Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: iis0nS7FMmTUABhy+k1Cs9yB+HFoQjA9GfcnKWsH1E0=
Subject key identifier: 59:45:E1:2E:01:49:19:5C:2A:4A:4A:3C:54:F9:A2:4F:C6:D4:D3:F7
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019A4DE21DB47D4C77E300E0CFCB17B3B249
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 10B2
Signing time: Tue 04 Nov 2025 08:00:55 +0000
Manifest this update: Tue 04 Nov 2025 08:00:55 +0000
Manifest next update: Wed 05 Nov 2025 08:00:55 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: WyXA6tblJqHPgfI6ZXpmqcAptisni70dn4FsWu5E7v4=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:1d:b4:7d:4c:77:e3:00:e0:cf:cb:17:b3:b2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Nov 4 08:00:55 2025 GMT
Not After : Nov 5 08:00:55 2025 GMT
Subject: CN=5945e12e0149195c2a4a4a3c54f9a24fc6d4d3f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:45:8f:2f:db:df:c4:88:54:10:a7:e9:f5:5c:
9a:b8:8b:20:b7:e7:7e:8b:a0:32:e8:a0:14:7b:37:
6e:19:5b:ec:97:a9:36:6f:8a:ee:2e:7c:a5:bd:50:
1d:11:7f:11:84:98:d8:ae:ce:b8:c6:5e:26:e2:6d:
a2:98:f5:07:0c:90:7a:01:43:90:0c:bc:25:78:87:
bc:15:d5:3e:2d:3b:13:09:26:c1:23:5e:ce:21:7e:
7c:9f:d7:3f:76:c9:77:b6:5b:81:fe:d2:2a:c9:7b:
71:13:09:d4:f7:4e:c7:14:6d:93:a8:d2:df:75:4c:
5f:d7:90:f6:90:0e:5f:53:65:5b:78:0a:52:50:24:
1c:d9:2f:cf:cd:86:68:9a:f2:1e:4f:ed:13:3e:47:
d6:b1:73:e6:49:fe:83:af:0e:0e:42:bf:78:8a:98:
75:cf:c9:9a:be:25:91:7a:9e:78:9f:46:8a:14:3d:
56:4a:6e:9b:1c:56:67:ca:48:d1:5f:c6:28:dc:24:
4c:38:8d:bd:d7:92:29:81:a3:e2:68:2e:ba:28:65:
96:2c:04:76:a6:99:d8:8e:cb:78:2f:d4:d8:83:03:
5e:5d:7f:6c:be:e0:3a:93:e7:74:3b:f8:ca:ef:2f:
29:8d:99:67:b4:ed:bf:71:95:c1:9b:f3:87:6e:88:
5d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:45:E1:2E:01:49:19:5C:2A:4A:4A:3C:54:F9:A2:4F:C6:D4:D3:F7
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:cc:35:0f:cf:71:23:38:46:1f:50:77:1a:9d:75:c7:f2:3b:
c4:4f:ee:ce:fa:0e:52:b7:f8:a5:18:de:df:fa:75:9b:9c:db:
de:41:df:bc:da:44:c6:ca:8b:0e:87:b1:47:9d:6b:29:df:c2:
25:d2:9e:85:64:ca:d9:c1:74:f7:fe:3e:b3:ad:e8:a0:ca:33:
11:cf:28:e5:a0:ef:29:0c:6c:de:31:d0:df:ea:af:a0:c0:1c:
4f:01:df:f2:36:e1:a4:2e:9f:c2:c8:d8:80:7b:86:a0:d6:66:
42:f9:c3:d9:2a:93:e2:fb:68:09:a0:64:75:70:2c:ac:ce:9d:
ff:fd:6d:e8:ed:4b:09:ad:34:c3:f7:cd:19:8a:ac:a3:bf:04:
56:07:0f:dc:b2:29:3a:64:75:56:14:c1:6a:c9:ae:3f:b2:53:
d7:fa:9a:3a:e4:1c:de:69:1d:25:66:71:27:82:d4:ff:6e:95:
cc:b7:a2:78:a9:8d:85:47:e8:99:09:6b:b8:ca:50:0e:64:65:
bf:92:e1:b6:c6:30:47:31:ce:4c:4c:41:29:f1:18:0e:ae:b1:
6c:78:c8:08:f0:e5:47:de:f2:7b:83:40:42:ec:0a:1e:4e:bc:
67:2c:b3:9e:5f:09:0e:4d:70:c7:ba:41:16:38:c4:4a:cf:9c:
de:ee:36:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:04 2025 by rpki-client