Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: gNNVHsCudZJp1KUvx4lN0D0N4zYfWhAU/gqOV7QH33g=
Subject key identifier: D1:A6:E8:A5:D4:B6:60:41:75:D1:E4:11:0C:5D:8D:C1:76:A8:DD:8F
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019A52D1B72D1534ED682B1BBE84084DF838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 137A
Signing time: Wed 05 Nov 2025 07:01:06 +0000
Manifest this update: Wed 05 Nov 2025 07:01:06 +0000
Manifest next update: Thu 06 Nov 2025 07:01:06 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: SauwKfXjb2jLn8RMfYOnJHPvZeqkAZqxkOXpqiQ95GY=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:b7:2d:15:34:ed:68:2b:1b:be:84:08:4d:f8:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Nov 5 07:01:06 2025 GMT
Not After : Nov 6 07:01:06 2025 GMT
Subject: CN=d1a6e8a5d4b6604175d1e4110c5d8dc176a8dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:d8:03:43:77:3f:01:c8:28:3b:fc:c6:32:a6:
9f:89:82:ac:f7:7f:86:3e:e5:9b:7f:68:84:6b:69:
c5:3d:60:82:72:73:d9:cf:97:dd:75:ca:ad:85:67:
08:bc:98:16:f9:26:a3:2b:ac:53:50:bb:30:3a:d8:
0e:59:55:eb:40:1f:ad:72:c6:6d:0b:ee:cb:b4:5a:
38:23:9e:3c:86:9c:ed:44:fc:ba:36:20:ae:59:41:
9a:64:e1:08:ba:1f:e4:98:b0:68:a6:65:91:89:03:
ce:0d:71:3f:06:56:26:a0:cf:a1:68:fb:d0:4f:bd:
04:10:cd:76:de:5b:09:e0:55:cd:cb:d7:fd:e5:16:
6c:41:bd:8e:28:29:f6:b9:2b:b8:04:b6:42:1b:f8:
7a:bd:6a:9b:10:6e:37:b9:58:a5:cf:38:97:70:08:
82:ab:d7:b6:b5:05:3e:bd:8d:9d:73:bc:9e:62:89:
ff:91:e1:51:fa:6f:cf:52:73:5d:96:90:31:f1:46:
b7:2f:91:53:58:ff:8b:d0:da:31:fb:69:d2:c3:18:
2a:bf:62:8f:6c:1a:d9:68:19:2e:74:e2:c8:18:97:
74:c0:35:99:c3:73:3f:a1:f4:ed:14:ac:b5:8c:f4:
c5:90:42:a0:20:a2:42:34:37:47:4d:60:f7:ca:0e:
aa:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:E8:A5:D4:B6:60:41:75:D1:E4:11:0C:5D:8D:C1:76:A8:DD:8F
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:e0:f0:7f:64:93:04:89:4d:9a:d3:d2:63:b6:27:5d:9a:f9:
e6:88:99:df:d9:57:41:79:f7:d6:40:16:d0:bf:1f:fa:ef:a2:
0b:79:19:54:40:6a:59:ef:fb:b6:a0:05:21:9a:4a:5e:c8:57:
78:1f:da:be:4f:f8:b3:82:20:3f:d6:86:b4:26:d9:4e:e6:e7:
7e:5c:fe:9f:ab:0f:b4:6d:0b:a1:d1:44:8f:fd:35:1f:a6:1a:
ea:db:77:dd:55:e9:63:aa:d8:62:28:1d:b4:45:07:06:0d:12:
0a:0f:a7:6c:0a:ea:9c:05:8d:66:ef:3a:41:9b:b5:2b:41:e4:
ec:f1:d0:e6:4e:cb:6f:08:04:18:25:de:ec:28:7d:48:81:93:
bd:4c:82:b4:56:18:2b:11:e2:01:fd:5d:7b:4f:b0:97:2a:34:
1f:bd:28:05:77:6a:d7:44:63:d0:45:c7:9f:9a:72:bc:75:87:
54:d8:7e:20:ef:81:a8:c4:78:ec:ac:7d:68:3a:42:7e:8b:88:
24:32:7c:71:3f:69:4b:df:96:46:74:66:ca:d2:70:96:35:25:
cd:61:b7:b9:e3:10:f0:c3:50:1c:68:1e:3e:92:e8:0e:38:73:
fb:8b:ab:52:a4:be:45:57:a1:04:bc:15:83:e3:a8:be:73:b4:
32:13:59:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:48:47 2025 by rpki-client