Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
File: 1AYg6l2vilSq6hfyy57N8114UwY.mft (raw, json)
Hash identifier: 84zGq4pH5d6rM7Tg4Lz3+w+Lz3rRq63AtirmZqF9+aY=
Subject key identifier: 91:5D:90:31:00:BF:BE:FA:00:0D:12:B7:E6:03:7D:A4:E3:90:E4:AE
Authority key identifier: D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
Certificate issuer: /CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Certificate serial: 0199FBEA8ABA6D33097BC14A65D6F73D3FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
Manifest number: 11BA
Signing time: Sun 19 Oct 2025 10:01:16 +0000
Manifest this update: Sun 19 Oct 2025 10:01:16 +0000
Manifest next update: Mon 20 Oct 2025 10:01:16 +0000
Files and hashes: 1: 1AYg6l2vilSq6hfyy57N8114UwY.crl (hash: cNKdlPrwUmfbIeL9iGQ2rNDozx2RDMsoKAT9sZcVuzI=)
2: gGx-x2iRamyRfnlhx5me1YxCw6s.roa (hash: JLnMtxeLdoGYGRa/pvkNkIdX/aY0zlXxd7zsjwME0tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:8a:ba:6d:33:09:7b:c1:4a:65:d6:f7:3d:3f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d40620ea5daf8a54aaea17f2cb9ecdf35d785306
Validity
Not Before: Oct 19 10:01:16 2025 GMT
Not After : Oct 20 10:01:16 2025 GMT
Subject: CN=915d903100bfbefa000d12b7e6037da4e390e4ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:b4:46:87:e8:68:2e:e8:b7:bc:61:50:b9:
e7:dd:c1:0f:5b:bb:4b:0d:ab:08:8c:fd:99:72:84:
a4:68:58:73:54:b7:90:49:79:61:c3:bf:83:6f:3a:
2a:be:ef:b3:ad:65:1b:a5:74:7b:40:e9:95:ee:3d:
b0:84:a9:62:ed:50:e7:82:2b:65:45:d9:85:fd:7e:
71:13:b2:b7:6f:08:c3:6c:28:b5:e3:f4:ec:0d:f7:
79:92:8e:62:4b:0d:82:be:72:34:69:8b:3e:06:b9:
eb:26:11:97:d5:be:14:54:a2:5e:1b:fc:22:ca:2d:
cd:75:17:b4:06:ee:2f:c0:55:45:04:58:6f:1a:86:
c0:bc:77:7a:c5:df:bf:f1:9c:7e:26:cc:a3:f0:5b:
5f:37:53:db:0e:47:96:ea:6d:d0:b0:6d:20:96:a1:
6f:fb:fc:c4:45:1a:95:df:32:29:7d:3e:88:69:31:
8f:50:c0:ea:b1:01:42:61:da:80:17:fb:40:ca:cf:
3f:3a:2d:8b:36:da:5c:ea:1c:97:41:2f:2e:33:7d:
07:65:6f:5d:b4:fc:f7:b9:5d:11:c0:4d:b4:c5:2a:
c3:7c:ed:3c:bb:0e:49:69:9e:32:5c:e3:97:d7:2c:
75:bd:33:df:30:41:f3:a3:60:ad:af:92:59:53:01:
8f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5D:90:31:00:BF:BE:FA:00:0D:12:B7:E6:03:7D:A4:E3:90:E4:AE
X509v3 Authority Key Identifier:
keyid:D4:06:20:EA:5D:AF:8A:54:AA:EA:17:F2:CB:9E:CD:F3:5D:78:53:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AYg6l2vilSq6hfyy57N8114UwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/798fc5-b54c-41c1-8afe-f09e46c69bf8/1/1AYg6l2vilSq6hfyy57N8114UwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:da:a4:ba:df:54:99:e8:59:82:32:a0:b4:7e:e8:72:f9:39:
fa:f3:34:9b:fe:5d:6f:5b:bb:4b:c8:43:5b:1f:99:10:44:77:
5b:98:8c:c2:f1:4c:54:78:4a:86:ab:9c:42:ab:58:7b:a2:aa:
cc:c4:9c:fb:b7:f0:bf:32:31:a1:e3:6f:62:0a:49:b1:45:3b:
7b:35:67:5a:77:a1:d9:c2:e1:9f:2e:f1:0e:25:ba:03:09:e1:
9b:8c:23:32:b0:61:b3:65:3a:2b:df:c0:4f:19:4b:09:37:d1:
dc:0c:44:e5:b5:ae:55:cf:4c:10:1a:47:90:85:d4:e6:74:8d:
44:35:4d:f9:9e:88:e9:0e:c0:97:2b:04:8d:63:46:95:76:66:
b8:0f:e6:78:75:0b:44:19:f5:77:82:4b:2b:cd:05:6b:30:b7:
44:ad:ea:c4:3f:d0:b7:e3:48:a0:96:03:43:eb:24:e0:d1:c2:
5d:4d:0a:09:de:39:ca:06:b1:c2:78:76:3c:78:09:df:23:8d:
62:c0:d2:0d:32:e8:2e:eb:a2:d2:15:ce:ce:32:2a:87:ae:dc:
10:ba:df:fb:3c:3f:05:35:4d:75:b4:13:c7:20:ee:1a:b6:1d:
09:07:e3:95:97:41:f5:ef:3f:80:85:01:8c:a6:28:52:95:d6:
20:41:07:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:02 2025 by rpki-client