Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json)
Hash identifier: 3e782NV6XQueB36TyraTHVdsI7WOrTOao9TGvplOekM=
Subject key identifier: 5A:3C:21:AB:9F:77:66:C5:CC:BE:DA:02:08:12:C1:AF:A4:9E:02:00
Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba
Certificate serial: 019A72CA6526CB6E3D8D6D22C1BE72F4A680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
Manifest number: 1542
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: 8pH2Kj7JdTUDyNsQSflcyU8KfKg.roa (hash: zwDU/jKNnBFtGNt7tHJBjkfOSMvDNIS5NSTqFRpcGt0=)
2: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: H9JyA+Ljq9IF5wZnt1WIeLpAhrvOmyVZqDXabtJJ7OY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:65:26:cb:6e:3d:8d:6d:22:c1:be:72:f4:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=5a3c21ab9f7766c5ccbeda020812c1afa49e0200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:e1:17:51:a9:2a:f6:31:7f:d3:05:56:7c:
e4:d3:e9:6b:f3:7e:83:43:04:2f:6a:60:f9:4f:48:
19:6d:bb:39:d0:78:53:ee:52:7f:21:05:66:1d:9d:
ed:1b:2d:61:b1:8b:88:91:41:81:e0:7f:37:51:bb:
25:c9:6f:ec:77:b6:c6:63:17:cb:84:60:45:da:3a:
c8:d9:a7:60:0a:c8:8e:26:ff:43:4f:ec:e6:b7:61:
7c:ae:79:cd:cd:53:9b:77:07:f3:e6:69:1e:7b:7f:
be:f2:7d:82:ac:a3:1a:c7:d6:8a:c5:e6:28:dd:93:
6c:77:2e:c6:59:3d:30:e4:eb:00:db:92:5e:32:c6:
08:f0:b8:a7:4f:08:f9:61:55:5d:59:cb:48:cf:36:
5b:ed:48:ec:04:f3:29:28:a4:e2:df:80:c4:99:10:
75:a1:a6:23:c6:54:64:ea:f7:1b:ea:5e:3d:d8:c1:
35:c0:fe:33:5a:69:e9:7c:ec:ff:08:ca:28:02:78:
d1:aa:50:67:cf:a9:41:b3:88:f3:2c:59:e5:0d:de:
55:7b:aa:24:4e:f6:e5:2a:9e:19:d6:ec:c9:93:73:
75:5c:de:3f:1d:ff:48:ad:bc:01:b3:cd:fd:a8:4d:
e5:a5:ee:b3:85:c1:1b:46:8a:75:27:36:9c:25:14:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:3C:21:AB:9F:77:66:C5:CC:BE:DA:02:08:12:C1:AF:A4:9E:02:00
X509v3 Authority Key Identifier:
keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:9b:d9:16:29:6c:48:35:cf:16:e7:7b:a6:1c:ed:42:a0:4b:
49:7e:9a:72:59:a0:bd:51:17:16:59:c3:c6:01:e7:03:ad:c6:
6b:99:81:d4:aa:3c:4a:56:8f:8f:4e:e5:af:3c:84:d6:55:9c:
48:af:8b:ab:ab:7e:ee:96:d7:df:09:70:b8:59:a8:37:30:30:
cd:2a:28:27:d1:1e:8b:45:45:56:04:5d:54:61:a6:bf:a3:9f:
0c:c7:ad:e7:f7:cd:ff:42:a1:8e:37:c7:61:c1:1a:58:3e:65:
93:8f:5d:ec:9b:35:ef:57:fa:55:13:e7:50:4c:78:7c:84:ac:
84:92:0d:28:48:ec:02:ee:08:81:41:66:39:43:cd:af:20:47:
2a:ea:12:87:e7:c1:1e:70:06:6e:af:0c:3b:c6:38:c4:23:c9:
97:3f:6a:f1:71:93:82:22:a5:19:82:c8:89:3e:a5:77:2b:2d:
4c:62:f7:71:65:95:80:15:34:66:17:d1:39:7c:2f:6f:1b:61:
ee:28:7e:e7:53:10:15:be:35:98:b3:5c:24:c6:63:1f:df:54:
c1:88:57:61:2d:cc:9d:94:54:d4:f5:4f:c6:bd:89:e7:ea:fa:
a9:19:25:34:a9:17:9b:3d:1b:74:c3:c7:be:e0:07:72:f6:9c:
19:3a:46:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:18 2025 by rpki-client