Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: iQQkR5CAqJQ3BZQmDzwYm02LW9ieUwSwsImGguMEIOk=
Subject key identifier: 57:B6:02:64:70:B9:17:FD:73:C0:F5:87:FB:88:4F:4D:3F:86:A2:F0
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 019A4F2B60627EEEC3B9E0DC436D26517D38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 1159
Signing time: Tue 04 Nov 2025 14:00:33 +0000
Manifest this update: Tue 04 Nov 2025 14:00:33 +0000
Manifest next update: Wed 05 Nov 2025 14:00:33 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: vnrbTepwwgpvElvvHqx0u3B2UYasLuuRh6ezvsvKwO4=)
2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:60:62:7e:ee:c3:b9:e0:dc:43:6d:26:51:7d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Nov 4 14:00:33 2025 GMT
Not After : Nov 5 14:00:33 2025 GMT
Subject: CN=57b6026470b917fd73c0f587fb884f4d3f86a2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:75:d2:ae:67:d4:12:86:29:55:5e:9c:30:
00:9f:85:5d:da:04:8c:19:ce:f0:ad:df:b9:bb:22:
e6:46:b6:a0:19:3c:59:c1:e1:ff:b8:01:34:28:75:
2b:09:6a:8f:94:fd:00:06:d3:1c:11:2f:6e:c1:39:
7a:42:6f:6b:b5:b7:aa:f3:3e:3e:e6:ec:72:0b:02:
2e:c3:3c:e9:57:7e:6e:56:20:94:23:16:41:66:3a:
ce:0d:07:24:c0:6b:b3:fb:c1:32:b5:f8:12:43:5f:
ea:8c:74:51:e9:10:eb:d7:2d:ee:75:87:34:d4:70:
bf:59:8d:86:51:01:fe:b1:dd:46:5d:db:45:1f:e2:
86:8f:2c:85:a7:f8:fa:cc:bb:b6:ce:57:5c:7e:c2:
c3:08:55:62:73:4a:af:8a:66:d8:cd:7b:0c:0f:0d:
06:e1:f1:f0:1e:b5:39:a1:24:dc:e2:5b:17:4d:94:
6e:5b:6c:32:4b:40:24:01:10:cb:7c:26:39:0d:72:
fc:ea:02:03:41:da:eb:f8:21:0b:b2:ff:6f:a8:bc:
21:d1:70:f9:54:28:16:fb:31:3c:40:a9:17:30:01:
7b:a8:e5:87:16:b7:97:0d:98:cb:84:13:ca:c6:ce:
76:92:68:87:d1:7f:f2:d5:13:39:a8:20:2d:62:b3:
ce:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B6:02:64:70:B9:17:FD:73:C0:F5:87:FB:88:4F:4D:3F:86:A2:F0
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:39:06:a9:3b:82:a6:f7:ef:37:5b:c8:f8:6d:74:07:5b:a5:
28:f6:3a:16:8a:77:ef:0e:12:51:69:3b:43:93:98:6b:80:7c:
6e:bf:3f:0a:f2:78:4b:5e:97:a4:be:36:4d:83:5c:ea:03:f7:
fa:7b:23:03:70:3b:e1:1e:a1:46:29:a2:11:49:79:34:f9:44:
5a:01:ed:3e:18:4c:08:e2:a9:da:b7:25:49:d8:b8:1d:fa:2f:
d2:07:f7:84:3e:4d:f5:51:2a:1c:9c:2d:c3:ba:38:12:a5:48:
31:7a:8f:31:22:ce:1e:9f:13:b1:d5:8f:73:06:5e:68:93:1b:
a4:21:f5:98:51:65:9a:a7:be:f5:6e:27:8b:c4:8c:08:cb:e2:
ab:7e:05:fc:f4:a0:88:e4:4e:a5:56:55:ed:2a:57:c8:ac:c9:
d3:74:40:c8:fe:04:04:f4:e0:71:08:4c:78:d9:67:41:c0:ad:
47:57:6a:8e:8b:e2:10:2d:60:ad:a2:ad:2c:31:3f:4f:e8:70:
7e:42:4e:da:45:6e:e0:33:23:5d:d1:cd:77:73:d5:45:96:1c:
94:1b:3e:13:01:e6:46:8b:9d:3a:6e:94:24:54:65:01:62:9b:
23:a4:8c:5c:4d:45:a9:d4:14:52:a0:73:7b:bd:1c:6a:8d:a0:
3f:1f:1c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:49 2025 by rpki-client