Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: CY/3VPOhQm+kCd3bPbSvn2cqCgRMoNi0Dyrc1gqP7rU=
Subject key identifier: B0:8A:C5:1D:11:EB:69:F5:1B:58:86:B6:CB:A1:1F:FD:05:3C:56:3D
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019A4D744F7AFC11AEE26FDD0E7BAD03E2B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 065A
Signing time: Tue 04 Nov 2025 06:00:59 +0000
Manifest this update: Tue 04 Nov 2025 06:00:59 +0000
Manifest next update: Wed 05 Nov 2025 06:00:59 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: EUL1J2Gu8vHuLQFO367qteqlGFZY/Q0g7Dvt6UlG0aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:4f:7a:fc:11:ae:e2:6f:dd:0e:7b:ad:03:e2:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Nov 4 06:00:59 2025 GMT
Not After : Nov 5 06:00:59 2025 GMT
Subject: CN=b08ac51d11eb69f51b5886b6cba11ffd053c563d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:8a:f0:e8:65:b5:86:75:b2:2b:41:80:1e:
34:3f:4c:4a:4b:b0:a1:97:2e:e2:e8:e6:98:67:6e:
1e:4a:65:38:4e:38:16:3a:ae:42:8e:23:0c:f2:38:
18:13:82:c1:27:2e:e9:8d:c7:05:b6:0f:f5:8b:0b:
4a:9b:5c:58:77:cd:15:47:c6:79:9f:53:9f:ab:e9:
95:e9:52:a0:66:cc:ba:84:31:a2:b6:96:22:5a:5a:
8e:eb:fc:59:4a:6c:57:33:1d:bf:18:a4:ea:01:bd:
02:23:0f:41:6e:74:e5:cc:eb:2d:d3:62:ef:3f:31:
63:22:58:e2:1a:45:13:14:63:e2:27:0c:11:8c:e5:
28:3a:d1:a2:cd:54:f7:07:f1:bf:33:9f:e1:0e:23:
fc:38:e6:3b:1f:1b:56:35:d7:0f:1c:ff:3f:93:5c:
ae:d7:75:67:0b:55:f5:66:02:72:8d:13:99:02:26:
46:04:39:d2:f1:57:f9:f7:20:41:21:73:f3:8b:4b:
8b:b6:1b:95:41:03:2c:78:f4:fa:b1:aa:ac:6b:5e:
ac:d8:5a:4d:aa:24:cf:da:58:d4:4f:2b:4c:3c:8d:
dc:e8:8f:6f:0c:78:c4:e9:0a:db:8b:e0:bb:00:42:
c2:70:ac:da:df:16:ce:d8:95:2e:1c:13:b8:0a:a6:
bb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:8A:C5:1D:11:EB:69:F5:1B:58:86:B6:CB:A1:1F:FD:05:3C:56:3D
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:72:67:13:ca:04:7f:98:8a:18:33:7a:ae:64:94:67:6f:07:
ad:2b:14:56:3a:19:b7:b3:00:41:a5:be:28:6d:6c:19:c5:85:
4d:d0:d2:98:1e:d5:93:93:5b:37:84:91:d3:7a:f5:ff:97:e0:
23:ee:47:ac:c3:c3:9b:bb:55:64:8c:7f:fd:57:eb:6a:72:5f:
7c:be:4c:1f:71:9e:6c:c4:38:d8:06:00:b9:7b:ee:36:d2:1c:
91:73:a3:e9:80:98:d9:52:c5:42:7b:85:77:93:29:37:5e:4b:
bb:a5:09:18:be:b6:c8:58:6c:8c:26:f7:ef:d5:30:e8:32:ee:
48:85:cc:21:88:0e:05:d3:8e:35:6e:59:16:24:3b:0c:0e:f5:
a8:42:41:a2:7d:64:9c:c3:3e:03:7a:41:58:ee:db:92:17:9c:
99:a4:50:a4:f0:c8:4c:2b:2b:60:7f:8c:d7:68:89:cd:21:7c:
bf:61:ff:e3:9a:e2:bd:22:75:a6:e7:8d:05:ac:7b:86:47:73:
d8:88:6d:8d:01:10:e2:cf:11:c4:91:c1:d8:ff:38:68:2e:7d:
21:8d:51:3c:8a:a7:eb:47:1d:48:10:3d:79:22:6c:84:b9:8b:
f2:06:6c:80:c7:54:43:18:3d:4f:9b:e1:16:0e:5a:cf:38:c9:
48:08:b7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:16 2025 by rpki-client