Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
File: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft (raw, json)
Hash identifier: eL2Nm9xccns3yJr5C7AEn4ne/lsQE6LfT2C0QDPNzgY=
Subject key identifier: 1A:D9:EB:59:F2:5B:D5:B3:A0:8E:D3:2F:62:B9:8B:F4:A0:92:F1:7E
Authority key identifier: FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
Certificate issuer: /CN=fbeff76e12dc14c744aa726e01741727c46dc159
Certificate serial: 019A4DE1B6F4A7AF14D5670C7D614DE9453B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
Manifest number: 0CB9
Signing time: Tue 04 Nov 2025 08:00:29 +0000
Manifest this update: Tue 04 Nov 2025 08:00:29 +0000
Manifest next update: Wed 05 Nov 2025 08:00:29 +0000
Files and hashes: 1: 1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl (hash: hsGXsw7yxCIzrcY+s3wouZVov6f8SWZtKeMo75ynRdE=)
2: IWr6TuTrJyjayPLvTxSMqZtzabw.roa (hash: rtpLNLVSn8Vjv4N/NCkqAqr/rBVi4ck/ZAOnbXB0Ovs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:b6:f4:a7:af:14:d5:67:0c:7d:61:4d:e9:45:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbeff76e12dc14c744aa726e01741727c46dc159
Validity
Not Before: Nov 4 08:00:29 2025 GMT
Not After : Nov 5 08:00:29 2025 GMT
Subject: CN=1ad9eb59f25bd5b3a08ed32f62b98bf4a092f17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:9e:c1:1d:fc:a4:a7:2d:35:08:93:50:63:
f5:23:13:5e:c8:d9:d8:f5:61:e6:eb:97:44:a0:51:
77:96:5f:31:5d:38:4b:f3:d1:c3:b0:39:67:e5:ec:
f5:e7:69:97:2f:af:3e:78:55:5e:f3:bf:b6:42:8d:
ac:c5:88:ee:63:e5:90:3d:b2:45:36:65:2e:2f:5a:
4f:9d:1a:b2:34:ef:ca:e8:62:14:63:1b:f3:f4:f3:
d5:04:14:f6:59:88:17:05:5d:e8:7f:a9:04:4c:35:
e7:08:7a:5b:87:aa:2d:4d:fa:77:d5:ce:88:60:bf:
09:52:7b:ce:e6:a6:01:89:35:a9:a9:c8:71:f6:9c:
e5:ab:30:3e:aa:4f:d8:9d:17:8f:b0:b7:aa:22:8b:
b0:07:3e:00:6e:c8:5f:dc:01:f3:0d:90:15:d1:7d:
4c:03:03:33:86:0c:4b:47:df:8b:20:f2:70:09:3d:
9d:cd:1e:1d:c1:4c:00:28:93:e7:87:57:18:fb:35:
db:23:ce:f0:d0:97:3d:ab:8c:18:06:96:24:4a:c0:
17:e1:8b:5a:b9:a2:2b:ef:ca:bc:08:7b:29:8e:e4:
41:3f:e8:fb:fc:71:3e:51:96:3d:3b:ed:30:f5:95:
fc:13:94:05:b1:01:a3:e9:ec:17:df:9a:e6:61:92:
bd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D9:EB:59:F2:5B:D5:B3:A0:8E:D3:2F:62:B9:8B:F4:A0:92:F1:7E
X509v3 Authority Key Identifier:
keyid:FB:EF:F7:6E:12:DC:14:C7:44:AA:72:6E:01:74:17:27:C4:6D:C1:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/d801f7-2824-4ea9-ad8f-3b8f508a754a/1/1--_3bhLcFMdEqnJuAXQXJ8RtwVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:2a:50:d7:76:44:3a:4c:92:6f:10:9d:f5:cb:d9:a3:54:38:
bf:9c:85:24:5b:5c:62:53:7f:ac:f4:ca:15:64:99:39:e8:48:
42:7c:be:4d:a0:2e:64:7b:1f:5e:0b:7f:9b:1d:4d:b9:30:f0:
9b:33:a5:63:b3:28:36:7d:1b:b4:5d:58:de:13:dc:07:be:9a:
89:72:05:2c:79:d2:7d:95:dd:27:a9:63:80:1d:39:d8:42:55:
9a:49:e9:73:83:46:2c:83:c3:09:12:af:76:67:25:64:8e:28:
62:77:a9:ed:ac:e1:8c:07:e7:d8:8e:1e:b9:ed:60:37:7a:eb:
a0:6b:49:dc:ed:46:33:9c:f2:b5:7b:3c:d6:ca:76:8c:f0:18:
05:7f:5f:e1:ca:4c:55:77:7e:75:41:27:98:34:b8:87:22:58:
70:ac:03:4a:b8:f2:fc:40:6f:22:8a:e2:22:23:7a:98:9d:8f:
ea:3e:54:0b:cb:fd:d0:5a:77:e9:a3:44:c3:5d:4d:c9:1f:69:
ce:06:7d:b0:c0:2c:68:de:03:50:72:21:74:17:39:da:84:5f:
b4:b2:cf:6c:19:63:c7:b5:fb:44:20:39:31:2d:93:2a:ef:53:
21:2c:a5:61:99:be:1c:a8:99:01:8b:9c:fb:48:c1:23:68:ea:
0c:48:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:18 2025 by rpki-client