Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File: 1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier: aqWeKNrrIEbbJwFOZPGDuziPB7Pz/ksVSEpSn5SIIAk=
Subject key identifier: 08:5E:2B:A1:50:F3:5A:1D:FD:3D:9D:3D:09:51:14:7C:9F:A3:0C:ED
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer: /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial: 019A72932A097D34E8C361D7AB4C158514AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:38 +0000
Manifest this update: Tue 11 Nov 2025 11:00:38 +0000
Manifest next update: Wed 12 Nov 2025 11:00:38 +0000
Files and hashes: 1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: GDiVRDOIpRGMNM6QqopJtXU1t6X1rhr+lkfHO2OAAwY=)
2: qSALXGZS-mStlLpg8jjf75z_AxA.roa (hash: JTmyN1Wglwwaiz8Y4z1qxOyBmB8F9ra5LEBRhnN+ctY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:2a:09:7d:34:e8:c3:61:d7:ab:4c:15:85:14:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Validity
Not Before: Nov 11 11:00:38 2025 GMT
Not After : Nov 12 11:00:38 2025 GMT
Subject: CN=085e2ba150f35a1dfd3d9d3d0951147c9fa30ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:2c:9b:09:32:c5:de:c4:9f:8f:37:1a:67:
96:5b:d7:f7:06:08:85:7b:e3:39:09:39:ee:80:11:
9b:89:4b:0f:65:ab:0f:6c:a8:ba:df:2b:b0:47:ed:
30:0e:66:c4:bd:8f:ad:cc:42:7b:f7:9c:d0:d9:a6:
5f:3d:38:bb:c0:44:07:a1:db:98:45:be:c2:8a:5f:
1b:a3:d1:16:2b:da:c5:9c:a4:d4:44:fd:b1:c9:fc:
f5:03:44:4c:e6:47:00:a5:df:15:0b:2e:c7:06:b5:
cd:62:2c:e5:79:82:85:3f:8f:7a:88:51:f5:d8:92:
3f:2f:10:75:bf:63:fb:f1:7b:c6:31:54:4c:14:83:
21:fc:6c:2b:6f:78:d3:ce:a8:70:dd:c4:d6:ff:1b:
3c:f4:75:27:65:94:4e:ee:52:dd:8b:77:a7:04:09:
7a:15:aa:9b:c3:37:a5:fc:ff:c6:b2:57:54:dd:ca:
51:82:ee:c3:27:d0:6d:4f:5d:1a:1a:72:71:d2:b4:
f9:6c:a5:81:d5:f9:e2:a7:e1:35:16:46:c8:ef:6e:
5d:6b:6f:fb:02:a9:26:a6:b8:f7:41:4b:07:73:e1:
c8:e7:9b:e9:98:4e:0e:55:58:36:3b:e3:7f:0b:d4:
db:bc:b0:62:f0:c3:f3:f8:9e:d0:47:d7:48:b4:de:
b7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5E:2B:A1:50:F3:5A:1D:FD:3D:9D:3D:09:51:14:7C:9F:A3:0C:ED
X509v3 Authority Key Identifier:
keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:e3:66:ff:7f:f3:cf:cf:89:4b:af:ec:e7:e9:cd:ee:ef:
46:da:ee:ca:a8:7b:7d:36:82:09:37:86:2d:53:c8:6d:fa:1c:
51:ca:85:b8:52:96:c5:68:13:26:58:6d:f3:85:81:bf:89:b9:
2d:40:f4:56:06:4e:48:4b:c9:ff:b3:95:58:1c:5b:f3:ef:b1:
e3:89:60:5a:9c:80:bb:2f:1f:9d:84:29:e1:3e:ab:37:ca:2a:
c3:5e:85:01:ca:90:66:89:50:cb:82:43:d5:50:56:29:99:94:
d6:4b:b2:b3:9d:2c:5c:fb:ef:a2:87:b3:1a:c5:36:ce:ed:07:
c0:9e:2f:f1:39:ca:7c:22:8d:e1:b2:d0:40:ba:3c:d4:8b:a7:
22:c2:d7:e9:95:c9:51:b5:d8:c9:ec:91:23:b5:64:86:d8:be:
36:8d:3d:db:6a:1a:5b:0f:53:92:23:a4:f3:07:3e:97:e3:fa:
5a:a2:55:da:9b:88:77:0a:d5:e8:ac:d6:a6:10:7a:c9:db:d7:
e8:f2:e4:cb:b3:78:35:74:d9:1c:25:99:b7:75:e9:be:27:55:
45:5e:f1:d9:0f:09:c2:1f:12:3c:4d:57:85:5d:fd:35:ed:7a:
80:fb:a5:b7:9e:16:6e:98:23:a7:69:25:5a:79:99:86:b3:ad:
1b:06:f2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:44 2025 by rpki-client