Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: LWZlmcayh3bBuBqI5X9UElVaG1P+DIw3OS9IHyKdgfw=
Subject key identifier: F3:CF:37:45:33:CD:DA:68:A6:20:F9:C8:B8:48:CF:10:AB:B0:05:58
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019A503E339CF363CB88852B9D8FA3BDAAEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 151B
Signing time: Tue 04 Nov 2025 19:00:44 +0000
Manifest this update: Tue 04 Nov 2025 19:00:44 +0000
Manifest next update: Wed 05 Nov 2025 19:00:44 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: L7O9GUx+4+WBsmqTZs21VA3Vuh/zo3I9Ejtmz9H03H4=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:33:9c:f3:63:cb:88:85:2b:9d:8f:a3:bd:aa:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Nov 4 19:00:44 2025 GMT
Not After : Nov 5 19:00:44 2025 GMT
Subject: CN=f3cf374533cdda68a620f9c8b848cf10abb00558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:f0:de:da:92:44:9e:3e:8d:c0:15:b2:15:
7c:bb:a1:1d:a9:c4:85:67:cb:8c:13:b0:14:6a:41:
ea:b6:33:d3:3f:ae:5e:c4:77:eb:ec:50:95:ca:e5:
ce:be:df:09:8b:7a:27:9a:80:76:e8:d2:74:b4:f1:
2b:6d:31:2b:64:e7:21:9a:7c:d5:27:23:7a:a2:d2:
07:fb:27:ef:8c:08:81:d9:bc:14:1c:e3:48:f4:3f:
ac:64:15:7f:47:38:25:0b:4a:ce:ad:25:40:e9:98:
28:3b:93:3e:09:25:bf:08:f2:aa:16:29:72:f1:12:
9c:0c:15:ed:e9:a7:d7:c8:e3:6a:b4:28:25:98:d8:
de:8a:58:b4:a4:7e:49:be:ae:ea:97:d6:ee:64:27:
40:af:8e:30:25:e0:0e:b8:7c:a8:0a:3a:d8:c2:67:
aa:cf:c9:f1:74:ee:a2:ad:c5:20:73:e0:60:1e:c4:
a8:23:24:14:ab:44:b7:6a:9b:48:ed:e8:d8:14:24:
ef:73:6d:86:a0:2a:5e:1c:b6:a3:bd:90:e7:28:5e:
3e:24:63:ce:df:26:56:60:87:e4:a4:91:15:40:b5:
38:49:4e:2f:1b:ac:05:d6:ed:e1:db:a3:88:06:53:
ca:91:f2:f2:78:53:f0:49:63:d9:27:22:06:15:2c:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CF:37:45:33:CD:DA:68:A6:20:F9:C8:B8:48:CF:10:AB:B0:05:58
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a2:3e:09:62:64:fb:29:da:5f:04:f0:d3:5b:f4:94:da:59:
af:2d:ff:ea:1c:65:d4:de:bd:1e:47:d3:79:a4:7f:b7:d7:3d:
97:fa:7c:82:27:d9:c7:14:d2:b9:c1:c8:27:db:8c:0b:5c:e6:
d9:d7:4f:90:6d:07:4c:3f:fb:4c:d7:5e:ce:f6:a7:68:5e:40:
72:dd:b7:58:15:6b:d1:e9:6e:78:d3:0c:10:cc:32:ca:fe:d8:
b2:e8:8c:27:96:67:df:57:c5:a8:38:66:ab:b4:43:13:d5:e7:
35:7a:4e:be:45:de:65:38:02:d3:96:3b:db:d7:51:90:71:c0:
1b:eb:1e:b8:8a:26:01:b5:99:77:50:8b:f0:b2:b0:b3:a8:ff:
fb:e4:6d:6d:02:25:bd:70:e7:5a:5e:ab:81:11:db:66:41:3b:
c4:ae:88:f9:99:7d:3f:62:5e:f3:0c:16:93:e1:87:d9:fd:6a:
6d:b4:a6:39:c5:8d:4d:99:84:4a:89:b4:07:0a:ab:62:87:f9:
64:4b:9d:da:ae:cd:8a:2a:cb:1c:2a:2f:b0:7a:dc:5f:24:e4:
8a:5b:a8:ce:4c:f4:57:b9:d4:3d:1b:d2:54:6b:fe:40:22:29:
8c:aa:37:a2:d6:2e:fc:cc:df:99:33:2f:a6:79:cb:f4:19:9d:
74:77:a9:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:19:24 2025 by rpki-client