Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
File: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft (raw, json)
Hash identifier: EhMIiWU1El2J6CTWiRgo3fhRngJHZ7D2XQsersyWbfg=
Subject key identifier: 7C:7D:9D:5B:88:D0:18:DC:84:7A:6B:DE:D7:65:1D:23:72:81:4F:1B
Authority key identifier: FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
Certificate issuer: /CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Certificate serial: 019A4EF479EC1091F2937E82E33F4320BA23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
Manifest number: 0EAC
Signing time: Tue 04 Nov 2025 13:00:36 +0000
Manifest this update: Tue 04 Nov 2025 13:00:36 +0000
Manifest next update: Wed 05 Nov 2025 13:00:36 +0000
Files and hashes: 1: 1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl (hash: 45Ro+qCigLvXJAXJyZTlWZ/nx5K+BTrju8SBcjBEU/s=)
2: V3GGR6tZOX8NXj-Nj8u0fPOASnM.roa (hash: fnJsN5ItuitKZWqq5Moq534O7yJjjzxAogwkbaeTNUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:79:ec:10:91:f2:93:7e:82:e3:3f:43:20:ba:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae01464a695b0f6f52f511bcc1240fa284d3dcf
Validity
Not Before: Nov 4 13:00:36 2025 GMT
Not After : Nov 5 13:00:36 2025 GMT
Subject: CN=7c7d9d5b88d018dc847a6bded7651d2372814f1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:51:3e:74:d0:a7:25:3f:15:e2:ab:0f:91:44:
28:67:40:1f:0f:d8:4f:48:fc:1e:eb:5f:de:cc:e4:
8c:c3:2b:b0:07:0d:db:25:52:af:90:3d:8e:da:a2:
88:47:5f:35:b1:32:23:b4:21:c7:23:09:ee:87:ce:
31:a2:87:13:70:f0:e9:01:15:42:d3:84:20:5f:0d:
54:03:b8:51:3f:f9:32:6a:6f:81:9c:94:c2:93:e1:
db:8a:06:eb:0e:19:20:0a:07:7e:34:a7:13:17:07:
02:a1:bc:84:fb:36:6a:4b:3a:7a:97:c4:01:05:dd:
59:08:31:17:fe:56:e4:96:6f:f9:41:e2:94:0a:78:
43:0c:62:ad:35:ee:3d:d0:79:83:89:9d:1a:2b:31:
16:81:1a:99:3d:33:be:11:db:5d:52:b5:31:ad:f4:
28:fb:68:9a:1f:24:15:10:ff:3a:70:2d:7b:c9:55:
b6:fc:0e:46:93:8d:26:c0:f3:8f:3e:21:ca:05:6e:
0b:22:27:e7:8a:e3:4b:44:6b:64:26:e7:c8:42:aa:
44:a3:5f:25:16:e8:e0:d8:28:63:ad:ad:1c:c3:e8:
e0:ca:25:f6:74:85:cf:56:c9:c8:28:14:57:ff:f5:
d0:d6:f1:f1:89:6b:24:00:9b:87:e9:be:5a:46:93:
1f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7D:9D:5B:88:D0:18:DC:84:7A:6B:DE:D7:65:1D:23:72:81:4F:1B
X509v3 Authority Key Identifier:
keyid:FA:E0:14:64:A6:95:B0:F6:F5:2F:51:1B:CC:12:40:FA:28:4D:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1c6704-510a-4800-a890-32352f96a621/1/1-uAUZKaVsPb1L1EbzBJA-ihNPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d9:d0:00:06:33:5f:84:6f:ca:86:f2:91:26:6d:48:ce:76:
75:00:23:08:35:63:b2:8b:d7:47:5b:5d:46:3a:85:d7:c1:e5:
dc:b2:48:ce:3d:a0:cb:a9:70:cf:1a:79:cb:9e:35:b7:c7:e6:
98:3d:88:1d:c7:05:96:8d:3b:12:06:1e:c5:22:86:32:b1:08:
9a:ea:25:24:ee:a9:47:74:ea:1a:0c:92:c6:4b:d6:b9:92:2c:
36:ab:94:e4:77:6a:4f:b0:72:cd:c7:d5:7b:6a:4d:03:91:36:
be:ef:af:99:36:b7:0e:e2:28:26:df:80:21:57:e0:91:c8:6c:
4c:43:34:af:c5:d3:c8:d6:70:5b:37:c5:5c:10:79:5a:a6:68:
64:bd:f8:44:fb:c9:66:7a:76:48:60:b9:f4:2e:65:c2:03:af:
ef:43:55:b0:4f:4a:06:f2:8c:95:98:2e:60:06:be:3a:24:99:
7f:5e:c2:4e:72:b7:92:c1:c0:0c:80:5c:d6:06:ac:af:cb:e2:
62:6e:bd:41:c9:8a:71:97:51:62:b2:70:4c:62:65:e8:40:f4:
a3:08:b0:76:99:c3:8b:36:4a:d1:a2:86:f9:8c:c8:b3:d0:63:
e9:d0:1f:38:79:c7:e7:5e:a8:81:61:73:05:a4:ed:21:96:2e:
0e:6f:f3:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:45 2025 by rpki-client