Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
File: 1DsiEwqpp3NCVHaewTv-Fx-h4os.mft (raw, json)
Hash identifier: n++bRFmRoMLyCHtInK3Ounh2a57vx8VRu0eVJYdorqE=
Subject key identifier: AB:56:C6:9F:8D:BD:18:DA:17:06:EF:71:35:5B:9F:20:60:34:5F:FB
Authority key identifier: D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
Certificate issuer: /CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Certificate serial: 0199FAD80CD10BDC25FFB8D3BE6611B04567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
Manifest number: 0BEB
Signing time: Sun 19 Oct 2025 05:01:26 +0000
Manifest this update: Sun 19 Oct 2025 05:01:26 +0000
Manifest next update: Mon 20 Oct 2025 05:01:26 +0000
Files and hashes: 1: 1DsiEwqpp3NCVHaewTv-Fx-h4os.crl (hash: z1+jvVvUKz4oWDu8AmaH3FhQaJ0ZJGMowqgmRNrBNI8=)
2: wEdGwXpwYmsgP9g00gzYyHwBX_w.roa (hash: xXn4YaJmCyamPKNCyA6d81IZAPpAi8iJdAjjF+NkEPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:0c:d1:0b:dc:25:ff:b8:d3:be:66:11:b0:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43b22130aa9a7734254769ec13bfe171fa1e28b
Validity
Not Before: Oct 19 05:01:26 2025 GMT
Not After : Oct 20 05:01:26 2025 GMT
Subject: CN=ab56c69f8dbd18da1706ef71355b9f2060345ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:0a:8b:bc:88:dc:11:ca:0f:38:0f:6c:b5:
cb:d7:09:74:92:fd:15:87:c7:c8:c5:f2:fc:b4:e3:
6f:21:0a:87:92:28:cb:d7:30:a3:97:bf:1f:dc:3c:
d9:f6:8a:1d:13:49:29:ee:9d:1c:6c:57:c2:e6:e1:
f1:97:e4:a0:02:4c:2e:f7:f6:d2:1b:9c:91:c0:16:
c9:dd:8d:59:1e:5c:51:b1:d4:2b:4d:4e:cd:fa:da:
8d:d9:a5:84:7d:20:23:fb:14:89:11:e5:09:87:04:
32:d0:80:50:00:11:a6:dc:58:f3:be:c6:13:fb:91:
f7:bb:64:f4:b7:a2:67:51:90:3c:af:36:77:af:63:
6f:7f:ea:31:63:a5:20:a3:b3:b1:2d:d5:1c:3d:b3:
bb:3c:a5:4d:c3:36:ce:ec:4e:9d:7b:ff:ad:c7:9f:
ff:d7:e6:45:88:a4:22:d6:a7:25:39:8f:21:01:ee:
40:00:67:7f:62:76:be:de:39:f1:b7:b2:ba:75:3c:
e2:f5:28:af:dd:50:77:3e:c3:dc:8a:dd:32:95:46:
95:02:be:97:50:d5:72:8b:a4:d3:c2:58:cc:27:99:
03:54:54:f8:58:1a:cf:29:b8:f3:99:fa:f7:14:e4:
08:7a:ad:40:68:b0:5e:97:76:b4:57:3d:e0:19:89:
9c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:56:C6:9F:8D:BD:18:DA:17:06:EF:71:35:5B:9F:20:60:34:5F:FB
X509v3 Authority Key Identifier:
keyid:D4:3B:22:13:0A:A9:A7:73:42:54:76:9E:C1:3B:FE:17:1F:A1:E2:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DsiEwqpp3NCVHaewTv-Fx-h4os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/080569-3bb5-46de-82ba-a630c2ea23f9/1/1DsiEwqpp3NCVHaewTv-Fx-h4os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a8:9d:97:b4:11:d4:2d:91:64:bf:08:a4:2f:6a:fe:16:01:
15:63:32:9e:86:88:e0:a0:b8:d7:a4:17:9f:a9:73:02:cf:03:
01:76:cb:f8:bd:06:00:a1:0f:1c:18:34:e2:49:cf:bd:83:83:
79:72:e7:73:6b:ae:53:cf:2d:45:2b:39:0d:8c:a9:e6:3a:61:
cb:4a:07:71:15:df:51:28:d1:23:ba:1e:af:43:26:51:e8:9c:
d1:56:dc:16:d5:4e:fc:09:21:8c:39:9d:b2:33:fe:1c:5b:b0:
a7:ed:f3:93:53:c5:b4:a1:ec:3f:f1:42:6c:55:b7:28:b5:28:
21:ae:2c:8d:b8:24:77:b8:8d:0c:da:5b:02:4f:35:d5:6f:e9:
c3:11:91:f0:d4:7c:98:06:36:89:37:46:9c:3d:9c:73:79:80:
1a:26:dc:2f:0b:75:a8:41:4a:5d:26:b0:5c:72:f7:ef:e4:35:
3a:da:c7:74:56:4c:e7:9a:81:47:7f:53:d7:2e:23:89:cf:13:
9e:8c:4d:90:01:c1:61:cc:d1:1f:5d:4c:d6:0e:22:33:c4:33:
a7:c6:3e:f8:68:af:ab:e2:84:06:b6:ff:7a:75:a6:db:c4:f4:
34:22:62:61:26:e4:cf:f5:dc:22:bd:0f:af:e4:b8:96:58:6f:
d7:ff:40:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:42 2025 by rpki-client