Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: GoYHBixAP7S8hbgpeptzb2cDkHhERkJ2LdlWTLQvDs4=
Subject key identifier: 9E:BB:90:FB:DF:EA:3E:98:F5:12:C3:42:E3:A0:C8:4A:48:A4:8A:41
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019A4C6106588868DC3C4EA879ACF959A0B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 1233
Signing time: Tue 04 Nov 2025 01:00:18 +0000
Manifest this update: Tue 04 Nov 2025 01:00:18 +0000
Manifest next update: Wed 05 Nov 2025 01:00:18 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: m2CUBFWaJiw0AMVRMcJthZUPab7hKKxaDnBrUl5ZUF0=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:06:58:88:68:dc:3c:4e:a8:79:ac:f9:59:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Nov 4 01:00:18 2025 GMT
Not After : Nov 5 01:00:18 2025 GMT
Subject: CN=9ebb90fbdfea3e98f512c342e3a0c84a48a48a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:19:d0:83:64:5d:d5:94:31:0b:21:97:30:4d:
7c:8a:75:f2:81:2d:71:4b:a2:d3:4d:89:f4:1c:92:
b4:bf:9e:39:7e:1a:e5:2d:0f:5d:3c:87:fc:46:30:
e1:01:49:f1:d0:af:42:be:67:f9:d3:ad:fb:31:08:
fd:e0:68:95:92:a2:dc:60:a9:dd:26:ec:ba:b9:2c:
7f:0e:4e:50:6b:7b:35:97:20:8b:fd:a9:a6:fc:d8:
41:d4:e0:b6:29:aa:8f:2b:99:06:78:6d:18:55:8e:
58:0f:a3:74:86:7a:25:1e:01:07:e0:5d:43:52:16:
92:fe:19:77:87:4a:83:f2:b2:7d:82:58:47:92:aa:
ca:cf:83:87:74:a3:ca:dc:cc:f2:2c:c1:8b:73:94:
2e:96:e8:ff:3f:8e:5e:0c:47:30:fe:75:84:06:08:
07:fb:a8:8f:3c:8d:03:b5:23:09:97:ca:6e:5b:b5:
4c:04:e8:fa:c6:7e:7f:32:35:61:ae:d9:38:ad:2d:
e2:6f:a0:44:97:36:a9:4e:80:2a:2b:ef:e0:ce:af:
8f:aa:e5:ab:f1:33:88:7b:12:12:e7:c0:a0:f0:3b:
d0:12:bf:d2:1e:a8:9a:98:7f:3b:d3:a5:e7:6a:d2:
05:9a:69:82:fa:04:15:ca:9f:d9:39:0e:3c:b1:ea:
62:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:90:FB:DF:EA:3E:98:F5:12:C3:42:E3:A0:C8:4A:48:A4:8A:41
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:6a:f5:f2:17:db:d0:08:b8:19:f3:ab:a9:36:4d:43:0a:bf:
ac:e8:62:36:02:f5:47:42:eb:e1:38:f9:d5:aa:5d:bb:b5:56:
71:ec:2b:08:4b:4d:61:f7:4d:fc:80:33:8f:31:69:5f:bd:a4:
09:a9:e0:a3:6a:63:e8:72:04:8c:82:91:a3:dd:2e:81:de:fc:
a8:7b:20:1b:b3:a1:ef:84:7f:bb:0c:e0:79:b6:69:dc:05:08:
55:76:8e:62:de:ea:b2:a5:3c:b6:64:82:5a:9c:90:69:31:93:
b5:a3:1c:75:12:b0:79:12:92:25:26:16:6f:7c:f1:9a:22:f0:
4c:59:99:d2:65:b3:ca:17:fa:ae:b5:28:12:38:6a:66:05:a3:
46:45:33:20:bb:17:50:a7:c1:c3:a8:8b:da:92:46:83:60:2f:
79:0c:39:86:51:13:4b:c1:50:a3:c7:fc:d1:9b:5c:36:67:db:
79:f2:b6:75:a9:89:26:8a:53:03:70:43:93:fa:f0:61:50:ed:
50:0a:8e:fd:8f:59:07:0d:72:7c:29:ba:ec:58:44:38:ba:a9:
2b:73:30:a6:d4:f1:de:36:96:3e:38:56:8f:a7:f4:f3:f2:23:
df:45:63:a6:79:f0:10:ba:b3:30:76:a9:48:d8:c5:bf:45:1f:
bb:9a:74:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:19 2025 by rpki-client