Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
File: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft (raw, json)
Hash identifier: yb1PfqFxftKMIcObGOdg9N9aD08k+W5++FASh6Ht558=
Subject key identifier: 18:08:20:97:FB:6A:45:D4:73:4E:3B:46:58:A7:C9:57:83:E6:43:D1
Authority key identifier: F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
Certificate issuer: /CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Certificate serial: 019A533F869B96603D683A932139DAA33F8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
Manifest number: 1719
Signing time: Wed 05 Nov 2025 09:01:03 +0000
Manifest this update: Wed 05 Nov 2025 09:01:03 +0000
Manifest next update: Thu 06 Nov 2025 09:01:03 +0000
Files and hashes: 1: 1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl (hash: LbeJn9oPj7dYhtSCflF+tNB/kNWaMDrDScp8/V0vOmA=)
2: 8wuUCHDoiO-u5k-EpvGe48eFVvY.roa (hash: 8liREnCtlx6CxZif/A697CMWzrfTg26yY6bw/0u19Kc=)
3: dwzGjClilGgqBa83jIlDLO6MhiY.roa (hash: ax5/1FqZ7LpfpWHSsIMG4PE6ZnxsmjJK2plIEm/o0h8=)
4: hNWwx7OL-9adb1_PVQj7dLugRbE.roa (hash: a5RZCNYvOxtuFY3pREa+RhVOW1R7dmnnmbvgTvDFgik=)
5: v_OC8AL3Mq1xajaIUc5DePm85DI.roa (hash: a977IGySg5+WWPVlDhFXuD0DqZ/XdGVdujbzn7Y6iiQ=)
6: wHQqsP-wDdlrG8HE-Ibk_6n2osM.roa (hash: PzO0Fj4BmxOXd+Sy5Mgniwv5ZA+rTUEwL2xB1sXxHvE=)
7: xDz2yFNogKXgNdjcw-9O61_cLr0.roa (hash: xZbD/0bkTbFPWIFZs2iZleXxCUBZQXF3vUVmN0PJ3a8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:86:9b:96:60:3d:68:3a:93:21:39:da:a3:3f:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c9e0305cfed5794448732a8b0bd8427450d813
Validity
Not Before: Nov 5 09:01:03 2025 GMT
Not After : Nov 6 09:01:03 2025 GMT
Subject: CN=18082097fb6a45d4734e3b4658a7c95783e643d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:be:fb:a4:70:71:a7:b9:7c:43:21:91:c8:bd:
90:0d:86:71:fc:95:b0:cf:3a:9f:fa:ab:fb:76:62:
6b:3b:6a:2d:d0:fc:4d:b3:fa:f5:a7:68:e2:37:d3:
f8:a0:c5:eb:d2:ce:9b:2e:63:a5:ee:29:22:b7:79:
da:0b:78:a1:b6:1e:96:68:e7:6d:13:64:f5:c6:e6:
1e:25:2d:cf:a8:0e:df:95:2d:b6:93:13:7d:2c:ec:
58:d7:df:50:81:36:ca:b9:bd:9b:04:9d:72:fa:08:
30:03:5a:27:cb:4d:4b:93:34:1d:11:29:3c:06:27:
53:6b:9d:9d:04:59:b1:61:e4:8d:96:77:f5:f4:24:
f4:7d:39:1a:b5:46:87:a4:49:b4:a9:38:ae:c5:b6:
7c:3a:49:c0:1c:72:f3:94:a0:40:35:85:36:03:82:
5b:61:ff:e1:f9:54:06:71:e4:28:60:92:c6:1f:1b:
0a:06:b3:8c:40:d3:ef:74:20:4c:b9:2f:47:a6:0b:
e0:f0:62:b1:86:30:dd:86:6d:a6:10:9f:d2:9e:35:
ff:fe:25:77:e1:8c:e0:ca:7d:40:56:91:38:38:d1:
01:8d:a2:b9:14:98:6c:1a:d8:a5:51:90:45:e6:fd:
18:ca:44:bc:ba:b7:5d:07:da:e9:79:3f:6e:d7:9d:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:08:20:97:FB:6A:45:D4:73:4E:3B:46:58:A7:C9:57:83:E6:43:D1
X509v3 Authority Key Identifier:
keyid:F9:C9:E0:30:5C:FE:D5:79:44:48:73:2A:8B:0B:D8:42:74:50:D8:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cngMFz-1XlESHMqiwvYQnRQ2BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/36190d-1c6c-48c6-a414-2fbb208ad182/1/1-cngMFz-1XlESHMqiwvYQnRQ2BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e4:2c:03:21:70:15:3f:e0:38:eb:84:10:5f:b0:44:8c:ca:
c4:dd:38:01:35:c4:6e:44:d6:6c:5e:88:0e:3e:81:a9:07:80:
29:de:e3:a1:48:ad:9c:9a:42:eb:33:93:26:2e:56:92:70:ec:
e9:09:5f:2b:99:03:4b:6c:41:8a:2d:51:6b:04:63:31:e0:fe:
6f:5b:0f:85:62:73:14:ce:47:65:00:a5:6b:0f:f7:fd:51:8b:
d2:f9:4f:83:64:8d:a4:53:01:30:15:61:70:6b:94:ac:9d:f1:
88:f3:92:8b:30:52:5a:e8:58:93:3d:54:11:f6:64:3d:19:36:
2a:94:2a:35:a3:8b:9e:0c:2b:3e:71:19:cd:19:d8:57:e3:f6:
fb:73:e1:37:61:e4:f5:07:a0:8e:f2:61:91:78:c2:65:99:ad:
eb:b1:8c:ab:dc:d5:6c:b3:2b:c7:33:4c:b9:a8:e0:9b:4b:6e:
a3:0b:d1:0d:ca:96:f1:68:01:54:ab:6d:9b:ad:3d:95:a0:30:
04:6c:ac:e4:f1:2f:8c:0d:68:5b:7f:b6:78:7c:68:68:1e:e6:
78:31:a4:fe:dd:d1:de:d7:b1:f5:cd:b8:a6:39:82:67:1e:0c:
58:54:e2:d9:ea:c9:25:bc:39:41:90:5d:cd:27:b4:fd:e8:2a:
d2:a0:41:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:46:25 2025 by rpki-client