Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
File: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft (raw, json)
Hash identifier: i6NpQ+dl/OiBZrJ+7fkoE+wCGPb4zcHLKbOaEI6xnNE=
Subject key identifier: 7E:43:2C:B3:68:E1:C5:3C:95:3F:71:BD:E2:02:F5:F0:B0:82:50:73
Authority key identifier: FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
Certificate issuer: /CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Certificate serial: 019A503DDE77521966F605C04128EAD762F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 19:00:23 +0000
Manifest this update: Tue 04 Nov 2025 19:00:23 +0000
Manifest next update: Wed 05 Nov 2025 19:00:23 +0000
Files and hashes: 1: 1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl (hash: 2HjTYGSQmucghgVBX8icEBlLQjLI08FmQv3ikmxTjEI=)
2: x8LYnH5C-2yoYzHnpykE4OWasxo.roa (hash: NSrIlOVo8G3//8ZqRuyTqHM3vssNSeuuZzf6AApNyCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:de:77:52:19:66:f6:05:c0:41:28:ea:d7:62:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fabb49e688335ab1593f9d10e006ef5e9bc8bd56
Validity
Not Before: Nov 4 19:00:23 2025 GMT
Not After : Nov 5 19:00:23 2025 GMT
Subject: CN=7e432cb368e1c53c953f71bde202f5f0b0825073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d4:f2:fb:5c:d7:78:05:5c:76:f8:3c:0c:be:
86:d6:16:e6:23:74:de:7e:13:9c:0e:e6:6b:7f:2c:
79:97:40:22:83:cf:73:51:09:73:5a:32:99:92:3e:
2e:e5:24:ca:29:c6:d9:17:a0:f3:d1:ac:21:7f:84:
6f:9b:9d:bb:0c:40:a8:2a:88:45:cf:f1:f1:d4:6c:
0e:a6:73:0e:10:18:2e:7b:77:a2:63:b1:8a:77:bb:
45:12:ae:b5:97:55:70:06:aa:17:95:c6:f9:1c:1c:
1e:71:83:db:ff:80:b2:96:74:a9:e3:61:df:c9:a1:
00:c5:4c:37:20:5e:4c:3b:5d:39:b3:03:85:37:60:
ca:a5:03:6f:e1:91:82:b9:90:ca:a3:2d:4f:84:8d:
92:dc:ab:ba:d9:ac:76:09:2e:85:cc:8c:cb:f0:a2:
cf:e1:ce:ba:a0:3b:fb:53:23:09:8e:63:57:19:be:
e1:d7:80:fc:52:3d:dd:f5:23:3b:11:bc:ff:50:5d:
89:73:37:7d:b0:3a:e0:b1:6f:bc:64:fb:dc:92:7b:
71:7b:47:23:ba:1d:a6:c4:45:f8:8e:88:3e:e6:02:
75:70:35:2e:d0:8b:8e:3d:76:1f:f3:80:58:32:06:
59:35:34:f1:1e:79:62:f2:1d:85:cc:35:0f:4c:a2:
25:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:43:2C:B3:68:E1:C5:3C:95:3F:71:BD:E2:02:F5:F0:B0:82:50:73
X509v3 Authority Key Identifier:
keyid:FA:BB:49:E6:88:33:5A:B1:59:3F:9D:10:E0:06:EF:5E:9B:C8:BD:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d7a3ba-07e5-41d6-8c39-56a55c42de88/1/1-rtJ5ogzWrFZP50Q4AbvXpvIvVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1d:ac:ba:13:c1:25:40:a1:34:ef:dd:22:9d:37:ac:01:b5:
98:3d:81:1c:a6:0f:c1:33:49:05:9b:d3:68:30:86:33:d7:e6:
8c:f6:fa:13:15:56:16:d4:32:77:0a:ab:8c:83:ff:43:e4:55:
d0:ea:ef:01:29:22:03:b4:d4:a2:9f:39:a0:37:00:da:27:08:
3e:17:ce:35:68:1b:52:6e:39:34:c9:2d:14:f8:a9:17:e9:41:
cb:d2:1c:e8:b7:39:9b:c3:5b:bf:27:fa:77:2e:c0:fc:4f:72:
93:55:b7:fa:41:23:e0:f9:e6:24:15:91:de:5b:62:d7:02:0a:
f7:a6:03:4e:6a:01:3a:d4:66:eb:7b:b3:6d:85:97:5e:65:bb:
a1:13:2d:45:0e:fd:8e:35:9f:c9:fd:1f:31:4f:74:c6:f2:67:
72:56:bf:de:24:ea:a3:ef:96:0f:55:1b:82:4e:8b:45:a2:66:
ee:7e:9e:1b:f5:94:10:84:1e:ce:0b:0a:c6:8c:08:99:28:13:
1b:c6:af:6e:4b:f5:e2:f3:1d:6b:39:41:81:6a:de:30:4c:47:
e6:2a:a0:7e:e2:80:3b:1b:da:b6:ba:ca:a7:bc:e8:7d:85:73:
a8:35:65:14:b1:a7:67:e8:fa:6f:92:eb:4f:41:3b:54:ea:c6:
54:3d:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:31:04 2025 by rpki-client