Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
File: t1RlKp6YkUWgWfeIg9U26SxDtT8.mft (raw, json)
Hash identifier: t2KXbAxE3F9WRcVrXL8TfxDnr26O5vUAKUGTBGHIIC4=
Subject key identifier: 17:8F:2E:78:43:2F:A5:A1:3C:B5:66:79:6F:56:2C:B7:AE:C1:C3:8A
Authority key identifier: B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
Certificate issuer: /CN=b754652a9e989145a059f78883d536e92c43b53f
Certificate serial: 019A71B8483AFF0647024F40040B4DC363F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
Manifest number: 01B3
Signing time: Tue 11 Nov 2025 07:01:33 +0000
Manifest this update: Tue 11 Nov 2025 07:01:33 +0000
Manifest next update: Wed 12 Nov 2025 07:01:33 +0000
Files and hashes: 1: 4xwaWRub9ONEDx1qZtSfGSWgm_U.roa (hash: DQtqDfCJ+g5/1BpTJ+JbAARxia0+c3cSAM/MeNxPjZQ=)
2: t1RlKp6YkUWgWfeIg9U26SxDtT8.crl (hash: 8Ih4QmlwlI1J7S46CCWACzLFGlEl6bVhclZQGbKZnts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:48:3a:ff:06:47:02:4f:40:04:0b:4d:c3:63:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754652a9e989145a059f78883d536e92c43b53f
Validity
Not Before: Nov 11 07:01:33 2025 GMT
Not After : Nov 12 07:01:33 2025 GMT
Subject: CN=178f2e78432fa5a13cb566796f562cb7aec1c38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:4f:57:97:67:9a:a9:ce:b4:0e:cd:6e:9f:
bf:1b:9d:20:f6:22:07:7b:6b:aa:6e:91:5c:fb:95:
13:3f:d2:f7:79:a4:85:1b:02:6e:b3:db:0c:74:10:
b7:a1:94:3d:f7:d3:9e:db:e7:f9:7d:49:64:5d:ff:
9c:e9:8d:da:dc:04:c4:84:9a:1a:4c:e5:62:e9:10:
82:63:e6:51:ba:5e:ef:bc:b7:68:d9:4a:b6:80:ce:
22:b2:9d:17:34:10:a5:89:1b:05:ba:c0:da:73:c7:
15:fa:c9:45:f5:76:c1:37:54:c0:ea:1a:30:a4:76:
c8:3a:a0:ac:b7:db:f2:46:be:eb:4b:2d:4f:88:bd:
a1:4a:1e:41:b2:d0:0f:a4:e8:51:eb:95:d1:e4:b8:
28:0e:3f:cf:53:0e:4d:ff:c9:5b:8c:9b:b4:10:5a:
41:5c:42:ca:90:df:8d:df:1e:2c:7f:57:9b:81:2a:
b4:e0:fc:95:94:08:67:42:2a:87:f8:0f:4e:79:94:
4d:4f:c3:c1:1a:77:07:cd:b4:b3:0d:dd:01:cc:5f:
4d:ff:ce:9f:70:9b:2d:81:a5:9b:94:32:34:5c:f5:
bb:38:1a:d5:3f:ef:b9:44:48:0b:d6:1f:cf:4e:18:
d6:33:05:4a:16:a0:ec:96:39:88:68:75:70:9f:aa:
69:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8F:2E:78:43:2F:A5:A1:3C:B5:66:79:6F:56:2C:B7:AE:C1:C3:8A
X509v3 Authority Key Identifier:
keyid:B7:54:65:2A:9E:98:91:45:A0:59:F7:88:83:D5:36:E9:2C:43:B5:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1RlKp6YkUWgWfeIg9U26SxDtT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/afd6b9-6c4e-40e0-ae96-b4da20a757cf/1/t1RlKp6YkUWgWfeIg9U26SxDtT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:77:78:f1:67:a7:65:da:7f:6b:50:64:55:2f:46:8c:79:29:
7c:a8:1d:9e:6d:40:61:26:78:86:11:bd:99:14:19:30:7a:ea:
34:4e:fd:79:af:c9:1f:3c:e6:1a:5a:d9:c3:fd:76:b8:5a:da:
a6:26:14:7c:49:d8:19:c4:0d:2a:c3:bc:63:58:21:b5:b7:b0:
fb:4c:ed:61:86:6a:a2:27:69:45:85:a3:dc:fc:58:5e:f0:1a:
e3:1d:6a:eb:33:d2:6f:d6:69:ec:2b:84:57:57:7c:2d:67:2c:
05:07:0d:b7:2a:d8:89:f5:3b:49:36:1b:08:67:13:9d:c5:e3:
b7:75:56:2b:84:9c:11:65:37:70:09:aa:4c:b4:2f:91:94:c2:
57:76:07:3c:46:32:44:e5:e1:f1:26:75:4e:36:56:fc:c0:08:
b8:78:c1:80:3d:81:5c:67:05:81:d9:dd:10:0f:bb:5d:63:1b:
6a:7e:c1:f8:ab:da:4b:11:aa:aa:62:e1:e1:a2:5e:70:3b:34:
44:22:dc:91:8c:94:b5:b1:08:be:97:22:80:9d:fc:d9:ef:6c:
4e:15:5e:9c:25:83:15:df:d7:c1:0f:db:5c:33:5c:36:58:8d:
bb:44:90:40:49:b1:ff:f8:ec:a2:82:a1:7a:1d:51:da:19:83:
6c:27:e2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:51 2025 by rpki-client