Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: NVyPd46hcNl0ZVJLG3q8VG/4DJbDQvDzls9mt9wA8y4=
Subject key identifier: 3C:6D:19:06:9E:A1:E7:E2:78:09:CB:CE:97:FD:EE:AE:4C:E2:46:18
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 019A4C613792E54F95DED35BDC1FBE95D2C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 14A3
Signing time: Tue 04 Nov 2025 01:00:30 +0000
Manifest this update: Tue 04 Nov 2025 01:00:30 +0000
Manifest next update: Wed 05 Nov 2025 01:00:30 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: teD0F583yXhGcLwdBItEplKWAyS1fGTUn1iuFiKmWNU=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:37:92:e5:4f:95:de:d3:5b:dc:1f:be:95:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Nov 4 01:00:30 2025 GMT
Not After : Nov 5 01:00:30 2025 GMT
Subject: CN=3c6d19069ea1e7e27809cbce97fdeeae4ce24618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:13:c9:0f:0a:6e:5f:f0:8e:89:cb:b2:46:89:
94:f6:f6:7e:3c:64:39:10:95:08:49:a9:e8:38:a7:
85:a6:e9:76:38:b3:75:34:6b:71:53:7b:bb:a9:41:
f7:c7:59:d1:9e:33:d0:5e:a2:62:72:5c:4a:a7:6d:
c4:b8:cc:30:74:52:a9:68:a8:e0:38:77:fa:4c:54:
58:a5:cc:1b:2b:8a:7d:ca:9b:49:d3:28:50:97:1a:
e2:13:3d:db:90:12:08:91:66:4e:b2:09:34:ac:3e:
b9:07:fe:a8:19:1c:5a:6b:31:fc:dd:e4:c2:fb:2a:
40:9a:2a:c0:c0:80:cf:84:95:e3:9e:a3:11:1a:29:
c9:cd:ed:65:c7:6b:2c:05:0c:4c:54:a3:3e:32:48:
f5:a4:23:ee:b7:e6:94:20:43:97:06:17:04:fe:0b:
00:54:23:f9:c9:34:71:01:84:2e:4f:77:d2:53:f2:
33:5d:12:36:ef:79:d5:0c:34:4c:8b:cd:08:7c:e9:
32:b9:26:f1:1e:4b:85:32:0b:4a:e4:2d:46:5f:3f:
64:48:e0:de:30:98:ed:80:fc:8a:25:24:0e:e9:73:
95:9a:8e:31:ee:df:39:7f:a0:5a:44:87:f1:fc:ed:
da:69:86:c8:8b:e9:95:ff:c7:82:66:f3:6e:7f:16:
e9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:19:06:9E:A1:E7:E2:78:09:CB:CE:97:FD:EE:AE:4C:E2:46:18
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:c5:c9:7e:43:9e:cc:d4:63:ad:5c:5d:cb:92:24:17:a1:32:
1e:fc:ee:51:b6:88:cb:ab:a8:6f:29:ac:15:80:bf:24:d8:71:
85:0c:69:3d:71:1a:c6:1e:b5:30:5d:d1:1d:a3:6d:da:db:3a:
aa:3c:bc:73:85:df:b9:ac:2b:8b:75:cd:68:e4:ad:79:df:25:
ac:ce:74:ec:f0:2c:1d:4c:f4:96:ea:a2:2e:d3:63:cf:5a:9d:
18:7e:14:c4:82:49:23:fc:2d:10:ce:5b:cf:67:c7:e5:14:45:
4f:b1:70:10:f3:c1:99:2e:3e:5f:2a:43:de:17:05:82:27:e3:
89:c6:13:cc:eb:ec:1d:7f:fc:83:3b:3c:7b:27:48:ba:b1:15:
d9:01:16:32:8b:1e:75:d1:a8:34:b9:4c:88:3c:d5:70:cd:da:
5d:f5:4b:97:7f:2b:a4:72:1b:45:7f:66:c8:29:57:53:53:f5:
ca:d2:1e:27:5a:9e:25:8c:db:59:5c:c7:aa:78:b1:b7:88:a7:
9e:b5:33:31:29:ed:c9:56:60:ea:47:10:f0:4e:b3:e7:89:cc:
b4:0f:60:cf:be:bb:17:4b:03:42:f9:d8:08:82:e8:f2:80:3f:
fb:7a:9e:df:69:43:13:4c:c0:4f:30:04:e5:1b:14:15:9a:ae:
9d:30:b1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:59 2025 by rpki-client