Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
File: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft (raw, json)
Hash identifier: 7J+0nQT896kD18IUYvf9MPIHkqamhhDX6pDHxCL/JvE=
Subject key identifier: D3:81:F9:C6:E3:A8:BB:2C:62:92:B9:C3:D5:AA:24:28:D5:F6:89:DA
Authority key identifier: AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
Certificate issuer: /CN=af59d35331c9efe33c9530769325ae8ef550ffda
Certificate serial: 019A7149D62C179BB82CFC0EE6620E5FBAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
Manifest number: 1553
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: d1cUGJ6v4aRMFVJ8jR6zf61KUZo.roa (hash: w1Q0yU0/JMksdYl+XzfFqraLhxZYw0tN1TBkWQdYmYc=)
2: r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl (hash: IKcQ4I5xZTUugAkmrCu+hFXflmaf/nIiq1Bj93r6Cjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d6:2c:17:9b:b8:2c:fc:0e:e6:62:0e:5f:ba:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af59d35331c9efe33c9530769325ae8ef550ffda
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=d381f9c6e3a8bb2c6292b9c3d5aa2428d5f689da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4a:c5:66:93:e9:ba:a6:f0:04:fa:4e:17:7c:
95:ca:e5:04:65:7c:a8:17:0c:c8:3d:fb:ac:e0:60:
3f:fe:11:a7:00:c1:c3:19:f7:bf:cf:11:fa:2e:d9:
5b:4e:a8:72:68:51:a9:c3:25:49:93:8b:6f:74:e3:
02:a4:91:79:cc:02:87:57:43:95:e1:38:ab:92:c7:
bf:4a:42:98:e5:7d:25:7a:d8:3c:11:36:4d:7b:a5:
30:64:ff:81:f5:cb:8a:07:70:39:4e:db:fb:88:e7:
21:25:bb:a9:15:1f:d1:22:50:1e:06:20:aa:45:89:
2f:56:3a:a8:48:82:fc:0f:f9:45:13:50:2e:87:fc:
89:eb:8b:0d:ea:82:0e:9c:95:be:93:d1:fe:f0:67:
5b:c4:2a:64:dc:61:28:79:f8:cc:1a:77:ce:3d:34:
d2:86:f7:cd:55:6d:80:47:7e:a5:52:0f:58:db:3b:
7e:9a:9d:bf:06:4c:74:5d:e9:e8:f9:e5:f5:13:a0:
b4:d8:43:44:4a:cd:a2:47:17:32:8f:a1:8e:15:50:
56:6c:fd:86:77:0e:c1:37:cd:59:9d:35:ec:c0:d7:
64:bf:0a:c6:98:37:3d:ce:73:8f:ad:69:06:7f:f1:
c9:25:0b:28:bd:3d:49:a5:d7:63:77:12:bb:d4:00:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:81:F9:C6:E3:A8:BB:2C:62:92:B9:C3:D5:AA:24:28:D5:F6:89:DA
X509v3 Authority Key Identifier:
keyid:AF:59:D3:53:31:C9:EF:E3:3C:95:30:76:93:25:AE:8E:F5:50:FF:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/14e601-f31a-41bb-93fe-a59e6e9abcc8/1/r1nTUzHJ7-M8lTB2kyWujvVQ_9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d9:d7:7f:c0:41:aa:99:47:92:51:cb:1e:82:92:35:1a:10:
d3:32:1c:28:96:a0:3a:75:d1:e6:6b:e4:63:9d:c1:f6:b0:ef:
39:79:32:2e:0d:a5:fa:fa:fa:fb:29:2d:0e:8d:d8:ec:13:27:
9e:56:5a:e4:83:b2:ba:99:14:4f:04:8a:80:36:e9:10:bf:b7:
39:0f:bb:14:46:7a:36:60:fc:c9:ce:1c:b3:bf:bd:2d:89:5d:
fa:8f:22:0d:1a:d2:24:f0:bf:d6:5b:2f:e6:75:51:04:44:b7:
d5:1e:d4:fa:8d:f9:de:be:73:03:73:d0:33:36:49:ab:b8:81:
ad:e1:8d:f7:e8:63:a3:e8:17:2d:6a:41:6f:94:89:b8:08:0e:
c6:de:47:48:8d:5e:ad:1c:9e:27:db:8f:8d:b1:c5:d6:fa:4a:
d4:0a:49:5f:9f:bc:9f:1b:96:17:d5:3b:d6:24:7d:c2:a0:99:
1f:fc:0b:1b:8c:2e:ee:3e:f0:6c:49:6c:b9:d5:48:e6:3f:9f:
21:21:bf:92:9e:d0:7b:bc:97:37:29:1c:ce:a6:98:c9:83:21:
28:ea:db:86:52:5b:73:db:d0:bf:4d:2e:fe:e9:6c:96:7d:15:
4e:79:6f:45:9d:78:72:b6:1a:3b:6e:40:e9:75:7b:b0:72:51:
27:50:77:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:18 2025 by rpki-client