Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: /tc1tcwtqBy9ltFpRYil0ETgjodfqRX/UD59waRkiK4=
Subject key identifier: 2A:17:1A:17:26:69:4F:57:E3:8D:38:2A:6B:86:12:D2:07:9A:68:4E
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019A706E08B0A1FA75D298FB49D9775CB1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 06A5
Signing time: Tue 11 Nov 2025 01:00:50 +0000
Manifest this update: Tue 11 Nov 2025 01:00:50 +0000
Manifest next update: Wed 12 Nov 2025 01:00:50 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: MaDv2ftAenkNSaMe2KghK9kQibtzHs3AnzASkien94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:08:b0:a1:fa:75:d2:98:fb:49:d9:77:5c:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Nov 11 01:00:50 2025 GMT
Not After : Nov 12 01:00:50 2025 GMT
Subject: CN=2a171a1726694f57e38d382a6b8612d2079a684e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:86:28:74:d0:8f:78:6c:de:18:3a:21:0f:9d:
43:e0:75:e1:bf:7e:cf:08:56:d0:ff:ad:eb:14:19:
aa:58:99:a2:27:b8:40:7e:98:3e:38:db:0f:6c:93:
ff:8f:68:51:68:0b:80:ab:d7:d4:ce:8c:38:c0:46:
ae:ae:78:7e:ad:2d:a0:ea:3f:fd:b8:99:14:53:c3:
05:35:ea:e3:fc:1f:52:3e:c9:83:68:8c:c0:54:cd:
07:44:d0:ae:51:cb:cb:8a:93:25:34:da:ea:e3:6a:
0a:60:bb:3a:a5:e5:57:a8:fc:50:75:bf:3e:0e:73:
3c:00:b9:ef:42:a0:ee:39:16:2c:35:fe:21:13:ac:
3e:73:27:b6:4a:0d:47:da:3a:8c:67:17:14:cd:b5:
ee:fc:52:19:15:d6:ad:37:35:6a:0c:89:ec:05:c5:
55:b6:9b:54:56:32:64:8b:e4:5c:cf:7b:1a:fe:39:
d8:57:2d:ab:91:87:63:06:fb:ab:b0:fd:49:9f:45:
8b:9e:31:1e:c1:4f:17:95:53:02:e8:0e:aa:f7:87:
33:f9:57:24:9f:28:93:54:96:f8:b6:fa:37:c2:8e:
d3:24:d2:d2:1b:98:32:1f:67:97:8f:e6:5c:ef:96:
d2:ce:3d:d2:56:7b:42:52:27:ea:30:c1:75:56:69:
e5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:17:1A:17:26:69:4F:57:E3:8D:38:2A:6B:86:12:D2:07:9A:68:4E
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e3:64:38:91:d6:bf:20:34:e2:a8:97:1d:41:e7:42:68:74:
ee:f5:0d:37:b8:8d:3b:60:5b:8c:0b:23:a9:8b:ee:e7:dc:69:
67:d3:5d:0f:4b:bc:7c:35:3e:d9:e1:f3:31:e4:ef:6d:0c:b7:
10:7c:cf:2f:d4:8a:7f:52:7a:0b:49:f3:51:7e:cf:93:10:00:
7e:25:58:9a:f3:2a:8d:c7:94:c8:2d:09:b5:b4:22:00:3c:8b:
7d:bc:e3:2c:c6:e4:c5:eb:1f:53:19:0f:02:4b:eb:93:ae:82:
ed:38:a3:61:7d:40:4e:5e:b3:5d:89:19:a3:fa:c3:0e:4b:ab:
7a:18:02:73:e1:47:32:47:dd:24:ba:38:45:d2:b6:ca:5e:f6:
e4:67:4e:ad:e1:8f:9e:68:16:4b:0f:1f:a4:7c:ff:73:77:be:
65:6e:02:49:4f:36:9d:ae:79:e6:9d:e1:24:05:fa:3d:bb:99:
14:51:49:37:0c:cb:71:3d:7f:be:05:93:6e:bd:92:29:8e:96:
96:d5:0e:bf:7a:27:ba:ec:8c:55:c1:ee:ab:fa:33:8c:cf:33:
a5:1d:25:d0:10:64:b1:37:fd:d8:89:e3:2e:8b:61:6a:83:2a:
8c:f6:62:1e:cf:7d:98:28:20:e4:b5:4c:95:f0:e5:29:61:2a:
44:07:b0:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:13 2025 by rpki-client