Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
File: 1-9W1c_sNJpmSp5qea0XN1iDezBE.mft (raw, json)
Hash identifier: 6vjRIH2c2v66A/AhT8dW+U8xgbjyDVWue9v4uV4i800=
Subject key identifier: 07:9A:0B:6E:E2:99:56:32:FC:58:B4:F6:DB:C9:C7:08:35:00:B7:91
Authority key identifier: FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
Certificate issuer: /CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Certificate serial: 019A503DF12063F5EF484294AE69488C9134
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
Manifest number: 0798
Signing time: Tue 04 Nov 2025 19:00:27 +0000
Manifest this update: Tue 04 Nov 2025 19:00:27 +0000
Manifest next update: Wed 05 Nov 2025 19:00:27 +0000
Files and hashes: 1: 1-9W1c_sNJpmSp5qea0XN1iDezBE.crl (hash: TiMYI5hay5t+2ALWz0ulbgjKD33qiDDubn0W4d3YcAM=)
2: xxpwWq99h2UC8fGaA57WvXmJQIY.roa (hash: hB0aBJhUko4vLE69LgJZtcXWGS9cGGQQvN4ZagAecyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:f1:20:63:f5:ef:48:42:94:ae:69:48:8c:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd5b573fb0d269992a79a9e6b45cdd620decc11
Validity
Not Before: Nov 4 19:00:27 2025 GMT
Not After : Nov 5 19:00:27 2025 GMT
Subject: CN=079a0b6ee2995632fc58b4f6dbc9c7083500b791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e0:a7:a6:fb:97:13:0b:26:a8:4e:27:8b:70:
1b:f3:db:99:8c:97:c4:58:04:c3:38:22:03:68:c9:
ae:fe:5c:f2:15:d6:0f:35:b8:63:dd:1c:65:c5:28:
9a:d3:33:5c:20:52:19:52:59:e2:1a:d1:80:5e:50:
6c:9f:ca:6d:19:0e:83:4f:11:69:34:d0:aa:ff:7f:
ec:67:8b:c8:c3:26:57:23:5a:39:2a:2f:1a:5d:81:
bc:7c:86:f6:cc:0a:bb:19:0d:29:d2:6f:7c:be:b5:
a4:a7:81:fa:28:fd:7c:03:af:c7:70:3c:12:7d:8a:
06:36:09:2b:0b:82:2c:aa:f4:85:f1:32:df:1f:8e:
4d:fa:e6:5a:dd:8c:83:f5:02:f9:bf:d8:07:d0:90:
2c:8a:c6:db:ae:5f:bd:bc:9e:d0:27:2d:96:97:77:
2c:2b:8b:34:b5:2d:91:09:ae:14:0a:26:35:70:a3:
76:58:16:f7:ea:68:ae:5a:c4:59:4a:a8:77:d7:1f:
da:04:a5:7c:5f:b3:a6:3d:73:89:9b:20:51:89:b1:
f2:ee:dd:70:53:14:d6:15:95:58:92:d7:51:1c:dd:
73:bd:80:5e:5b:84:d1:99:3b:32:25:f4:80:ab:11:
f3:fc:eb:ad:44:11:83:28:7b:1e:52:49:ff:cf:e2:
7a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:9A:0B:6E:E2:99:56:32:FC:58:B4:F6:DB:C9:C7:08:35:00:B7:91
X509v3 Authority Key Identifier:
keyid:FB:D5:B5:73:FB:0D:26:99:92:A7:9A:9E:6B:45:CD:D6:20:DE:CC:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9W1c_sNJpmSp5qea0XN1iDezBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/6438c0-54e5-4b33-9502-50f3d1ae9442/1/1-9W1c_sNJpmSp5qea0XN1iDezBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:da:f6:cb:a3:cb:39:37:5d:15:57:a8:b7:f2:e9:38:37:30:
1d:3a:b9:6c:18:90:56:a1:17:33:dd:8e:0b:af:df:c3:55:62:
27:a0:9f:d2:f6:d6:cf:18:f6:0c:bb:75:dc:3e:90:e2:8c:42:
3c:37:67:bf:24:c8:78:55:ee:be:eb:ae:9e:86:96:72:79:30:
07:27:0f:b0:a3:a5:70:d7:6d:74:5e:0b:43:51:d6:af:3d:b4:
48:78:ec:2d:45:15:f0:c7:0f:d8:a1:f3:be:52:68:2a:be:9d:
e1:21:c6:9f:a0:65:33:84:95:cf:1f:2f:ba:dd:cd:8c:46:f9:
ac:8f:96:a2:f1:ea:21:89:d5:a0:13:20:ce:2a:df:3d:6e:16:
b2:fe:d3:aa:2e:9d:2e:8f:b7:a0:6a:4c:cf:d2:f3:ed:7b:4f:
02:ee:40:72:75:61:e4:4b:5f:f8:12:b6:79:29:49:24:be:a7:
17:c7:b8:bf:6b:f5:d2:39:3d:43:8c:43:62:ad:ef:f5:6c:8b:
ee:d7:7e:ca:3c:92:de:4d:3d:e1:cd:9c:bd:38:e7:bd:17:52:
e2:fa:28:fd:64:8f:f7:67:ae:2a:4e:0b:be:17:cb:39:39:83:
22:b3:9e:a4:76:a5:cd:47:ee:0e:4a:52:9e:d4:d3:a8:e7:80:
cb:61:8d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:41 2025 by rpki-client