Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
File: 1ftSajPzZqqJRhiOXTJr3ORuLEA.mft (raw, json)
Hash identifier: 2HRfapieAMOZsFRelgUawOqr4PSWl2lXb6yVFCKZP7M=
Subject key identifier: 11:C6:9A:A1:49:18:81:F0:D6:59:0D:F4:4C:31:3D:04:16:58:8B:41
Authority key identifier: D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
Certificate issuer: /CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Certificate serial: 0199FE4697793FA304F26BA3F030FDBE5163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
Manifest number: 094D
Signing time: Sun 19 Oct 2025 21:01:03 +0000
Manifest this update: Sun 19 Oct 2025 21:01:03 +0000
Manifest next update: Mon 20 Oct 2025 21:01:03 +0000
Files and hashes: 1: 1ftSajPzZqqJRhiOXTJr3ORuLEA.crl (hash: leVK27Jrpaek2tD0XLForVwn9FiQWvjeSgqJ0xMCOMM=)
2: qfUgWmjDBIJJxDCL7jiouOIMq6E.roa (hash: 8LoPzts8EEAcumqZ7LuONp4lduak/H5FziwN8+pOFJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:97:79:3f:a3:04:f2:6b:a3:f0:30:fd:be:51:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fb526a33f366aa8946188e5d326bdce46e2c40
Validity
Not Before: Oct 19 21:01:03 2025 GMT
Not After : Oct 20 21:01:03 2025 GMT
Subject: CN=11c69aa1491881f0d6590df44c313d0416588b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ce:45:1e:80:05:be:bf:9c:b6:57:3e:57:94:
5c:58:f3:75:fc:50:6a:ef:8e:f3:6d:46:a4:a7:ab:
e3:14:44:5e:69:ba:84:9a:13:2c:41:30:17:21:7a:
00:2d:ee:10:6c:9e:7f:3d:11:ca:20:26:4b:63:19:
39:a0:4e:5a:72:b3:ec:53:3c:12:f2:2e:f8:e7:de:
5e:45:85:a8:12:fb:06:f0:78:5d:c8:9b:cb:39:83:
73:1e:9d:63:46:59:e0:c9:a3:33:60:e6:4f:2e:41:
e2:80:be:b5:41:bf:5f:50:e5:2a:83:19:83:a3:7d:
00:f1:b4:78:81:57:76:36:4b:dd:10:27:de:d8:32:
94:53:2f:b4:4a:5a:e2:1d:63:b3:91:04:17:3a:f0:
7e:b6:88:36:c0:4c:0a:dc:68:23:51:bc:66:7a:e3:
e1:55:e5:fc:d9:27:05:ca:4e:e5:df:6c:08:b7:14:
c1:df:1d:88:aa:1a:b1:58:60:ab:50:04:19:a8:5a:
4f:2c:7b:44:8c:9f:63:1f:a0:c0:c3:4b:6b:57:0e:
32:55:44:42:65:a0:cf:c6:82:cf:82:cc:f8:26:1d:
49:4f:d0:59:39:b0:d3:cf:7a:bd:c7:c1:a3:61:87:
b1:02:93:5c:77:f0:c8:7a:2f:2f:b8:87:2c:67:3a:
41:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C6:9A:A1:49:18:81:F0:D6:59:0D:F4:4C:31:3D:04:16:58:8B:41
X509v3 Authority Key Identifier:
keyid:D5:FB:52:6A:33:F3:66:AA:89:46:18:8E:5D:32:6B:DC:E4:6E:2C:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ftSajPzZqqJRhiOXTJr3ORuLEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/4a27cb-8cd6-45cc-8246-0e9d3eca44c2/1/1ftSajPzZqqJRhiOXTJr3ORuLEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ef:7e:b1:f8:42:e3:8a:15:2f:ff:1f:ef:dc:ad:11:6c:76:
35:d2:22:e4:3f:93:14:4f:f9:79:84:f8:ca:fe:bc:a9:18:3c:
98:e0:5e:49:50:f1:ad:54:b7:bb:18:db:d5:ac:a9:f2:c2:bd:
92:b2:5a:53:07:4a:bf:12:f3:a9:6d:97:82:89:1e:f4:16:e7:
43:d9:44:60:5e:c1:4e:54:48:05:85:b5:fc:15:de:e3:27:45:
bd:d6:7e:c8:58:8f:88:12:a6:78:75:9d:d5:de:cf:9b:b7:d6:
dc:c7:fc:2e:91:ff:ea:5e:65:42:71:ad:e9:e5:fc:6d:03:9f:
c4:cb:38:98:88:96:40:7a:ad:af:4a:38:61:2f:24:2d:7d:56:
b1:6c:40:5b:da:b8:62:17:7c:34:48:35:cd:4a:af:b1:db:14:
ef:2b:ef:b3:28:e0:ed:fa:80:35:9c:a8:61:75:d8:56:8b:38:
7a:9b:ca:5c:bd:eb:54:bc:53:c0:73:39:77:63:15:6b:b7:02:
3d:ad:dc:42:26:8d:17:37:e6:31:23:75:88:0b:43:de:61:f6:
be:ad:4f:31:cd:1a:38:0b:ba:af:54:37:32:45:6f:ff:32:3d:
e9:fa:8b:f3:58:7b:e0:ac:a6:e9:b2:13:d3:6c:4f:76:37:d7:
d6:8d:27:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:16 2025 by rpki-client