Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: AirLm9/X6r++9vheVSznOrhO68+mn8A4jd/3xYw32jg=
Subject key identifier: 25:DF:84:AD:3F:9E:02:63:A2:A5:A7:28:B7:0E:C8:F6:0A:27:F2:08
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 019A4EF4CE5F34AC13919192FC2EB3762A59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 1066
Signing time: Tue 04 Nov 2025 13:00:57 +0000
Manifest this update: Tue 04 Nov 2025 13:00:57 +0000
Manifest next update: Wed 05 Nov 2025 13:00:57 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: 3c/YkYyI1MESlqBZEtaRVIzCzKLeBoH/EZyU55GP19E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:ce:5f:34:ac:13:91:91:92:fc:2e:b3:76:2a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Nov 4 13:00:57 2025 GMT
Not After : Nov 5 13:00:57 2025 GMT
Subject: CN=25df84ad3f9e0263a2a5a728b70ec8f60a27f208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:a8:db:b4:7a:48:30:d1:3a:ec:0e:ee:8a:
67:81:ee:76:fc:f4:55:a4:3a:b4:e6:a6:43:b9:38:
82:10:5e:0c:5d:f6:a7:2a:ee:69:2b:cc:28:36:53:
1c:5b:21:dc:19:e3:f1:74:3d:66:5a:97:25:3e:00:
e3:d6:6d:95:c8:4f:3b:e4:71:b5:74:2d:81:04:70:
ff:a8:41:7b:f5:70:c1:09:ec:fc:50:02:57:f8:39:
cb:09:7e:60:b5:cd:9a:9d:3e:e3:90:2d:8a:15:a9:
cd:05:d3:d2:75:70:49:a2:73:a8:75:1d:ea:22:62:
84:1f:3d:2d:29:d3:1f:2f:6e:57:e5:fb:d1:26:65:
b3:88:f0:5c:7c:29:22:6e:e3:bc:09:cd:0d:77:10:
37:26:a5:35:66:4e:b0:be:e8:38:00:5f:8b:c4:15:
f0:63:ea:df:d7:b0:53:8d:80:91:49:49:9b:be:91:
e6:55:cb:a9:5b:d6:ff:01:1c:1a:e1:07:f0:5a:99:
93:5b:14:5c:d7:22:0a:02:af:02:cd:82:32:84:ec:
17:32:af:dc:fe:8c:9d:b5:f5:7c:54:f9:f4:0d:34:
c5:0e:53:63:b0:c8:d9:71:eb:e3:6f:3b:54:a2:cf:
7d:93:c3:c8:c4:44:04:92:7a:91:9b:27:38:ef:e1:
a9:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:DF:84:AD:3F:9E:02:63:A2:A5:A7:28:B7:0E:C8:F6:0A:27:F2:08
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a8:2f:20:b8:25:c5:12:fa:4f:aa:5a:ff:c4:76:12:75:40:
23:fa:cc:b5:28:07:5c:8c:11:61:d7:cb:e8:3c:ec:c3:00:61:
3d:d3:98:53:17:ab:90:d4:fc:af:17:ef:d6:76:75:43:89:17:
cd:54:54:fa:ff:e6:fc:00:89:83:bc:ce:47:ac:2b:5d:26:dd:
10:64:42:4a:93:54:5d:cc:2a:1d:9c:e6:65:ed:36:28:45:dd:
e8:44:d3:4f:8b:15:dc:70:08:37:93:08:e7:dc:6d:cd:9b:74:
16:dd:ef:65:8e:eb:3c:e7:30:0f:cd:f6:51:fa:c7:5f:59:8f:
bb:2a:76:ec:af:28:93:bd:b1:b7:1e:58:a4:30:35:a0:42:eb:
49:3f:4b:07:35:97:72:cd:a0:f4:32:ad:3f:ad:12:81:8c:c6:
b6:51:85:fc:e7:64:07:20:a1:29:97:42:cc:b1:b7:42:e3:14:
75:21:b5:0b:58:f0:c0:e4:ec:b3:cf:7b:3b:df:04:3a:3a:29:
2c:79:34:cb:c8:4e:ce:42:20:77:6c:a3:29:d9:cc:99:96:6e:
1e:f5:da:07:5d:fe:a9:c8:82:0a:81:e5:fd:5f:00:e5:bd:f0:
e3:f1:22:37:f4:2e:81:de:63:45:a0:ac:06:f5:8e:67:f4:a3:
ca:67:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:47:03 2025 by rpki-client