Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
File: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft (raw, json)
Hash identifier: Uvat69xoAO5kTZpCdawv6rw+BbZivfegUpXdUC/qHT4=
Subject key identifier: 87:ED:B7:4D:18:0C:AF:BB:40:BE:0B:5C:69:3F:6F:D4:B6:0C:F1:24
Authority key identifier: F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
Certificate issuer: /CN=f91084f454139347933876d52634b41a1dd099db
Certificate serial: 019A02FEBAE309D303EB263FCB41D145DECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
Manifest number: 10E1
Signing time: Mon 20 Oct 2025 19:00:39 +0000
Manifest this update: Mon 20 Oct 2025 19:00:39 +0000
Manifest next update: Tue 21 Oct 2025 19:00:39 +0000
Files and hashes: 1: 1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl (hash: ocdkMcSJjmGWHlhBgkXU77cjCcSrkisSbBZPI0dWiN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:ba:e3:09:d3:03:eb:26:3f:cb:41:d1:45:de:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91084f454139347933876d52634b41a1dd099db
Validity
Not Before: Oct 20 19:00:39 2025 GMT
Not After : Oct 21 19:00:39 2025 GMT
Subject: CN=87edb74d180cafbb40be0b5c693f6fd4b60cf124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:14:6b:4d:72:b5:a8:ce:39:08:bc:58:75:53:
a5:de:0f:64:c0:4f:c9:b1:ae:37:8a:92:d8:12:a2:
89:5e:4a:e2:7b:9c:6c:1e:d3:1e:55:3c:96:9b:3d:
84:39:1f:50:7a:9a:ac:a6:8d:be:0f:ce:f4:25:04:
84:c8:b4:2b:93:cf:ed:4e:a8:bf:d2:30:24:99:6d:
08:1e:ed:6d:d3:96:a2:3d:80:5e:6e:74:d1:2b:da:
ad:d8:39:bb:26:07:06:46:df:c3:ac:7f:1a:c9:84:
8a:ae:d5:ab:6b:ab:71:a3:ed:d6:30:20:5d:58:d3:
c4:95:02:1b:70:28:89:a0:9c:79:a6:8d:fc:bb:0c:
3c:f9:39:8a:06:eb:06:fa:75:66:d3:a0:e1:dd:12:
3f:ad:95:75:d7:db:10:bc:f2:58:ef:02:95:2b:6c:
d7:55:e3:b9:2f:93:9f:17:1a:05:f7:1f:51:b1:e3:
72:d3:2a:1d:d8:db:b5:d1:54:de:0d:65:cf:b3:cb:
93:cb:31:ca:bd:37:00:5c:8b:19:1b:13:76:b5:48:
8f:fd:52:7a:39:37:92:ba:57:d7:ef:be:30:76:55:
58:3e:f0:c5:00:af:64:87:6c:91:bf:6f:84:88:bc:
73:7d:f6:3f:fa:99:69:e3:84:c0:2c:c9:31:26:22:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:ED:B7:4D:18:0C:AF:BB:40:BE:0B:5C:69:3F:6F:D4:B6:0C:F1:24
X509v3 Authority Key Identifier:
keyid:F9:10:84:F4:54:13:93:47:93:38:76:D5:26:34:B4:1A:1D:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/94d9eb-22da-475f-bf3a-1a6fd2c44816/1/1-RCE9FQTk0eTOHbVJjS0Gh3Qmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:00:48:02:76:3e:42:76:d5:14:48:93:aa:a6:4f:4a:e0:ad:
64:23:da:90:49:a5:bf:0e:48:33:b8:9e:65:7f:8c:08:10:f8:
7f:45:50:10:f5:0e:5a:d5:a0:8c:ae:25:56:95:a7:92:b2:5d:
74:d6:be:91:3c:f6:d4:dc:bb:3c:6f:77:d2:3f:fd:d2:69:5b:
36:f7:46:a2:17:6d:fd:df:af:a3:e7:d3:09:f4:5b:2c:fc:e9:
16:e7:2d:47:6d:62:3e:28:c3:fc:dc:ad:d8:6d:17:bd:8c:05:
53:17:c1:ac:65:60:03:b2:8d:3d:79:1e:ea:8c:b5:55:3c:61:
8c:4d:6f:01:e9:05:7c:3f:28:8e:45:8c:f6:8d:0c:80:97:af:
ca:61:73:8f:4c:45:76:c3:3f:34:cb:0b:bf:ad:fc:39:da:02:
b9:32:0d:ad:fa:f7:c4:4e:73:f8:b2:39:87:e0:71:08:28:9c:
04:0e:a8:b4:3b:a5:2b:58:c1:1a:e6:9d:ef:cb:30:63:a4:f2:
1c:1b:13:3a:c8:67:a5:25:1c:5c:4f:2e:68:6a:8f:a8:3d:a5:
3f:de:fe:12:eb:26:ec:c4:d3:13:15:7c:4e:fe:7f:64:12:00:
a3:c3:3e:19:a2:8c:d7:36:0b:af:cb:29:1c:60:34:1a:13:8c:
8f:95:e6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:34 2025 by rpki-client