Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
File: 1XgxwfXmACVCvOut7yQSithG6vk.mft (raw, json)
Hash identifier: DzuHNz4hl0/yK1qRqeGsmogAnfKhskDiKmR0q+1FKlk=
Subject key identifier: DA:9F:DB:07:6A:74:76:8F:55:FD:15:2F:7D:E7:E4:A2:C4:21:C0:93
Authority key identifier: D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
Certificate issuer: /CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Certificate serial: 019A7180A14893F744383CC751A41C50880B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
Manifest number: 01E2
Signing time: Tue 11 Nov 2025 06:00:46 +0000
Manifest this update: Tue 11 Nov 2025 06:00:46 +0000
Manifest next update: Wed 12 Nov 2025 06:00:46 +0000
Files and hashes: 1: 1XgxwfXmACVCvOut7yQSithG6vk.crl (hash: u6hYLb2qMPpL/uy3Jr7nZVPgCTUk+e8LK390Pon10x4=)
2: jBcC68-4tNTaOUs94kizBYj_5jE.roa (hash: CWF9O9xI5w99y3uaUjJU6mOhyBR4YqldPuJsucAG1t8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:a1:48:93:f7:44:38:3c:c7:51:a4:1c:50:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d57831c1f5e6002542bcebadef24128ad846eaf9
Validity
Not Before: Nov 11 06:00:46 2025 GMT
Not After : Nov 12 06:00:46 2025 GMT
Subject: CN=da9fdb076a74768f55fd152f7de7e4a2c421c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:94:15:50:0b:ab:10:9f:10:4f:4d:41:42:00:
4b:f8:ad:f7:b9:96:ea:ce:65:f5:cd:fa:5b:03:ce:
4e:45:77:dc:5e:03:6c:56:ca:85:bd:05:c5:2a:f3:
86:b0:0e:2c:1d:fa:48:ab:a6:ff:00:38:86:d4:5c:
0b:af:fe:56:25:80:bf:a9:da:4e:50:87:f3:31:86:
f1:d8:35:bd:64:3e:7f:68:7f:9f:2f:0a:c0:f2:92:
48:34:fd:eb:eb:0f:6e:72:3e:c0:12:19:de:c0:22:
d3:05:8c:53:14:84:ae:0f:f5:d9:fe:de:3e:3b:a8:
dc:37:2c:f8:b5:26:99:f1:97:c1:b0:d5:91:e5:7c:
aa:b4:83:5e:ff:16:b1:66:dd:2f:45:6d:c2:40:2f:
00:ae:6e:da:c4:3e:82:9d:27:e7:5d:4c:ee:80:52:
c8:b7:c3:68:84:8c:90:51:fa:17:e9:50:fd:a1:84:
a2:81:49:17:97:43:2f:85:a0:d9:a2:33:ae:a9:21:
40:0a:ca:0b:ba:d2:00:c2:9f:47:c9:f3:3d:53:22:
b4:65:8c:7d:fb:b1:93:d8:b3:0e:54:af:8d:3e:d7:
10:34:4c:cf:5f:eb:b2:b2:e9:a6:43:df:30:1a:c1:
32:f6:df:24:8b:4f:6f:fc:af:76:76:bb:7b:c3:63:
da:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:9F:DB:07:6A:74:76:8F:55:FD:15:2F:7D:E7:E4:A2:C4:21:C0:93
X509v3 Authority Key Identifier:
keyid:D5:78:31:C1:F5:E6:00:25:42:BC:EB:AD:EF:24:12:8A:D8:46:EA:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1XgxwfXmACVCvOut7yQSithG6vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b1964a-30ae-4482-845d-746365dba5bb/1/1XgxwfXmACVCvOut7yQSithG6vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:1c:da:0c:92:a1:3e:b7:d3:81:d9:a5:1c:ed:a3:ce:b2:
ba:41:45:c4:cf:0a:82:8d:d1:c1:62:8e:6f:0e:76:e5:24:6a:
8e:99:81:4b:d8:06:08:32:b7:29:55:b4:c6:9e:4c:32:1c:f9:
f9:ff:bb:18:4d:a3:2e:23:32:d4:22:b7:23:f8:c2:fd:ab:5f:
0c:5e:2f:53:c9:8e:04:86:eb:95:a9:73:6d:cf:b5:ab:f9:0f:
5f:47:30:87:1d:5e:ea:17:dc:c7:9f:49:49:b5:ec:20:ed:36:
4d:e8:ff:c2:88:5a:d9:1a:8b:9c:95:18:34:1d:95:83:60:d5:
d9:6e:02:36:4d:25:62:93:87:5a:b6:44:a7:e2:b3:1c:04:6a:
a1:a3:7c:61:61:4b:7e:ab:e2:58:f0:58:c4:e1:fa:3d:92:0e:
df:f9:b2:f8:3b:d1:b7:43:c5:e0:3d:d7:d1:fe:79:a0:b0:b6:
c6:72:a2:05:8b:7a:f2:05:7e:9e:6d:d2:14:c0:5c:5c:6c:60:
a4:b2:88:8f:d5:c5:06:28:c7:c6:a6:ff:d2:fe:7a:6c:eb:1b:
20:9c:47:13:da:3e:21:de:f4:95:67:e3:c7:14:70:94:db:69:
65:56:52:22:d4:75:50:dd:67:b6:73:b8:73:bc:92:5c:24:4f:
d6:85:ea:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:41:43 2025 by rpki-client