Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
File: A1DfePx4WBNyTsZmSN-bSU-bjac.mft (raw, json)
Hash identifier: MNMSqHodQMrIb5NzFMrLjOGxsrPLyYUXO0y1e4mnt0M=
Subject key identifier: D9:A1:63:46:F1:43:F9:CC:2E:4F:4B:9F:E0:04:89:67:76:64:09:29
Authority key identifier: 03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
Certificate issuer: /CN=0350df78fc785813724ec66648df9b494f9b8da7
Certificate serial: 0199FC8F7D2630AA16F565FC48B84DC52936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
Manifest number: 1102
Signing time: Sun 19 Oct 2025 13:01:25 +0000
Manifest this update: Sun 19 Oct 2025 13:01:25 +0000
Manifest next update: Mon 20 Oct 2025 13:01:25 +0000
Files and hashes: 1: A1DfePx4WBNyTsZmSN-bSU-bjac.crl (hash: 1muY8DTYR9FxOEIxnzW/SN5twK5Z+OuLvehzfUWUPCU=)
2: YWZ9Y-_nf9hJ3PCcQZw9nBpADV0.roa (hash: 8GJk/xJD9TDW949jEwNVPLQ5jxG7+jInYSsAj0hFBHo=)
3: hL7gjsE__TvimmJVNhYnW8HxcTk.roa (hash: fSQmS4KDtYP+UxUBfXGw0aeIOC4KTOr+x3hlF+s6H3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:26:30:aa:16:f5:65:fc:48:b8:4d:c5:29:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0350df78fc785813724ec66648df9b494f9b8da7
Validity
Not Before: Oct 19 13:01:25 2025 GMT
Not After : Oct 20 13:01:25 2025 GMT
Subject: CN=d9a16346f143f9cc2e4f4b9fe004896776640929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:84:8b:ae:23:8a:a1:a1:06:c6:b2:a3:1b:af:
05:60:6a:53:1d:45:1b:0b:ae:11:da:1d:99:42:c0:
15:4a:d4:5d:ed:b4:65:e5:5c:ab:fc:05:e1:68:39:
2d:af:85:d4:9d:af:dd:d8:de:ee:92:fc:28:3f:53:
e6:de:37:a9:8c:9d:2c:8f:3b:92:0d:a9:0f:ca:ad:
f5:9b:d3:92:08:c6:7f:11:c9:72:60:82:0c:48:de:
f4:97:58:c1:8f:1a:a7:9c:25:f0:db:9b:5d:37:8c:
2e:61:e9:06:74:90:80:c4:8d:e3:be:dd:38:ad:ad:
21:04:47:f2:74:6e:e7:2a:b8:e3:1c:64:ac:8c:db:
28:bf:58:dd:f9:49:00:2f:b7:4e:4b:8b:af:3f:98:
7c:15:ae:15:9c:70:0b:cf:81:1b:a6:9a:45:e4:77:
c3:a4:b2:77:87:d2:8a:a9:e2:fa:b3:d4:8c:ab:41:
3b:ee:cd:1a:02:8d:8b:e1:a0:4e:de:de:e0:8b:60:
e5:56:cc:a8:a0:11:2b:53:c7:3e:70:f7:e9:7f:e5:
63:96:40:88:f2:55:29:40:8b:a0:44:31:02:87:b7:
fd:a6:30:d6:48:41:49:df:3d:51:d6:57:6b:eb:06:
52:72:cb:5c:47:cc:8c:1c:e9:e0:d4:f1:82:99:43:
eb:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A1:63:46:F1:43:F9:CC:2E:4F:4B:9F:E0:04:89:67:76:64:09:29
X509v3 Authority Key Identifier:
keyid:03:50:DF:78:FC:78:58:13:72:4E:C6:66:48:DF:9B:49:4F:9B:8D:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A1DfePx4WBNyTsZmSN-bSU-bjac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/ab586e-4b2a-47f6-ace8-d292ab7ce9fa/1/A1DfePx4WBNyTsZmSN-bSU-bjac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:08:a4:a6:33:09:61:15:7b:47:d6:50:27:a4:21:fa:66:15:
8a:8c:a6:39:d0:bd:cf:67:35:95:d0:e9:e0:50:d7:28:05:25:
c8:40:f2:c3:60:09:73:19:e3:1e:b4:db:3d:40:76:39:1b:79:
37:33:f2:68:2b:e6:bf:94:d6:72:ba:84:e6:99:e6:fd:14:7e:
22:12:ed:23:37:56:98:18:e2:fc:11:a5:37:cd:35:51:3a:28:
d6:9d:e9:85:f6:6d:3e:5e:56:3a:17:79:68:8d:69:c3:38:a7:
d2:a9:c0:7b:d1:a7:06:68:b6:00:5f:f8:c2:9a:88:1e:e3:6e:
10:f6:fd:7b:30:29:80:c0:6e:af:d8:79:b1:17:08:c4:ce:d5:
33:46:39:4f:fc:e4:56:13:12:a1:e5:23:1d:e5:27:1c:7b:05:
d5:dd:35:da:d0:08:9b:0c:df:b6:d8:16:d0:d1:8a:11:17:02:
3e:4a:22:bc:a5:97:57:a1:f7:9f:40:ba:06:af:4a:c1:1d:74:
cb:1b:26:90:57:c7:dc:5f:76:eb:75:3a:8c:26:9d:64:89:0b:
49:25:3e:63:6f:af:43:61:c7:ea:55:9b:32:d8:cf:e7:09:2e:
17:86:86:2e:d4:b3:95:bb:2a:13:f4:db:a6:37:e0:b4:88:fe:
de:ce:d8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:02 2025 by rpki-client