Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
File: 1TOwlDCwSPBSbvapN3dOfwYgNzE.mft (raw, json)
Hash identifier: AE8ARIxqB1kG2LvnNcD3b8jlkO8ZOAqOYFCeer1EpW8=
Subject key identifier: C6:C7:86:CE:57:E2:48:CC:BC:8E:30:E5:88:F2:7A:83:EE:DB:27:34
Authority key identifier: D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
Certificate issuer: /CN=d533b09430b048f0526ef6a937774e7f06203731
Certificate serial: 019A0035C35170A35A5BDF8CDAB6E5F1628A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
Manifest number: 0A27
Signing time: Mon 20 Oct 2025 06:01:54 +0000
Manifest this update: Mon 20 Oct 2025 06:01:54 +0000
Manifest next update: Tue 21 Oct 2025 06:01:54 +0000
Files and hashes: 1: 1TOwlDCwSPBSbvapN3dOfwYgNzE.crl (hash: FPsapsy+aeJCF+c8G6MT/v8jOYjWvpmj89YQJPF8NLA=)
2: AAfqajz1lcpewMwtlfBl8TsBH6A.roa (hash: XdFJhIzEc3SMkZ3YWp110E+4v4+9POUyu2FIYDnnnm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c3:51:70:a3:5a:5b:df:8c:da:b6:e5:f1:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d533b09430b048f0526ef6a937774e7f06203731
Validity
Not Before: Oct 20 06:01:54 2025 GMT
Not After : Oct 21 06:01:54 2025 GMT
Subject: CN=c6c786ce57e248ccbc8e30e588f27a83eedb2734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:eb:bb:11:5a:e9:ef:b8:92:87:fa:83:fd:
f4:69:27:67:4d:f9:aa:fe:88:30:b1:9b:9e:b5:b4:
ac:7f:16:9b:52:38:50:fb:7a:71:0d:27:b1:40:75:
fd:00:94:38:d3:b3:a8:bb:27:31:24:b4:92:f5:6a:
3a:36:c6:ec:99:71:e9:2c:3b:a1:6a:15:fe:5e:8f:
23:67:98:52:98:7c:e2:b0:d6:4c:76:5f:f1:57:a1:
ef:de:fc:ad:a4:3e:96:51:06:cd:bf:24:4a:17:90:
e5:7f:a7:72:5a:8c:1e:6a:5c:69:ef:d1:90:77:75:
01:75:f5:08:1e:e8:fd:a8:21:91:15:fd:3c:a5:98:
7d:17:0b:c8:fb:da:e3:ff:69:e3:0b:70:91:2e:a1:
52:d6:53:5c:39:63:32:7a:b8:9a:81:5f:8b:28:79:
91:0d:30:f3:af:f7:09:b9:7a:31:2c:bd:74:da:9d:
36:63:eb:75:0f:9a:2d:43:a9:4c:bf:e7:e7:ba:41:
2a:54:fe:43:dd:5b:d1:d3:17:fd:ee:25:f9:76:7c:
43:e5:ba:3e:8b:25:a4:a5:e1:53:db:47:eb:e7:ce:
83:d8:66:66:cf:cc:ae:f6:1f:a4:4e:68:ac:3d:28:
9f:e2:3c:19:19:44:db:90:fb:3c:35:f3:e3:37:6e:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C7:86:CE:57:E2:48:CC:BC:8E:30:E5:88:F2:7A:83:EE:DB:27:34
X509v3 Authority Key Identifier:
keyid:D5:33:B0:94:30:B0:48:F0:52:6E:F6:A9:37:77:4E:7F:06:20:37:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOwlDCwSPBSbvapN3dOfwYgNzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d525f8-d549-4909-b8c0-ff014900be8a/1/1TOwlDCwSPBSbvapN3dOfwYgNzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:d1:b6:99:25:52:3f:74:91:19:c3:7c:8b:1e:fd:c5:b2:34:
05:34:78:7c:f6:59:18:98:97:54:0e:6c:60:38:27:dd:42:dd:
fe:00:bf:1a:52:33:1e:62:ec:8a:23:ab:7d:32:6a:a8:f6:2b:
fa:ee:fd:09:7d:2c:28:6b:b4:d5:c3:be:0a:18:39:74:0d:ea:
40:3f:9c:58:6d:70:76:c8:58:da:8d:d4:38:87:b0:38:99:aa:
38:3e:5a:ab:9c:db:91:ae:03:7c:4e:69:39:ce:75:ab:b3:e7:
8c:4c:7d:63:91:a8:c6:96:5e:bc:52:0b:c8:81:ba:b0:1f:35:
8c:74:6c:1b:93:9b:b3:d4:fd:45:a5:ff:35:d2:6b:a9:e8:99:
6a:fc:00:c6:63:d3:27:84:ca:d8:e7:52:78:23:d6:20:20:05:
b4:cb:d7:8e:49:47:e8:31:7f:cc:cb:b9:78:29:12:7d:c0:f7:
56:13:10:73:28:2e:83:8a:91:a1:f3:7c:c7:bd:67:6b:fc:da:
2a:60:ba:29:4e:d6:ec:df:d3:fb:a0:61:bc:a9:0d:07:3e:4a:
ab:4a:d6:b3:11:95:b3:00:b9:9e:d0:b8:14:4e:68:34:4e:5d:
16:8c:da:c8:d8:4e:cc:29:02:96:bb:fe:5d:76:55:06:d7:77:
3b:64:e8:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:05 2025 by rpki-client