Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier: 8BzPqfhBv2sd08ikmTyZJ5pgyyw+FSJ3+vfkfOmRe2c=
Subject key identifier: 65:1A:28:4B:4B:22:56:B9:4F:31:06:47:FA:C6:FA:AE:5D:5E:47:23
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 019A522C322C32A19AB2DA0CAE48CA027A22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number: 1410
Signing time: Wed 05 Nov 2025 04:00:19 +0000
Manifest this update: Wed 05 Nov 2025 04:00:19 +0000
Manifest next update: Thu 06 Nov 2025 04:00:19 +0000
Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: 1u6KuX3ni82+5qgUVljS7FPH++OdPXWdXnVGdmS+kKI=)
2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:32:2c:32:a1:9a:b2:da:0c:ae:48:ca:02:7a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Nov 5 04:00:19 2025 GMT
Not After : Nov 6 04:00:19 2025 GMT
Subject: CN=651a284b4b2256b94f310647fac6faae5d5e4723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d3:2e:e3:46:07:a2:24:2d:e7:d6:f7:90:11:
e1:fa:8f:42:f6:01:5d:bc:b7:e0:0f:82:6c:ab:39:
6f:5c:f7:59:74:9c:2c:73:01:04:e3:fb:1c:43:80:
bb:c9:61:d3:74:fd:7d:8b:3b:45:a8:4f:f5:68:19:
05:d8:c7:72:86:48:c6:f0:14:ec:39:35:a3:bc:bd:
4c:73:0b:06:69:4f:26:e9:33:20:eb:76:31:6b:16:
c6:05:39:2c:92:44:6a:cb:b8:48:c9:dd:d6:00:56:
d4:5e:88:a1:2b:c6:e8:3c:fe:6b:da:40:ba:d9:5e:
93:97:8c:13:42:60:a4:3b:b5:b6:75:ba:7f:20:67:
fc:ed:48:e4:65:9b:4f:c5:5f:70:50:8c:5e:26:77:
66:1a:11:45:a0:8b:e8:dd:b4:e1:c1:76:e8:f6:30:
3c:85:5c:4d:9c:5b:6e:30:65:2d:07:4f:0c:26:de:
a3:33:17:18:e3:97:e3:d2:05:27:a7:72:a1:6f:cd:
d9:17:78:9f:07:03:a0:59:c7:1b:26:81:a2:f8:12:
bf:e6:f4:49:9e:ed:c8:46:c3:c9:7c:a0:a2:76:db:
29:38:81:18:82:4a:a6:f8:1c:87:f1:52:2d:3e:ba:
61:9a:3e:48:97:58:02:51:14:26:03:81:dc:10:e1:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1A:28:4B:4B:22:56:B9:4F:31:06:47:FA:C6:FA:AE:5D:5E:47:23
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:37:ff:2e:48:86:58:52:90:dd:90:d6:b4:f3:85:84:06:62:
d2:af:77:80:e2:a9:3f:b1:9f:8d:2d:c4:60:49:5c:48:b5:85:
22:17:62:1a:fd:ab:1e:f9:6d:ab:f8:ed:8d:1d:23:76:92:cb:
ca:02:6b:df:45:83:93:64:c1:45:88:12:bf:3b:e5:7d:60:42:
d3:4e:30:b2:99:a5:47:dd:4f:76:4c:4d:07:c7:a8:50:9f:ea:
94:d9:12:96:fb:93:d3:3a:f4:d8:bd:19:11:91:aa:9a:95:14:
d2:7a:66:58:e3:34:83:3d:30:32:93:da:fd:b9:8a:5e:b8:c5:
86:06:6f:09:dc:a6:90:a9:e9:17:cc:e3:8f:59:04:3c:f1:06:
3c:83:6c:29:77:d9:f9:d0:d5:19:0b:a1:69:92:04:d0:30:c5:
1e:ac:5d:5a:d8:c0:b9:af:bb:6f:10:cf:8f:98:c7:06:55:c3:
1c:6f:50:d2:7d:6a:9b:60:e6:f4:7c:ed:86:fc:95:94:89:05:
e4:84:d5:23:57:41:6a:13:ce:ab:47:81:84:bf:3a:87:53:b1:
5d:e9:77:ee:e5:04:2d:17:19:24:ed:c8:42:60:af:86:c6:de:
75:ae:40:78:4c:75:86:06:c6:43:ab:4f:b6:aa:68:55:fe:0f:
81:e8:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 06:55:56 2025 by rpki-client