Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: cmttIeln2UN8Lbr3kpugqoI8yY4b0jjJWOO//GE073U=
Subject key identifier: 68:15:36:F5:81:FF:B5:AF:15:84:BD:DE:70:2E:1B:E0:69:16:2E:24
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 019A5150B04C478A92963454AF34420D2EDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 0ACE
Signing time: Wed 05 Nov 2025 00:00:33 +0000
Manifest this update: Wed 05 Nov 2025 00:00:33 +0000
Manifest next update: Thu 06 Nov 2025 00:00:33 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: WDiW+2J1yWcWJrhnWpDrgDrBqsPY+kPI/3i2cI90arU=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:b0:4c:47:8a:92:96:34:54:af:34:42:0d:2e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Nov 5 00:00:33 2025 GMT
Not After : Nov 6 00:00:33 2025 GMT
Subject: CN=681536f581ffb5af1584bdde702e1be069162e24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a9:74:05:fd:22:32:0a:be:d2:ee:88:ee:af:
89:54:1f:01:95:13:e1:5e:84:2b:b2:ab:03:1f:b0:
21:17:77:6d:c6:f2:9e:52:db:36:09:54:06:2f:8c:
29:09:88:19:0f:d1:54:d9:fc:26:71:a4:39:30:b9:
73:d4:4b:0a:04:d7:b4:b8:a6:4b:bf:6b:d2:14:d7:
d5:b6:11:52:39:3e:c4:1f:22:ba:bf:32:ec:95:71:
91:de:72:c0:43:b0:6e:5e:bd:05:c8:61:e5:0d:97:
8d:b7:51:49:d8:cf:cb:12:9b:24:ae:09:c7:48:ac:
6c:67:ac:6a:ef:11:e3:f1:c2:a1:d8:50:31:41:ef:
64:17:30:6f:73:09:b1:13:3b:ae:2f:44:3f:ae:2c:
01:37:ae:d1:59:45:02:6d:8a:77:ad:46:24:4c:fb:
94:b7:60:0c:e1:8c:03:d8:d8:89:f7:d3:28:4e:67:
ff:47:eb:c4:ad:cb:10:bb:9d:b5:f3:04:75:83:99:
04:9c:77:46:0f:b5:f7:8e:d3:a7:0f:5a:72:74:76:
89:e7:4f:3c:24:85:6a:61:82:1a:67:53:2a:15:29:
23:9c:c8:e8:6a:fa:a4:eb:68:ed:83:74:2c:0f:e0:
a7:01:b7:8e:22:5f:ac:3c:7b:cd:89:47:84:39:f7:
5d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:15:36:F5:81:FF:B5:AF:15:84:BD:DE:70:2E:1B:E0:69:16:2E:24
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:62:04:ff:db:39:68:40:09:fd:d9:1f:56:7a:08:1e:5b:21:
e8:e4:c9:53:f3:28:35:89:61:63:3f:07:18:ae:58:ad:68:73:
20:e1:5f:19:3e:a4:b0:cb:bb:63:94:e2:3c:cb:4d:f7:31:d4:
d5:1f:23:47:f4:a6:29:54:f0:77:36:34:c4:54:ae:3f:f2:fd:
95:28:f8:6e:fd:29:d6:b9:c1:d9:46:33:02:d1:2e:fe:a8:3f:
62:8f:5e:9c:b9:8e:20:7f:f0:4f:40:c8:a7:33:6e:98:ee:73:
66:39:f6:28:ea:6e:a0:71:4f:b4:f9:b8:cf:35:1a:ee:1e:93:
86:3b:72:5e:be:14:07:74:1a:54:ab:12:99:92:1c:a4:96:e2:
3f:18:34:0c:d3:d3:f8:a9:44:9e:54:6e:a3:96:e6:87:c8:75:
6a:9a:43:2c:ed:63:fb:ad:d0:db:ff:15:ad:67:57:45:2d:81:
93:a3:6a:e0:11:9f:da:8c:3b:55:d4:bf:02:a7:28:1d:ea:fd:
7f:44:f8:13:f4:ed:92:c4:57:38:61:2f:55:67:4a:ae:62:2b:
8e:af:56:ad:c0:be:6d:4c:9e:d3:d1:9e:db:6b:e0:c9:40:63:
68:2e:53:5a:a3:0d:f0:3c:a8:96:7c:95:bb:0c:c6:43:4b:c4:
c1:ab:15:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:54:16 2025 by rpki-client