Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: DubPB9/D4g/zr8JJ8d0MPbTIIajCN6xmTinX7zpVtSQ=
Subject key identifier: 27:5F:C8:82:5F:6E:E7:6D:4A:23:FF:11:4D:7E:E9:4B:0F:78:B5:8C
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019A4F622BD122B049C2329D321E9AD4260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 030D
Signing time: Tue 04 Nov 2025 15:00:25 +0000
Manifest this update: Tue 04 Nov 2025 15:00:25 +0000
Manifest next update: Wed 05 Nov 2025 15:00:25 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: SsIZJQfo2zSQBzIHFBToAoMDrfNTN0zPQ/spaYHFid0=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:2b:d1:22:b0:49:c2:32:9d:32:1e:9a:d4:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Nov 4 15:00:25 2025 GMT
Not After : Nov 5 15:00:25 2025 GMT
Subject: CN=275fc8825f6ee76d4a23ff114d7ee94b0f78b58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1c:8d:78:e5:7c:fe:30:e1:c5:1e:96:d0:f2:
1d:a9:4e:09:69:f4:a0:4f:7a:2d:b8:ee:47:2d:5a:
21:0b:b9:37:e3:14:b9:89:6e:9e:fe:ac:ec:ac:62:
70:6d:e9:8f:0e:14:5d:da:34:3a:85:8e:92:6a:e7:
0b:5e:e1:bb:46:62:4e:4f:69:d5:5c:fe:ad:75:03:
8e:2b:16:f2:5e:2c:19:f1:e1:22:01:a6:31:25:9a:
f9:90:35:af:84:97:ab:f8:d9:cb:bb:ef:f9:28:c1:
04:af:42:ec:1e:ed:22:02:f2:8a:39:48:57:a0:4b:
fe:73:dc:73:e0:23:41:22:18:19:85:c2:9f:44:29:
07:57:fe:2c:1c:41:fd:51:d8:b4:54:13:20:4a:3f:
68:46:bb:c9:8c:fe:ce:6b:e3:e2:bc:a9:21:72:c2:
57:e1:7f:76:d3:fc:07:9b:4a:c8:30:ff:d5:60:e2:
48:d3:e7:1a:28:3b:97:79:d1:65:51:a8:f1:44:41:
5b:8e:c5:6d:08:29:4f:65:31:21:9a:c9:40:7a:9e:
6f:57:34:44:88:1e:02:85:9f:1f:42:ba:49:2d:d6:
dd:cc:02:4a:49:3f:6c:0f:63:45:6d:61:51:cf:11:
31:f5:bb:c5:75:14:aa:4e:df:54:01:24:2d:d7:c0:
0e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:C8:82:5F:6E:E7:6D:4A:23:FF:11:4D:7E:E9:4B:0F:78:B5:8C
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:3f:41:38:89:6d:52:84:4c:a6:d4:2a:8e:10:8d:1a:ef:08:
8b:5f:0c:57:f2:85:96:a2:88:31:0b:a7:6c:18:50:d0:40:18:
6b:39:86:61:42:32:8f:b2:2e:0d:01:cb:9a:60:fd:c0:f7:7f:
d5:38:c6:6e:1c:c7:4c:14:b1:10:db:59:81:db:3e:f7:58:77:
28:b7:9d:42:87:ce:5b:8c:82:9c:65:0b:3a:fb:ce:53:ab:6c:
7e:a9:a3:ce:f2:b9:a7:7a:a8:31:a7:97:24:41:b1:43:d7:a8:
95:94:ee:2d:c9:8f:bf:0f:b9:0d:82:30:25:15:9a:75:1b:8a:
26:d0:2b:49:74:90:e2:2b:85:3a:6c:27:07:25:49:25:23:1b:
1d:e1:6d:bb:a5:a0:08:36:f3:b1:c0:ef:57:d3:53:b5:d9:41:
8e:a6:ca:02:0a:c5:bf:97:b9:cb:75:e1:ee:f2:6c:88:11:d7:
59:c4:e4:5f:22:06:e1:dc:59:41:f4:b8:bc:53:d6:4c:9c:9b:
ba:57:5e:7a:b0:86:f7:f2:fc:23:30:14:3c:9a:87:91:3b:12:
29:89:b0:70:3b:d3:9e:86:12:ab:7a:cf:1a:9a:bf:74:88:7a:
01:b2:df:cd:be:4d:6b:ec:f3:78:6d:97:7b:7f:46:6a:ee:b9:
73:fd:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:11:20 2025 by rpki-client