Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
File: 1bAhsehBJlk8722YgDQTqnLQAeA.mft (raw, json)
Hash identifier: /O1NhQ++E9A29P+UCzfCefevOb0E30H0/lLYQ6ATlvc=
Subject key identifier: 2E:A9:C6:F1:3B:B6:57:D4:15:9F:46:CA:60:5D:3E:BA:4D:8E:25:36
Authority key identifier: D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
Certificate issuer: /CN=d5b021b1e84126593cef6d98803413aa72d001e0
Certificate serial: 0199FBB370F00DE5D29397D9A2D9EC3A9F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
Manifest number: 0E
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: 1bAhsehBJlk8722YgDQTqnLQAeA.crl (hash: xPnwjPcFRa4dGqmNPhYDTaEqMMUCh3Cnjc+iVOHVLPE=)
2: ov5u8bzup09FFyJJ_zHJCgGMVo4.roa (hash: GVSdHUWKmtUWdG3OcU4oGcJpHS1FbNcqX/5fpB1Tat4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:70:f0:0d:e5:d2:93:97:d9:a2:d9:ec:3a:9f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b021b1e84126593cef6d98803413aa72d001e0
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=2ea9c6f13bb657d4159f46ca605d3eba4d8e2536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:75:66:5a:74:d4:d2:96:9e:72:69:b3:db:
5d:fb:b5:10:e7:06:2a:bb:c4:38:4b:f0:a1:ac:99:
fe:9d:1e:b6:59:5f:32:56:66:de:7c:49:ee:4a:0d:
16:14:a3:c6:8d:9c:ca:dc:5b:aa:f5:0c:1b:0a:e4:
f7:f6:f4:37:42:38:36:8a:9d:75:e3:e2:64:2f:e0:
5c:b4:88:14:ca:82:55:d3:f3:d3:24:7f:3f:98:df:
b3:da:8f:c9:43:38:ae:b3:d5:be:d7:d4:57:49:d8:
1a:e0:94:c6:8b:a0:8a:e6:6f:8c:d1:5e:3f:65:fd:
1b:2a:9a:b8:4e:82:7c:89:b9:19:bd:fe:cf:0e:3e:
6b:52:fe:4f:b4:40:bc:55:76:ec:67:7a:0b:bc:8b:
7d:be:41:24:de:b4:07:a3:74:24:db:d5:ea:d8:81:
86:72:f8:19:8f:31:db:a5:eb:8f:6d:64:7d:2d:02:
28:16:01:e9:cc:3c:19:14:0d:f7:3d:b0:1c:5b:d0:
fd:33:cd:85:c5:57:59:02:4a:07:57:50:57:eb:b3:
32:51:39:41:a4:30:9c:a4:c4:dd:06:de:f6:aa:9f:
c2:41:89:89:9e:9e:9b:5c:88:e2:b7:59:81:e9:47:
ad:25:4f:fa:04:63:1a:b1:81:b1:74:3d:62:b8:aa:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:C6:F1:3B:B6:57:D4:15:9F:46:CA:60:5D:3E:BA:4D:8E:25:36
X509v3 Authority Key Identifier:
keyid:D5:B0:21:B1:E8:41:26:59:3C:EF:6D:98:80:34:13:AA:72:D0:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bAhsehBJlk8722YgDQTqnLQAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4dca34-745c-4180-b0f0-01dda374d67f/1/1bAhsehBJlk8722YgDQTqnLQAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fa:75:a4:5a:f9:64:d0:51:24:c2:67:9f:c0:3c:c0:90:e8:
ba:18:33:1a:49:f3:0f:59:11:e6:f7:0a:17:89:d5:09:2c:c3:
06:24:15:80:1b:50:60:85:40:06:e4:5d:0f:61:98:38:7d:c6:
5f:ce:51:e3:7b:a2:4a:05:96:3b:21:fc:e7:fe:53:3b:73:d2:
37:cd:0b:13:48:00:37:db:57:57:75:6c:f1:78:b8:67:19:23:
29:83:3c:58:6b:03:3a:a9:88:39:3e:d7:c7:b6:7f:cf:2e:75:
2e:28:8d:d4:1f:b4:ca:20:31:ce:1c:4a:e9:1c:5a:c4:d5:be:
a0:da:ff:a1:41:6a:69:5e:c2:99:96:13:8f:bf:bd:6c:58:b1:
c1:64:cb:ae:08:29:8c:5e:09:d9:af:29:c4:b3:44:29:34:d9:
2f:2d:ab:e7:e6:45:5f:e3:29:f5:25:ac:14:78:d6:f6:fa:ac:
7a:f9:7c:93:53:90:cc:e1:ff:74:c3:ce:ad:c1:12:0f:b9:23:
28:2e:1b:44:f6:71:ce:d0:8e:e6:e8:c8:28:5a:3a:08:0c:8a:
d5:00:bb:dd:0c:cb:69:71:85:96:7a:e9:a7:89:00:36:11:ca:
bb:cf:2e:69:4d:07:cc:61:2e:71:c2:83:c3:de:36:82:35:78:
46:1e:6e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:24 2025 by rpki-client