Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
File: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft (raw, json)
Hash identifier: eKeyBs0UxIfP/UhEPrdMo/UhRxLr1pElwFkTnSO9Dmk=
Subject key identifier: 32:22:F8:30:D9:40:5E:E3:DD:83:C7:0F:9C:87:81:42:D7:E8:A2:60
Authority key identifier: FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
Certificate issuer: /CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Certificate serial: 019A4E191551874B09992D7FBCE4E3AA4D8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
Manifest number: 0502
Signing time: Tue 04 Nov 2025 09:00:57 +0000
Manifest this update: Tue 04 Nov 2025 09:00:57 +0000
Manifest next update: Wed 05 Nov 2025 09:00:57 +0000
Files and hashes: 1: 1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl (hash: 8RT8Un5+x4AncN5lIACyZOy6Ea4GOwd+fMXbWKZGCsI=)
2: RfQdtLKXYLdrItaAhtareV1d0X8.roa (hash: 2v2M5d2SJj08W++N719Wz/Nxup00xLX8rohfuP7PYPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:15:51:87:4b:09:99:2d:7f:bc:e4:e3:aa:4d:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb12f05fcd59fd1686f929c67bedcef59e550df2
Validity
Not Before: Nov 4 09:00:57 2025 GMT
Not After : Nov 5 09:00:57 2025 GMT
Subject: CN=3222f830d9405ee3dd83c70f9c878142d7e8a260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:99:09:56:af:f4:7c:bb:79:3f:32:70:95:
f2:53:92:e0:dd:33:30:3b:9c:2f:f9:65:0e:82:21:
58:56:5c:db:6f:02:99:0e:07:f7:40:79:7a:ed:01:
1c:8c:e6:55:e4:bf:c2:ba:71:8d:9b:e8:17:fa:31:
74:87:59:ac:ed:03:03:77:81:0a:bd:36:94:62:84:
7b:67:d9:69:93:2d:2d:36:7a:6a:0e:4f:bf:5a:ee:
31:e1:16:57:bc:30:e9:8f:4c:3c:2b:0f:9a:3d:18:
ff:9b:db:e0:87:ba:cc:65:dc:51:cc:83:93:13:38:
0d:0e:22:ac:0e:fd:17:3f:69:e0:da:40:c2:e2:20:
53:70:e6:d2:69:eb:7e:e7:a4:72:f5:c3:e6:24:8f:
dd:26:51:f3:c7:4d:50:21:8d:9a:4c:35:f4:9a:d9:
69:3b:ac:9e:1e:81:ac:59:03:8b:3e:06:e9:b4:71:
aa:f5:0d:ed:ee:db:7d:9c:79:41:29:ff:1b:4b:25:
cf:fc:6f:1f:19:1f:d5:89:13:9d:13:d0:7b:87:c9:
e0:34:86:3f:ae:16:80:a7:59:58:f4:06:3a:cb:03:
24:d8:9e:03:a4:c7:7f:66:96:a0:f1:eb:6b:35:2c:
8a:31:86:be:1c:7d:1e:af:89:07:60:7a:de:92:4c:
42:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:22:F8:30:D9:40:5E:E3:DD:83:C7:0F:9C:87:81:42:D7:E8:A2:60
X509v3 Authority Key Identifier:
keyid:FB:12:F0:5F:CD:59:FD:16:86:F9:29:C6:7B:ED:CE:F5:9E:55:0D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/a037d1-ea7c-4c85-8128-d4d0aab701bf/1/1-xLwX81Z_RaG-SnGe-3O9Z5VDfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:b3:b2:80:6f:db:c0:c2:00:28:16:0d:2e:01:d4:69:aa:4b:
71:15:a9:45:05:24:22:a6:5c:4f:30:f4:51:91:6e:aa:1f:8a:
88:72:b5:2f:24:b2:f0:12:06:bf:f7:7a:3b:b3:29:76:e4:a4:
7d:9e:c0:65:e5:6d:75:1d:67:2f:19:fe:40:bc:14:b7:92:1e:
97:51:46:a8:83:8b:0e:a9:bc:23:ed:77:34:c4:2e:b0:41:4e:
0d:fa:c9:82:4c:8b:32:79:4e:9b:7e:15:3d:47:4b:c7:4b:0d:
93:86:15:c1:e5:41:fe:4e:f2:42:55:51:fd:57:92:f0:94:ee:
88:db:ad:57:eb:0b:76:39:17:97:dd:65:fd:e9:44:09:80:3c:
7f:d7:6b:e8:b4:d3:16:da:5f:71:e7:15:a6:9b:64:a9:26:1c:
13:27:77:ab:59:d7:d1:87:fc:9a:f6:e5:39:47:1d:40:29:a0:
6f:1b:4b:c9:92:d4:2e:d5:6c:5a:66:13:ad:b3:81:4f:1f:f0:
65:c4:24:e4:e2:97:c8:51:de:83:e4:c4:86:31:ef:b1:54:10:
15:61:bd:92:5b:48:3c:c3:79:5a:22:c8:d8:fd:7c:71:58:71:
80:fb:ec:14:82:6f:68:a5:6f:86:b6:00:9d:37:b1:a7:3b:c0:
5c:17:02:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:49 2025 by rpki-client