Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
File: 1-6eRi79aqA8USTetGWXqA_Alwi4.mft (raw, json)
Hash identifier: SQrYBBQceTIIV2z9T1XJG3LJabJIxBGjsD3wf61jys4=
Subject key identifier: 4E:78:BF:02:58:DB:35:FA:A0:5B:6A:BD:9C:A4:BA:93:88:2B:2D:6B
Authority key identifier: FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
Certificate issuer: /CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Certificate serial: 019A55D285B952985DC397C9A51643742D0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
Manifest number: F3
Signing time: Wed 05 Nov 2025 21:00:51 +0000
Manifest this update: Wed 05 Nov 2025 21:00:51 +0000
Manifest next update: Thu 06 Nov 2025 21:00:51 +0000
Files and hashes: 1: 1-6eRi79aqA8USTetGWXqA_Alwi4.crl (hash: +POHsIXB+YpowwL0IEtJBfZ0RapXY5d2e/mIRMuP/Nk=)
2: qoiIuGZpsZyjR8YLAPW0kfgioQM.roa (hash: Bdnsy6A3scDmTAkeEHQfOrfRTQ0txD1RF6hmP7OF1Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:85:b9:52:98:5d:c3:97:c9:a5:16:43:74:2d:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba7918bbf5aa80f144937ad1965ea03f025c22e
Validity
Not Before: Nov 5 21:00:51 2025 GMT
Not After : Nov 6 21:00:51 2025 GMT
Subject: CN=4e78bf0258db35faa05b6abd9ca4ba93882b2d6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b1:e5:2f:67:f0:9d:f9:04:da:47:28:69:8d:
ea:12:2d:e0:3d:5a:4d:6f:74:90:14:7f:23:26:32:
88:3b:c7:81:30:99:82:03:65:82:fa:3f:e4:f2:47:
ae:71:7c:bb:2a:31:db:6d:e6:b1:87:eb:91:56:1f:
a8:f8:98:64:e9:ad:cb:6c:a5:33:ca:20:44:27:e3:
4f:73:17:be:df:d6:31:27:c1:4d:db:3e:09:ff:c1:
42:86:61:da:87:cc:af:ca:d5:96:77:a5:1d:40:e3:
5c:28:80:ae:57:45:d8:c8:69:ad:50:0d:45:3e:3e:
bb:cb:47:af:e5:dc:ff:90:56:0b:37:63:7b:d4:6f:
07:ed:26:51:de:d9:7e:02:6a:45:90:83:46:10:d6:
ca:ca:a2:7a:65:d6:6b:01:e6:d8:30:46:f4:57:90:
aa:49:72:8e:4b:2e:62:37:23:f1:39:1a:97:90:ca:
56:f1:e6:5b:29:bf:be:38:7a:42:53:5c:c7:82:82:
e9:d0:70:78:b2:f8:6d:95:6f:79:2f:53:be:40:70:
b4:67:36:c1:87:ef:0c:dc:57:70:85:80:16:60:3f:
ef:b2:f8:aa:5e:e4:b8:aa:d3:63:fb:ae:37:c4:1b:
64:5d:e9:78:60:b2:d0:7f:0f:cf:ad:d6:04:e2:ef:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:BF:02:58:DB:35:FA:A0:5B:6A:BD:9C:A4:BA:93:88:2B:2D:6B
X509v3 Authority Key Identifier:
keyid:FB:A7:91:8B:BF:5A:A8:0F:14:49:37:AD:19:65:EA:03:F0:25:C2:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6eRi79aqA8USTetGWXqA_Alwi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/822221-77ff-42f4-b052-a431d7ad68dd/1/1-6eRi79aqA8USTetGWXqA_Alwi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:62:a7:7b:c9:65:54:93:5a:44:0c:e8:53:44:d2:25:db:e8:
6a:1e:ca:a3:04:1f:79:95:b7:c9:79:73:88:d5:67:d5:f4:1b:
48:5b:e7:cd:2d:f4:8b:86:4c:8c:41:42:29:89:6d:1d:d4:cc:
23:20:44:1a:95:6f:4c:18:1a:fc:e0:5f:a1:5b:ab:05:40:73:
04:7f:8e:5a:45:87:10:01:a3:07:87:1a:78:ed:7d:aa:e7:56:
39:2e:3b:67:3c:e1:d8:ad:02:b7:e4:d1:ad:55:cb:1c:8e:7b:
ec:0d:95:d0:94:94:6f:d8:cc:1c:cb:eb:cc:78:d2:c8:57:19:
f0:a1:f4:38:e9:ab:f3:08:f8:ca:8d:a8:60:94:b6:f7:b0:07:
7d:a7:23:71:fc:2c:c4:c9:5b:ef:4b:23:31:c0:74:f7:eb:79:
93:85:cd:fd:3e:66:df:47:33:8c:9a:da:42:8c:b4:07:f6:bd:
d9:46:c9:83:e6:0e:1b:ba:b7:f5:f9:5f:29:fd:22:20:b4:77:
8c:e3:cf:56:a7:aa:9c:1a:d9:e0:5a:4e:6c:8c:65:3b:20:e8:
20:94:90:86:cc:be:4f:06:80:75:33:8c:7b:ae:4c:42:43:7d:
b8:9a:d2:fe:c6:3e:76:f5:27:62:2f:a3:38:30:1a:69:06:f9:
0c:ba:e3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 03:23:57 2025 by rpki-client