Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
File: 1-V055baJCkbIzlyQN-bSY2XoV7w.mft (raw, json)
Hash identifier: cYPeTICwZo+/MqcS6Fo4h5M/6uf34L+MZ73v3LAoGs4=
Subject key identifier: 40:EA:64:18:7B:36:74:46:59:C0:AE:4D:59:5B:95:1D:F2:A9:32:25
Authority key identifier: F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
Certificate issuer: /CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Certificate serial: 0199FFFE7B276CF6625DDDA98CEB71271BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
Manifest number: 0BED
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: 1-V055baJCkbIzlyQN-bSY2XoV7w.crl (hash: FKRYKoIOdM2sJHnOlW7lfx9dBgeZsmaNlYiBDLKF40I=)
2: 30wxplZBtekiYfq89WhRrKa7cbQ.roa (hash: A+ApiR7nBxu7bspZZM8VxqWi7UoEVIuDQiaPLO/t9cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7b:27:6c:f6:62:5d:dd:a9:8c:eb:71:27:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95d39e5b6890a46c8ce5c9037e6d26365e857bc
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=40ea64187b36744659c0ae4d595b951df2a93225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e7:0d:55:b4:d6:4e:5f:c7:e4:8f:2e:1a:a2:
67:dc:aa:2d:49:7a:ad:35:64:b7:81:ac:1f:9a:fa:
55:44:f5:9d:54:1b:44:5b:4a:19:77:4b:f1:ce:09:
83:25:fe:19:dc:2f:f6:a1:7e:03:1b:d3:49:9d:a6:
7b:44:b4:62:8a:8b:a2:5c:a3:b5:9b:f2:b4:58:cb:
44:9d:e5:8c:48:0e:c4:42:2b:5b:d2:ee:6a:e2:53:
90:31:98:0e:56:7b:86:9e:ec:d3:91:60:6c:3c:35:
61:25:00:e0:5d:97:6f:96:28:7f:3e:0c:7e:87:a9:
80:b4:a4:b7:5f:4f:67:13:6d:9e:03:bb:0c:12:06:
e3:c8:bf:cc:7b:9a:d6:59:c8:33:c5:1f:26:ff:95:
a4:e8:0b:0e:fb:3d:ee:ef:17:cc:fa:80:b4:09:64:
a3:1a:61:da:c0:d0:b7:e5:d8:49:bf:2e:b5:98:c2:
f2:34:a3:2c:2d:17:dd:39:cb:7c:a3:d8:b2:20:92:
af:58:34:1e:36:dc:54:ea:05:f1:c3:b8:20:07:ca:
ff:f6:a5:2e:f9:52:e7:0e:37:00:43:3c:1c:76:59:
11:d4:cc:cc:9d:2c:5c:41:4e:2d:fa:cb:1f:93:9b:
45:06:0c:f9:97:15:8f:e3:14:35:3b:0b:38:90:a3:
57:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:EA:64:18:7B:36:74:46:59:C0:AE:4D:59:5B:95:1D:F2:A9:32:25
X509v3 Authority Key Identifier:
keyid:F9:5D:39:E5:B6:89:0A:46:C8:CE:5C:90:37:E6:D2:63:65:E8:57:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-V055baJCkbIzlyQN-bSY2XoV7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c3206a-9c16-4527-8b89-6e8dcbaeaf7f/1/1-V055baJCkbIzlyQN-bSY2XoV7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:ad:0d:c2:45:bf:c6:74:66:f2:7c:a9:74:7a:2d:2e:0c:
c4:75:90:40:35:28:d2:27:14:14:54:41:81:de:bb:0c:05:72:
b6:79:5c:20:8b:3b:b0:c0:a3:d3:3c:e7:08:fd:75:6a:b9:94:
d2:5d:be:c0:a5:01:87:00:70:38:4a:a4:3b:be:7f:5b:5c:ec:
e7:4a:42:eb:e9:86:43:46:16:01:cd:87:5f:64:88:8c:6e:95:
f5:b8:e4:80:1d:4f:ca:76:1d:56:a0:34:e5:e5:ff:2e:a6:32:
6a:a9:27:14:97:f3:16:75:72:2f:01:4f:57:9e:b4:81:30:fa:
5c:f9:23:6a:6b:53:31:4d:6d:93:4c:ae:38:aa:9a:39:73:aa:
5a:28:ee:78:13:90:96:cc:e6:c4:ce:49:e0:20:c6:71:82:44:
75:5c:7f:c4:7a:00:2a:c8:64:69:e5:8d:ee:d8:7a:0b:31:c2:
ef:5c:aa:a6:e1:b7:92:4f:61:a2:45:21:f7:9a:32:6e:a4:39:
f3:da:7c:c3:68:2c:c0:5d:db:b4:80:29:52:23:36:8e:cf:f8:
87:24:e3:c3:5a:30:c8:ae:aa:02:74:44:f4:91:81:c5:56:e3:
51:92:73:0a:fd:95:32:de:f9:35:2e:24:9a:28:bc:b5:15:b1:
1b:9a:22:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:43:40 2025 by rpki-client