Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: 96ABBa8JfG7o+BkfOlVs6v/omWy9Tiz64hS118/hw0s=
Subject key identifier: CB:B1:13:49:05:98:2D:A3:9C:11:13:D0:C9:E0:8B:FE:3D:28:F4:8C
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 019A4F62DBBD2B6E4E2E8FA9F34459D6A2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 15:01:10 +0000
Manifest this update: Tue 04 Nov 2025 15:01:10 +0000
Manifest next update: Wed 05 Nov 2025 15:01:10 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: EkL3YXIWk2pGQ4QayBSNjlsCi29DhOFgj5aY8wJti5Q=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:db:bd:2b:6e:4e:2e:8f:a9:f3:44:59:d6:a2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Nov 4 15:01:10 2025 GMT
Not After : Nov 5 15:01:10 2025 GMT
Subject: CN=cbb1134905982da39c1113d0c9e08bfe3d28f48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cc:a6:73:42:77:32:3e:7f:c8:27:fe:5c:85:
2b:8c:97:a9:ff:5b:c1:78:cd:7d:26:37:6e:85:1f:
29:10:47:1a:86:bc:2b:69:d7:24:7a:d5:c6:d2:15:
c1:51:54:68:24:9f:49:cc:43:b3:0e:62:af:b2:ae:
0e:ab:1b:40:19:a6:ca:07:d3:8c:6c:19:25:50:5e:
1f:4e:b6:09:65:5d:49:37:ba:6d:8c:69:8c:78:cb:
d0:b2:29:ec:80:a2:cb:7b:94:46:b3:17:98:6b:02:
a1:b4:1b:4d:2a:90:cc:98:09:e9:02:09:f8:5c:b4:
09:c6:cb:32:75:46:b1:d9:f1:9c:82:70:39:9e:83:
01:7b:95:41:9f:25:04:56:8f:fd:22:b7:68:00:49:
78:90:ad:57:6a:08:38:bf:be:46:ba:5c:60:9e:36:
85:29:38:d5:40:29:dd:20:09:af:6b:54:2d:24:cf:
7e:56:76:9e:53:7a:d0:48:d1:9f:3f:44:f3:51:d7:
f2:a0:62:bb:88:e5:20:30:47:2b:bd:a6:37:4f:a4:
dc:a7:a2:b8:3b:82:ca:ff:ea:5c:33:42:cc:0d:91:
85:1c:44:5c:72:34:b7:43:f9:8a:86:13:8c:36:5a:
9e:ce:f6:13:53:22:4f:f9:92:56:f4:6b:07:27:31:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B1:13:49:05:98:2D:A3:9C:11:13:D0:C9:E0:8B:FE:3D:28:F4:8C
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d7:70:f0:09:eb:55:50:e8:11:81:ee:c1:b9:99:dd:d6:91:
3b:7a:33:2b:77:05:ad:25:43:43:ed:24:b3:18:14:d4:4c:66:
80:10:5d:14:fa:3a:41:8e:a1:e9:b6:d6:11:3c:33:5f:ae:3f:
03:63:de:00:51:83:17:dc:f0:31:95:aa:eb:72:7b:d3:1e:8a:
05:ed:b2:dd:c9:6f:17:8e:f6:fa:9a:7d:81:33:32:fb:00:ff:
53:e8:b9:13:c1:59:33:b3:1d:44:9c:03:e6:2b:79:0f:34:41:
6e:c5:91:bd:2a:21:7d:27:eb:d3:62:d8:e5:47:be:28:ab:ea:
14:88:85:07:f8:fb:a7:5e:16:65:99:15:8d:40:23:6c:79:b0:
1c:15:d8:d1:9a:6a:e8:c9:f5:73:11:38:74:7b:d4:72:42:0d:
06:64:64:ae:3e:b3:b8:bd:1a:2d:f4:d4:c6:5e:e1:be:67:7e:
ea:ca:c9:fd:f4:17:e6:83:f5:b1:11:99:0f:7f:ed:a6:ab:4e:
9f:36:c5:a7:96:7f:f6:bd:48:41:e6:0e:44:37:2d:5e:16:42:
bf:a8:07:a2:38:f7:84:6f:1b:18:52:05:26:35:84:d8:ff:13:
ee:58:30:80:18:ae:fa:5a:dd:b6:43:3d:fb:81:95:48:36:63:
8b:29:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:39 2025 by rpki-client