Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
File: 1s5JJV9AanJVk8YuHECHeVhtVu8.mft (raw, json)
Hash identifier: NFbZ/DY8iyFWqC4D6wRlhq/d3/L9gMDePIZ04MTY9Vw=
Subject key identifier: F7:3C:85:A9:B5:22:7C:1B:C0:4F:9A:76:26:31:C8:D2:CA:CC:34:9B
Authority key identifier: D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
Certificate issuer: /CN=d6ce49255f406a725593c62e1c408779586d56ef
Certificate serial: 0199FC2191B947778695815D1707B5A4BBD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
Manifest number: 0C3F
Signing time: Sun 19 Oct 2025 11:01:22 +0000
Manifest this update: Sun 19 Oct 2025 11:01:22 +0000
Manifest next update: Mon 20 Oct 2025 11:01:22 +0000
Files and hashes: 1: 1s5JJV9AanJVk8YuHECHeVhtVu8.crl (hash: EWIeAWYA3+W+PfQ7rJtlYzLPEUeRYvrend958fvudWQ=)
2: CK8FwiyJmMBb-zg5kXzIAY_6FI0.roa (hash: XErrRj96RGdiXdkf0Z1TwKUF+3V+yB+0bX3FZbrkGHY=)
3: EJfhhxSKJku019QQkt99LIZFHTw.roa (hash: SjUIL6Kbq6N31Fxq4qDA2LJmnHYs1GWAH6ODttxmcK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:91:b9:47:77:86:95:81:5d:17:07:b5:a4:bb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce49255f406a725593c62e1c408779586d56ef
Validity
Not Before: Oct 19 11:01:22 2025 GMT
Not After : Oct 20 11:01:22 2025 GMT
Subject: CN=f73c85a9b5227c1bc04f9a762631c8d2cacc349b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:32:59:0e:03:6c:d7:7d:20:ac:cf:d1:4b:
33:4f:ff:4c:43:16:c9:8a:cc:ad:88:1a:e0:da:88:
c4:8c:24:95:58:f2:b4:ec:0f:39:9f:83:8c:22:a9:
1c:76:c3:27:f9:f4:cd:79:9f:db:f1:a2:68:f7:ff:
2a:a0:05:c0:de:78:5a:04:c3:22:cf:50:17:6d:b9:
65:d8:09:0c:b8:45:ad:74:13:c7:a6:ec:23:1a:26:
b1:14:d3:be:33:9c:ea:a1:99:e7:c8:43:ef:18:09:
d0:05:25:45:9d:d1:4f:7d:0e:11:65:4e:e6:11:fd:
f9:db:dd:fa:2e:5e:00:32:9b:90:be:27:1a:28:05:
31:6a:f2:6f:66:2e:4f:b8:9c:d0:df:36:a3:5c:23:
b6:d0:1d:97:72:db:b4:13:d1:31:f7:54:74:8c:e5:
82:58:0d:63:0b:4e:12:05:d3:61:9f:32:bb:8d:c8:
7a:0b:df:ce:86:53:cb:9a:64:2e:9c:f5:57:df:d6:
13:3a:d0:22:c1:88:50:86:cb:7d:43:6c:20:b9:8b:
60:9c:9b:83:22:b2:0c:8d:b9:59:ba:a1:67:2c:60:
6f:bf:7a:83:fe:8e:93:00:6c:b9:28:94:5b:54:f9:
f0:50:dd:eb:b6:d8:c8:a8:d8:95:4e:7d:0e:f2:cc:
df:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3C:85:A9:B5:22:7C:1B:C0:4F:9A:76:26:31:C8:D2:CA:CC:34:9B
X509v3 Authority Key Identifier:
keyid:D6:CE:49:25:5F:40:6A:72:55:93:C6:2E:1C:40:87:79:58:6D:56:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5JJV9AanJVk8YuHECHeVhtVu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8b532f-6782-4044-9efb-6725d98196c6/1/1s5JJV9AanJVk8YuHECHeVhtVu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:32:b4:50:6a:74:78:58:59:ea:98:1e:bf:0a:fa:14:93:df:
2a:87:c9:e4:dc:0b:5c:fa:6a:b1:39:50:ca:62:4c:28:99:c2:
af:81:b3:36:a4:c2:a8:50:15:87:25:67:46:0b:d0:f8:45:02:
d3:52:23:ee:78:1d:75:e9:36:cf:c3:e9:2c:3c:7c:3e:23:92:
a9:11:64:82:b1:56:9d:19:f3:84:9b:4f:4f:b2:eb:de:6d:6e:
c3:87:78:d2:18:d0:8b:a2:a5:15:a2:97:28:5e:c8:43:05:ce:
86:34:50:48:77:b6:79:59:89:6d:a1:63:98:bc:39:09:a3:17:
9f:62:9b:b3:a1:68:d1:00:93:81:77:eb:0c:a1:4e:2a:ce:28:
37:b7:a1:2e:80:28:25:cb:81:16:08:70:42:df:ca:9a:b0:a1:
4e:06:25:a5:bc:41:02:1a:5b:53:fd:7f:05:ce:89:54:9a:fc:
67:b9:33:20:cd:70:2c:59:da:dd:c9:cd:8f:c8:39:72:e3:47:
46:6b:73:2e:40:fa:60:ad:c0:9a:45:7b:f2:83:00:ed:1a:72:
92:d0:a4:6b:68:41:40:70:37:d1:25:e1:f1:8e:bd:c3:6a:fa:
6a:17:0e:a4:38:53:23:17:2c:a8:01:ae:04:6c:0e:2b:5c:d3:
0c:1a:22:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:29 2025 by rpki-client