Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: mK2mHqsPQFu/+1oDuLh3C/XeX0zc/R+W3JYfX6XbXlo=
Subject key identifier: 54:AB:FC:5E:5E:06:ED:09:6F:D9:B2:44:F8:31:63:07:0A:3D:C1:B0
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019A22C090F6065BDC5001FB95D9D72E15B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 0AAD
Signing time: Sun 26 Oct 2025 23:00:36 +0000
Manifest this update: Sun 26 Oct 2025 23:00:36 +0000
Manifest next update: Mon 27 Oct 2025 23:00:36 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: /UKoN3MktNHc2EpBhHT+PVHM0XFywPJZD6NcVpGBV2w=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:c0:90:f6:06:5b:dc:50:01:fb:95:d9:d7:2e:15:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Oct 26 23:00:36 2025 GMT
Not After : Oct 27 23:00:36 2025 GMT
Subject: CN=54abfc5e5e06ed096fd9b244f83163070a3dc1b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a1:90:e6:63:c6:71:05:47:5c:03:20:48:0a:
36:29:73:1a:70:9e:1b:06:fa:07:14:54:e1:12:30:
4c:00:a5:9b:2e:61:cd:fe:6f:2f:7e:e4:fa:19:45:
26:72:16:e7:8d:29:31:50:a5:10:e3:33:25:7e:2a:
da:24:ec:f4:d5:76:eb:a5:ce:ba:6c:d3:9b:0b:3c:
4f:9f:c3:0e:24:94:16:48:36:98:5a:e1:e8:34:a3:
17:4b:b7:0d:df:9b:f6:d4:4d:25:70:09:c9:81:8c:
da:9c:c1:d6:05:04:34:6e:25:f7:43:fe:76:63:7c:
80:4f:34:0c:3a:02:ed:dc:85:89:a8:8d:98:08:45:
95:1c:fc:a8:da:08:7e:40:bb:a6:b1:43:59:e5:cf:
aa:cb:92:9a:a1:6c:be:31:b1:bc:d9:28:4d:9c:3b:
73:eb:d6:4f:14:db:67:d2:9e:2d:85:4a:f3:62:6a:
3a:64:fc:a2:e1:0e:59:a9:74:29:24:ce:a6:a8:8a:
8b:bf:97:b1:7a:3a:81:dc:10:b1:58:34:91:9a:27:
a3:73:e4:d9:0d:58:90:1a:f3:1d:9b:0d:3d:7f:ae:
f1:5a:57:0a:fd:27:c7:0c:2f:e0:e5:e0:50:cb:8e:
5d:0c:9b:7d:3b:c4:6c:e1:02:38:8f:a5:34:0e:26:
fe:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:FC:5E:5E:06:ED:09:6F:D9:B2:44:F8:31:63:07:0A:3D:C1:B0
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:fa:a9:80:78:88:34:0b:7f:00:83:50:b0:9d:7c:b5:4f:
69:46:3b:e1:76:ed:7e:b9:9c:6a:f6:59:14:93:73:06:92:86:
44:5d:6f:2c:fa:e3:55:c8:7d:3d:23:d4:bd:3c:cb:52:12:c4:
82:04:53:a7:35:c4:2d:94:64:49:27:38:17:3b:d0:d1:04:7b:
9c:3c:90:9f:3c:4c:f6:58:cc:5c:7e:6f:75:40:6e:f6:bc:73:
6c:23:dc:d8:fa:ae:3d:05:2f:24:7c:60:71:aa:0f:57:e0:b7:
ae:42:9e:d0:0c:ee:6c:15:13:ed:1e:ca:29:53:4c:6c:ae:4d:
08:a1:3e:57:dd:f8:09:f3:7e:dd:d5:99:6f:73:6f:24:e1:9b:
09:65:0f:49:c7:93:de:1c:83:73:f7:fe:d9:bd:6d:13:a0:cb:
89:01:a5:46:43:e4:22:f2:80:6c:ba:17:86:4d:6e:12:93:8b:
22:75:f0:b2:e2:fc:2d:cc:d4:47:27:9f:92:7c:2b:4d:3a:85:
e6:01:4f:0a:41:e6:ac:ac:4d:7e:20:b4:7e:23:6a:8d:93:de:
60:a5:bf:6f:4e:ce:b7:0b:42:86:11:ca:66:dd:52:62:34:1b:
36:34:11:7c:60:fd:3a:9e:36:1b:ba:d8:38:9a:43:b2:54:d2:
41:e7:db:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:55 2025 by rpki-client