Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
File: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft (raw, json)
Hash identifier: MeqWh/4cw752IdIF5vXOSTasTcHONa7O/HlgWK7s1fs=
Subject key identifier: AC:FD:38:72:87:6C:4C:19:AA:2C:AB:28:55:A3:81:01:06:FA:C5:5A
Authority key identifier: FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
Certificate issuer: /CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Certificate serial: 019A4D3CF48B55CD7268F316CAAE22599EE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
Manifest number: 0DAE
Signing time: Tue 04 Nov 2025 05:00:31 +0000
Manifest this update: Tue 04 Nov 2025 05:00:31 +0000
Manifest next update: Wed 05 Nov 2025 05:00:31 +0000
Files and hashes: 1: 1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl (hash: bNlYSejK9urWtXFslKuMsKK4huFsMcU8nhJukTzo+a8=)
2: QFnY02YmfQGJ4URcdKc-UJCZjYo.roa (hash: cz0+d02fJHBBngQvBEuS7ucPucnAX57nkrsYbr2NfQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:f4:8b:55:cd:72:68:f3:16:ca:ae:22:59:9e:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa81dc46cce39c16c24396f55e6263a669c7e769
Validity
Not Before: Nov 4 05:00:31 2025 GMT
Not After : Nov 5 05:00:31 2025 GMT
Subject: CN=acfd3872876c4c19aa2cab2855a3810106fac55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ce:34:4c:dd:b5:12:5e:6a:39:8a:b3:00:b8:
1d:91:ae:12:5c:32:a8:6e:3a:e2:56:c4:fe:d2:36:
c4:f2:a1:dc:ab:c4:49:4a:0c:19:23:e4:48:77:cf:
42:46:9d:d9:6f:b6:bb:62:2a:69:8b:60:c4:0d:0d:
d0:7f:1f:b0:b1:45:6f:a3:af:00:f8:77:08:4e:e3:
02:ec:8a:4a:8b:dd:8e:8a:74:81:d8:b7:ff:0b:ec:
2e:6b:2f:df:36:10:c1:22:8f:c9:14:d7:12:d0:56:
09:de:97:ca:e8:21:cc:a5:a0:bd:df:7d:92:28:b2:
37:6d:0a:69:9b:f5:cd:c3:09:a2:43:d2:07:a3:94:
7b:6f:4e:aa:6e:5b:8d:9a:39:f2:b7:64:65:70:32:
8d:ac:71:03:a0:9e:50:4f:42:e0:77:54:1c:bb:45:
eb:92:53:dd:b8:d4:67:c8:ca:74:17:41:94:af:7d:
57:1f:b5:0b:2b:e3:1a:bd:e7:19:4e:1f:52:2a:1d:
65:26:89:25:fa:ee:89:47:e6:61:9d:1b:db:a0:c6:
76:2e:71:ff:12:08:72:37:c5:b4:50:4f:d6:79:f7:
98:23:d0:bd:44:a4:ae:bd:e5:d9:e0:40:9e:97:2e:
0c:c4:97:07:4f:6a:6f:c4:ea:eb:a9:25:3b:ba:92:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:38:72:87:6C:4C:19:AA:2C:AB:28:55:A3:81:01:06:FA:C5:5A
X509v3 Authority Key Identifier:
keyid:FA:81:DC:46:CC:E3:9C:16:C2:43:96:F5:5E:62:63:A6:69:C7:E7:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-oHcRszjnBbCQ5b1XmJjpmnH52k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/8f0180-2b5b-4419-ad36-f4b8ca37a1fb/1/1-oHcRszjnBbCQ5b1XmJjpmnH52k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c0:bc:83:b2:b3:42:cf:bd:18:63:0a:e7:13:c7:43:e6:8d:
22:67:57:38:22:fc:df:07:04:4a:2a:f9:2a:d2:a0:bb:13:e4:
f0:ca:80:77:c8:84:dc:bf:ed:b5:01:9b:a4:b0:52:04:b4:09:
66:16:04:bf:21:2c:cc:7a:c2:40:18:7a:aa:40:c9:0e:b1:1d:
ff:ec:e4:7b:9f:dc:35:79:57:18:19:06:6d:2f:e0:b5:56:c6:
34:5d:b5:ce:1d:8c:3e:fd:58:8a:11:02:7c:06:37:12:19:c8:
0a:16:71:ce:cb:2a:61:cf:2b:2d:f7:bc:29:56:c0:fe:3c:97:
ec:e4:bb:7f:c9:98:02:2a:ef:d4:59:c6:b0:71:ba:b4:3e:dc:
10:f6:19:4b:13:98:23:9b:f7:a7:dd:8f:00:22:08:5e:2b:c2:
9b:c4:d5:c2:77:06:fe:64:e1:5f:68:8e:02:b9:f9:52:15:64:
4a:9f:e5:d5:eb:48:cc:a9:e2:d3:6f:e3:16:8d:09:f1:15:ea:
b5:08:6b:0c:b3:a5:8d:c6:81:8c:77:3d:93:63:ec:4f:6a:f1:
df:5b:6a:08:0c:78:9e:0a:24:11:12:fe:31:7c:47:a8:bc:e4:
fa:34:c7:9f:71:56:40:29:56:bd:8c:ce:99:ef:c3:3c:87:3c:
02:ed:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:17 2025 by rpki-client