFbgkNtle6Q=
Subject key identifier: 4F:7C:AE:DA:96:53:89:47:26:48:4C:30:83:2E:8C:20:69:C6:7F:84
Authority key identifier: D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
Certificate issuer: /CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Certificate serial: 019A7149CBA300F20AB8F517B58AEEC8728A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
Manifest number: 0F9C
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: 1F35i-yCdrgrqC2TdgRHukTRoZs.crl (hash: DsuzRfN5xOxcIInrBOmlstW5Z8u9oUaGk5tiwFhdLHc=)
2: g5vLvMzyY6iocE2krG0Z0SJdXKE.roa (hash: 7Uftt+pkf4JmzzrynHDiN+y0M7EXwi7l54WuFyKgcgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:cb:a3:00:f2:0a:b8:f5:17:b5:8a:ee:c8:72:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45df98bec8276b82ba82d93760447ba44d1a19b
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=4f7caeda9653894726484c30832e8c2069c67f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:54:25:5e:15:9c:f4:67:4a:ec:bd:b2:d9:
e2:5f:0c:97:67:09:ea:d9:e7:1b:49:ce:7c:5b:2f:
e6:50:f4:22:8e:2a:e5:a0:dd:55:18:7e:ca:65:e3:
77:e4:56:a1:39:b0:40:a5:cd:3e:d9:27:b9:7d:ae:
8b:d3:37:7e:9b:8d:98:1d:85:bc:a2:61:be:95:92:
4a:fb:69:6d:a3:48:99:6f:6f:a9:44:d8:b5:3c:84:
2c:94:7d:0e:af:d5:b0:2f:7f:1e:0d:ff:de:e2:a4:
27:24:35:9e:f4:48:a3:62:cc:89:0a:4d:8a:c7:00:
7a:d5:60:74:e4:9c:fb:cd:e3:4f:39:57:1e:c3:6e:
d8:da:21:8d:bd:a9:36:aa:ab:b0:c0:bd:74:e9:dc:
96:b5:50:79:f1:81:e2:af:87:e8:5e:76:76:a0:01:
5d:c4:6a:2b:21:75:7c:ea:7a:ea:5c:72:6c:62:60:
3c:7d:67:42:97:b4:90:54:e8:58:91:6e:b6:d6:42:
bb:e8:67:0f:3e:4b:19:89:c0:bf:99:1f:70:20:05:
b7:63:78:3c:75:f0:2f:ab:8c:3f:75:82:55:3b:82:
08:63:a0:d7:4a:a6:cd:c5:a3:93:48:90:67:17:c7:
c7:08:69:91:fc:00:10:41:9a:94:0e:fa:a2:00:39:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:AE:DA:96:53:89:47:26:48:4C:30:83:2E:8C:20:69:C6:7F:84
X509v3 Authority Key Identifier:
keyid:D4:5D:F9:8B:EC:82:76:B8:2B:A8:2D:93:76:04:47:BA:44:D1:A1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1F35i-yCdrgrqC2TdgRHukTRoZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/de065d-30e2-43d5-b357-c0956a80132d/1/1F35i-yCdrgrqC2TdgRHukTRoZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c2:42:6a:9d:b5:19:7c:ff:7c:64:b3:dc:86:09:d6:3e:d5:
d5:d5:73:79:0d:a3:c5:67:d0:1d:9c:4a:6a:50:b9:6a:c7:03:
0b:6c:3c:10:15:f9:e4:c6:2d:c9:42:2d:dc:96:94:0b:fa:d8:
d2:b7:e3:21:9f:62:06:9a:c3:0a:3e:6b:0d:fd:dd:6b:89:ca:
2e:c5:b0:76:e6:84:81:51:68:02:96:cf:e4:16:79:3e:11:ea:
f5:9f:67:d6:f9:18:da:be:b5:24:f1:44:24:83:7a:99:79:13:
0f:be:bf:f1:dc:c1:b8:5c:c2:78:46:3f:cd:64:20:ed:89:a3:
17:d9:c6:a7:33:58:d4:49:e4:b4:ce:d4:93:28:df:a5:ba:d0:
58:73:a9:48:96:eb:e8:7b:ab:ab:35:1f:cf:3d:2f:b2:fe:8a:
89:45:4f:ea:ea:48:e4:f5:89:61:0b:56:79:ff:01:85:17:3c:
27:f8:6e:62:f4:38:00:e1:1e:e9:3f:44:eb:59:20:fd:f7:ca:
f6:96:94:b1:5f:ae:ac:70:ae:5f:1f:e4:dd:1e:53:a4:f1:d6:
23:e3:b1:44:b4:51:40:35:f8:cc:11:f7:4d:d4:f1:5f:b9:4d:
21:19:29:0c:95:59:3f:ab:ce:aa:c1:3b:dd:83:14:22:98:5f:
ae:17:8d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:48 2025 by rpki-client