Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: BgUp572NslfhtehiHXe4LskFCVvz8qxhDRRb+506EuM=
Subject key identifier: 46:6E:92:E2:AF:85:7A:7E:02:F9:E4:EE:0A:8A:8C:4D:9D:A2:D8:80
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019A4E863CEBAB01B31FF99EE0AF3724704A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 14F2
Signing time: Tue 04 Nov 2025 11:00:11 +0000
Manifest this update: Tue 04 Nov 2025 11:00:11 +0000
Manifest next update: Wed 05 Nov 2025 11:00:11 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: 7ZaI9Zi2RD9BzEhPuDZsNDr1ix4HPkIhUsFwFrNYALk=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:3c:eb:ab:01:b3:1f:f9:9e:e0:af:37:24:70:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Nov 4 11:00:11 2025 GMT
Not After : Nov 5 11:00:11 2025 GMT
Subject: CN=466e92e2af857a7e02f9e4ee0a8a8c4d9da2d880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:31:56:58:0e:0f:7a:24:9b:d7:fb:dd:69:0c:
60:38:0c:3f:82:95:4f:6a:59:2d:fc:4c:cc:23:e0:
29:04:2e:b8:fc:5f:3d:96:7b:44:ed:d0:91:cd:f7:
d3:d9:bb:96:3b:9d:22:bd:7b:15:2f:c9:3c:a0:f8:
df:eb:4f:3e:d7:a9:aa:8b:6b:71:96:ee:d9:e6:49:
20:8d:e0:3d:2b:b4:96:a2:61:71:86:a4:67:0d:f0:
1b:b8:4f:fd:17:10:c5:c6:df:31:6d:d0:35:75:26:
62:26:8d:59:00:86:76:6c:06:eb:42:a0:7f:02:6e:
c0:35:ce:64:c6:57:d9:ea:25:f6:da:2e:76:a9:58:
5c:c2:9f:df:56:07:0a:12:16:64:64:e4:c2:a7:5e:
71:1f:4d:8e:06:a5:5b:40:9b:59:34:31:30:db:c2:
d7:ef:ea:67:25:13:38:32:3d:13:3e:66:5b:c6:53:
c9:ba:37:ab:16:1b:ff:78:fc:7a:b5:a6:59:1a:5f:
8f:9e:08:3e:34:28:5e:37:d5:a2:01:64:85:2a:82:
52:0a:b0:e2:de:29:88:1d:85:45:3a:95:f4:f6:7a:
d1:00:6e:6d:69:1a:ad:ad:2d:80:df:b7:a1:12:bd:
5c:ce:0a:b2:57:2b:16:9d:91:db:50:fd:1d:21:24:
c4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6E:92:E2:AF:85:7A:7E:02:F9:E4:EE:0A:8A:8C:4D:9D:A2:D8:80
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:6c:6d:f4:4a:20:ff:ef:f5:46:25:81:0e:a4:f3:c3:8b:e4:
00:cc:1e:7b:c1:c9:d3:50:1d:57:47:73:eb:b8:9e:89:75:6b:
f9:14:7a:4c:6d:cd:bf:af:50:d9:56:66:6d:63:81:ea:83:6a:
0d:24:45:ea:3b:f2:5e:2e:38:a0:18:a4:53:1e:00:a3:0a:4d:
f6:9e:d0:54:53:f3:17:cd:5b:af:23:e1:b7:f6:46:45:23:18:
56:7f:0e:c3:aa:17:ec:51:81:67:8a:7a:e9:d8:39:23:44:97:
b2:af:1e:d5:f4:92:da:a0:23:26:f4:80:87:85:e8:f4:e9:b1:
37:d1:2f:18:5c:48:2d:9c:b5:32:ab:86:8b:c7:56:7c:88:6a:
07:30:6d:f2:17:29:2a:89:80:12:37:35:be:c8:78:a5:d7:22:
c8:f1:ae:a7:59:4c:24:44:12:38:a7:0b:86:c9:85:7c:b0:4b:
24:70:0f:40:8e:37:74:93:b6:16:97:74:9c:bd:52:5f:d5:02:
fc:1e:ab:13:4d:80:8e:f3:b6:86:25:3b:75:6f:2a:7c:47:f2:
bd:2f:35:16:e6:c7:43:d4:b5:2e:3d:4c:f3:11:42:79:19:cb:
46:6a:ea:71:8f:ba:b7:28:95:17:60:a3:86:57:7e:a7:dd:3c:
7b:9c:dd:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:53 2025 by rpki-client