Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: zKzTU0HJIsvh5pmjMiNbhivNAKLmcdqTdLu+64ZTYJk=
Subject key identifier: 00:4F:C7:67:F3:F0:AF:53:8C:0E:BE:7A:1A:9F:FC:92:53:FA:10:CE
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 019A51BEE6D4CE2D887350A4E6172503947D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 0423
Signing time: Wed 05 Nov 2025 02:00:56 +0000
Manifest this update: Wed 05 Nov 2025 02:00:56 +0000
Manifest next update: Thu 06 Nov 2025 02:00:56 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: 0MOQxQ/ovS5hw1gHs2T3X/3znMIe3blLpj2jkG9Vhjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e6:d4:ce:2d:88:73:50:a4:e6:17:25:03:94:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Nov 5 02:00:56 2025 GMT
Not After : Nov 6 02:00:56 2025 GMT
Subject: CN=004fc767f3f0af538c0ebe7a1a9ffc9253fa10ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5d:5d:70:66:d4:bb:aa:4a:50:63:22:4f:bb:
8d:f0:9c:28:1d:e0:9c:4c:6b:8d:3a:19:19:c1:19:
d6:31:72:96:5d:9d:e3:b2:ba:c1:cd:2e:e5:e1:eb:
21:04:54:83:6e:e4:d5:89:e4:8f:78:7e:f9:73:54:
12:52:3d:4e:25:27:87:e3:b5:50:e1:b7:0b:49:99:
a3:49:02:0d:f0:db:e0:e4:18:3a:44:ee:0d:80:13:
0e:a1:cc:c5:07:bb:48:26:62:d3:ef:db:d3:aa:06:
04:14:27:07:2d:dc:70:d0:ec:43:7c:0b:96:51:e6:
f6:5f:48:ae:5c:72:2c:16:85:51:b7:54:c1:95:1e:
11:25:29:c7:94:5e:2c:b3:92:73:a3:cf:f7:d4:26:
52:b8:28:fa:54:9a:e3:eb:76:94:25:e9:20:e0:f3:
3a:fa:6e:d0:99:c1:c0:7c:1e:1e:72:4e:6c:e7:70:
95:55:c1:2f:ca:f9:1a:80:41:dc:bc:7b:ac:0c:19:
fd:2f:30:33:d3:78:9f:a6:35:fd:35:14:c7:b9:ce:
74:c1:44:85:9e:73:c1:e9:b5:78:a9:6a:cb:fd:c5:
71:99:73:6d:df:51:fe:95:5c:63:6f:96:c1:81:5c:
dd:0e:f3:8f:6c:14:04:90:be:0b:d4:d3:5f:13:46:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:4F:C7:67:F3:F0:AF:53:8C:0E:BE:7A:1A:9F:FC:92:53:FA:10:CE
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2f:90:9b:65:02:5d:ed:d2:62:5b:34:95:1f:2f:e4:58:e8:
63:04:39:78:3b:fa:a8:a7:cb:f6:02:9a:b9:74:39:58:6b:e6:
6f:b5:b0:a3:f5:e0:b7:15:00:ce:08:d8:c3:e2:ec:25:39:de:
c3:65:87:2b:32:3d:23:31:b5:c6:97:ff:ef:76:94:44:fa:96:
65:95:a5:44:b5:00:ae:9c:30:95:d5:ab:1c:75:f7:83:e8:9d:
60:d5:fd:5e:86:4d:db:e9:f9:e4:f4:54:5e:4e:18:de:27:20:
92:33:08:8e:ac:fe:a1:66:7d:22:41:a4:6d:70:f8:fc:37:91:
17:5e:be:9f:53:df:fa:1c:8e:2d:be:de:5a:d0:fd:1a:4e:fe:
67:f8:10:84:4d:04:ac:55:ff:ed:d5:b2:03:c0:9e:f7:81:73:
34:e4:74:4f:13:20:d8:56:16:46:cf:8a:6e:5b:f4:51:1b:7e:
71:e6:f2:6f:aa:6d:d1:ea:d4:d7:33:a1:22:33:58:f5:f4:60:
83:b0:39:12:2e:39:80:92:3b:65:b2:de:5a:04:fe:c2:36:77:
f1:f4:ce:d6:70:46:b0:4e:d5:44:d2:c9:0d:4d:db:11:0b:24:
21:19:d7:1d:44:2c:3c:ad:c0:29:3b:30:a6:51:0f:8c:f6:52:
7b:ec:3f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:26:29 2025 by rpki-client