Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: LICgHYNw70OsKjPLKwQ4abqsDjOEWHMDR89r5Ctxhfo=
Subject key identifier: 4B:A5:2A:7F:71:2D:62:C7:4B:E6:57:05:FA:66:4D:34:A4:4A:02:7C
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019A4E86947E8BCAF772F4239D45753A6B96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0C45
Signing time: Tue 04 Nov 2025 11:00:33 +0000
Manifest this update: Tue 04 Nov 2025 11:00:33 +0000
Manifest next update: Wed 05 Nov 2025 11:00:33 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: uz9A2ei4UW5nKkQP5rca6i5ergj6AZaktH0kYjgXBiA=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:94:7e:8b:ca:f7:72:f4:23:9d:45:75:3a:6b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Nov 4 11:00:33 2025 GMT
Not After : Nov 5 11:00:33 2025 GMT
Subject: CN=4ba52a7f712d62c74be65705fa664d34a44a027c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:18:f6:76:eb:54:e4:df:fe:33:53:ce:90:73:
e5:a3:61:64:3c:e7:2c:e8:73:85:f5:19:fa:77:79:
5b:09:68:f6:5a:bb:bd:61:ea:39:d7:b9:f9:7f:a3:
99:5b:d9:5a:96:ee:61:ad:e6:15:e4:19:64:c2:50:
5b:5f:75:d0:d0:61:2d:af:61:be:37:6f:c3:d3:1b:
53:15:d5:23:85:35:05:3a:17:ae:c9:19:d3:89:11:
12:5d:cc:aa:a9:3f:17:46:19:c3:1f:ce:fe:bd:82:
0c:c0:ec:08:bb:01:bc:43:fe:3d:db:54:e4:11:c4:
1d:31:06:f8:51:e0:96:c2:f0:f6:84:da:ce:f8:a6:
ca:43:13:ad:a4:09:58:40:99:0c:a1:8e:b7:f8:2d:
77:36:a0:be:1a:64:41:f9:43:a9:ce:12:2c:7a:27:
b7:a5:93:c2:5b:d5:f6:a5:cb:cc:95:16:c2:17:13:
0f:4a:b8:23:03:17:54:c4:9d:8e:98:51:54:df:12:
f0:32:c6:97:34:7b:95:c9:1c:de:00:44:eb:e2:bf:
d5:a0:96:fa:dd:5b:3f:a5:30:15:20:cc:ac:12:c6:
84:f2:f3:12:43:cc:40:03:0c:6e:a8:e3:68:15:d9:
75:4f:ea:39:70:4d:07:05:de:20:be:d2:90:78:08:
90:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A5:2A:7F:71:2D:62:C7:4B:E6:57:05:FA:66:4D:34:A4:4A:02:7C
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:3c:09:21:66:13:41:c1:f0:2b:39:6f:8e:07:79:da:7b:a6:
98:d1:68:34:34:0d:f7:eb:54:2a:81:08:21:a2:ad:02:dd:62:
19:47:02:0f:be:1c:53:e2:98:5d:e6:22:47:b3:82:0f:1d:18:
8b:07:ce:8d:8b:1d:3e:9d:62:23:65:d1:ed:f3:ed:6b:db:cc:
e4:d8:ee:8a:ec:5f:da:ff:75:b8:d2:f2:e6:fd:b5:aa:b5:fc:
73:8a:33:19:23:09:8e:52:b3:88:1b:e6:cd:db:a7:31:f9:6a:
c0:b4:ae:26:ef:16:8d:6d:dc:93:e8:f9:71:ec:0d:8c:f9:97:
7f:15:12:0d:dc:0d:a0:10:2e:ad:4e:a3:b1:21:3f:b5:df:af:
d7:e1:11:b6:83:0f:e4:49:12:1e:51:4a:e0:dd:cf:4c:d7:b4:
53:99:d8:ee:3f:0b:7f:1f:dc:30:9d:bc:01:66:f2:60:ea:e9:
60:af:64:c6:6c:dc:22:50:df:f0:47:d4:36:49:75:76:85:1f:
b0:bf:9e:93:12:e4:0d:58:7d:d2:77:9e:a6:54:23:9e:47:4e:
6b:74:25:5c:d7:73:27:fe:13:dc:b4:c6:d2:9c:a7:77:e7:51:
43:14:a9:f8:94:c6:7b:39:4f:0c:af:92:ed:0c:69:bc:d5:12:
d9:91:90:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:07 2025 by rpki-client