Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
File: 1-3R7GNuDDz6-M4b8n8jaldkyetg.mft (raw, json)
Hash identifier: O5HsYdHJuttt2L2kd3JrhiNRAL1SSXg/jH8B3puKyO0=
Subject key identifier: 96:37:6E:02:C5:2C:D4:8C:1C:0E:36:B1:ED:3B:C0:61:49:15:89:B5
Authority key identifier: FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
Certificate issuer: /CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Certificate serial: 019A503DEC26D48BEA94E2D13F1F7656EC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
Manifest number: 031E
Signing time: Tue 04 Nov 2025 19:00:26 +0000
Manifest this update: Tue 04 Nov 2025 19:00:26 +0000
Manifest next update: Wed 05 Nov 2025 19:00:26 +0000
Files and hashes: 1: 1-3R7GNuDDz6-M4b8n8jaldkyetg.crl (hash: eke53JmfwyAf0tYCZOAUyQk32tbjqhykU/UHZmpwcOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:ec:26:d4:8b:ea:94:e2:d1:3f:1f:76:56:ec:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb747b18db830f3ebe3386fc9fc8da95d9327ad8
Validity
Not Before: Nov 4 19:00:26 2025 GMT
Not After : Nov 5 19:00:26 2025 GMT
Subject: CN=96376e02c52cd48c1c0e36b1ed3bc061491589b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:20:9c:31:b9:70:a4:79:56:3b:c5:b1:b2:4c:
8b:be:81:b3:30:1d:d2:11:3c:ee:95:05:b9:ed:68:
5a:8a:41:8a:1e:0b:18:0c:71:a2:ba:a8:1e:7a:14:
21:cc:12:16:24:e1:07:d5:53:90:70:d2:56:2a:0e:
76:05:fa:b3:97:ce:95:2b:49:90:1c:2c:54:f8:1d:
76:25:74:1d:ca:fa:e6:5c:8a:10:d7:97:a8:91:6c:
ab:b7:aa:fb:3a:02:ab:61:94:e9:ef:bb:36:e2:69:
35:8f:02:1a:e3:4d:74:bf:ca:91:33:1a:67:cf:e8:
41:9a:51:82:4d:9b:60:26:6f:8e:e2:90:a2:9f:d4:
d9:8f:a9:9b:a8:37:23:7a:72:16:67:0a:70:e5:fa:
ba:96:d7:ea:67:91:68:17:ac:e5:27:42:27:c9:c8:
37:4f:26:c0:c8:aa:06:7c:8e:bc:3a:57:32:f5:81:
21:a0:2e:7d:94:6a:c2:29:7d:87:e6:42:84:26:43:
0d:82:bb:10:4a:75:a6:a5:bf:8e:5d:2a:eb:5c:9c:
ea:9d:1f:5c:35:0c:fd:f2:2e:8d:2a:24:8d:a2:ba:
6e:4d:fe:62:35:b9:01:19:91:e7:9f:b8:33:14:a2:
31:0c:a7:c1:52:6d:69:88:4b:aa:c5:48:9b:ce:9f:
ba:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:37:6E:02:C5:2C:D4:8C:1C:0E:36:B1:ED:3B:C0:61:49:15:89:B5
X509v3 Authority Key Identifier:
keyid:FB:74:7B:18:DB:83:0F:3E:BE:33:86:FC:9F:C8:DA:95:D9:32:7A:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3R7GNuDDz6-M4b8n8jaldkyetg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f2f9ef-d67f-494c-b72d-bbf49c77af38/1/1-3R7GNuDDz6-M4b8n8jaldkyetg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ba:1e:e6:10:92:7f:4f:48:5d:98:7c:62:d5:38:db:e1:ec:
1c:65:d3:b6:cf:72:a0:cc:06:c0:83:34:b1:66:5c:6c:d0:89:
07:32:b6:f3:6a:12:c4:2f:26:5f:d2:33:fe:b2:06:b9:d8:de:
75:11:82:0d:66:9b:26:50:3a:cf:99:38:7e:73:ff:0e:15:13:
22:1b:0b:ff:da:c3:89:a0:5c:fa:df:70:e6:a4:10:72:0c:39:
c6:e6:a7:3b:9f:99:3a:9f:49:d2:69:83:58:ef:af:da:26:53:
b5:a9:bc:62:d5:d7:e1:de:58:25:0f:fb:d6:a3:47:7f:84:41:
d0:02:b8:f3:d5:75:da:e1:fc:b0:55:59:13:11:d3:b2:18:15:
30:8e:11:d0:95:b4:08:94:0a:8f:78:23:5c:fd:b5:ed:84:40:
17:81:21:14:4a:7c:70:41:a7:53:3d:6d:83:07:33:ff:09:b4:
d0:bc:57:0e:f4:1a:7c:51:bc:e0:e6:80:f7:23:1f:69:7b:c4:
a9:44:31:4e:16:c1:61:21:95:12:6b:6e:83:27:c2:e8:4f:8f:
c5:d0:ff:5a:7c:57:94:e3:e8:c3:6f:44:4a:78:69:32:46:dc:
bc:90:12:ad:e8:2f:36:d3:f7:e4:34:13:0e:ab:f4:69:b0:b5:
6c:47:32:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:51 2025 by rpki-client