Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
File: _1ipjbd3y5FspWOX7D2HyYY2cxA.mft (raw, json)
Hash identifier: pMHOBjG9M/gm7F/patOWVh8Xk6lEvZPKPCmq4b4NEC4=
Subject key identifier: A7:5A:A1:D9:75:6B:A0:4C:52:1C:C6:5F:F6:A7:9C:9B:52:19:77:08
Authority key identifier: FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
Certificate issuer: /CN=ff58a98db777cb916ca56397ec3d87c986367310
Certificate serial: 0199FB7D07AB9ECA2975402082D60263AB82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
Manifest number: 0468
Signing time: Sun 19 Oct 2025 08:01:39 +0000
Manifest this update: Sun 19 Oct 2025 08:01:39 +0000
Manifest next update: Mon 20 Oct 2025 08:01:39 +0000
Files and hashes: 1: _1ipjbd3y5FspWOX7D2HyYY2cxA.crl (hash: QQgjUwTklB+ZcgtWMXekHK/sNT+Al6kh1alivwTzsFg=)
2: _6oTHI74z2ro3D6ku1-3IwQMDJQ.roa (hash: fv1LSUSBqvzluFwHlLJLOy0RtBrtwPS/3BKDLVcgGlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7d:07:ab:9e:ca:29:75:40:20:82:d6:02:63:ab:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff58a98db777cb916ca56397ec3d87c986367310
Validity
Not Before: Oct 19 08:01:39 2025 GMT
Not After : Oct 20 08:01:39 2025 GMT
Subject: CN=a75aa1d9756ba04c521cc65ff6a79c9b52197708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1d:c8:91:6b:9e:75:4c:19:bb:32:05:8e:76:
0b:81:d3:f9:24:2c:16:5d:fb:04:d9:58:dc:c7:49:
98:22:a0:44:df:a1:1a:7b:e2:ee:da:c0:da:b0:8b:
d5:06:5f:d9:ca:9c:9f:f3:35:e3:b1:48:1d:d4:b5:
a9:c6:c2:1a:a2:58:08:6f:9a:01:1a:d5:fb:8d:c1:
49:51:4b:fd:0c:56:31:0b:79:53:50:7c:a1:09:25:
86:1a:df:67:b6:c7:fe:86:48:a0:b5:6d:35:c1:60:
75:13:23:98:2c:cf:cb:5f:64:13:16:93:f5:21:f5:
e7:9c:2f:e2:ea:7a:52:ad:a3:72:b9:8d:ad:17:ba:
1e:ba:75:d0:ff:c7:b9:39:4c:71:cd:0a:be:5f:c9:
b8:65:7e:54:88:5a:a8:a1:9d:11:34:4a:bb:86:87:
59:f3:b7:9c:9c:cd:0f:6c:18:db:85:24:c6:09:27:
5e:97:5e:4b:f9:19:16:dd:79:2c:ac:b3:7b:a1:08:
32:6e:68:d3:76:7d:43:e8:b3:40:d1:c9:c1:5a:73:
47:a6:69:30:3e:0e:8f:c3:12:80:58:5b:98:46:14:
36:42:53:42:24:1f:ac:a9:48:bb:fb:b8:e9:73:f0:
7e:d0:3a:bb:d1:84:7a:f4:e7:6c:dc:d2:6d:f6:37:
a3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5A:A1:D9:75:6B:A0:4C:52:1C:C6:5F:F6:A7:9C:9B:52:19:77:08
X509v3 Authority Key Identifier:
keyid:FF:58:A9:8D:B7:77:CB:91:6C:A5:63:97:EC:3D:87:C9:86:36:73:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1ipjbd3y5FspWOX7D2HyYY2cxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/5305c8-c6a8-40e3-b43e-2d6eef905607/1/_1ipjbd3y5FspWOX7D2HyYY2cxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f1:62:7f:fe:13:db:f2:36:20:3a:a8:de:7f:aa:6f:3e:d5:
a2:57:52:47:63:23:50:8d:3a:28:5b:b4:a4:7a:c1:9a:b4:fa:
b0:0b:1e:4b:b7:00:55:71:c5:55:ab:4e:34:1e:5e:e2:78:1a:
de:72:88:2c:5f:96:48:20:f8:d4:a1:7e:01:7c:73:47:8d:b9:
64:8d:3b:57:4b:34:27:36:22:0f:08:39:55:aa:b1:45:dd:07:
f6:5b:50:1c:55:4d:6e:1b:a0:75:a7:ee:a5:68:a7:10:cd:55:
4c:ac:65:5f:46:9f:2f:29:5f:bc:be:2b:e2:a7:74:0c:ef:9f:
e2:69:f2:54:34:36:11:03:be:28:28:1f:0f:3e:c4:88:53:48:
b3:0b:3a:bf:4b:b9:86:85:ad:d4:09:4f:7b:3c:c4:2a:eb:c0:
64:a8:ac:a3:6e:b5:71:e4:ba:53:8a:54:cb:8f:13:18:7e:11:
4b:b4:72:91:2c:5d:77:98:d5:e8:3b:de:d3:5f:6d:09:2a:53:
a1:90:d2:82:fa:dc:6c:78:91:fa:aa:72:ac:e0:ed:5c:ba:ab:
88:d4:11:c3:bc:12:7a:73:71:6a:31:f9:50:0b:8a:d4:3a:04:
d2:9e:09:67:34:c2:0d:d3:35:ea:ed:40:92:f3:45:03:b2:c5:
f8:63:79:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:03 2025 by rpki-client