Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
File: 1-x_03y78aezBkupa79ezuX9YCQE.mft (raw, json)
Hash identifier: taTrN/HY0sZCZomHPzBEawH0A67N6U+2whbkgEKpYiY=
Subject key identifier: 9C:61:3A:6A:00:9D:33:84:4B:B9:BC:D0:42:7E:C2:41:B2:40:F5:D4
Authority key identifier: FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
Certificate issuer: /CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Certificate serial: 019A51F5AFD989878500E7BDE20C4D2B6F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
Manifest number: 04AF
Signing time: Wed 05 Nov 2025 03:00:47 +0000
Manifest this update: Wed 05 Nov 2025 03:00:47 +0000
Manifest next update: Thu 06 Nov 2025 03:00:47 +0000
Files and hashes: 1: 1-x_03y78aezBkupa79ezuX9YCQE.crl (hash: aNub0tAXY7ULL8MEwrE4H/QyaCC4/cn+sthw/JkQ1QM=)
2: 2MK0dwhy4wSxUaV2V3N7GQurcg8.roa (hash: geQflwSdFidvg3XM61p+uMbY/AlTUqtgFMbNorF/vjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:af:d9:89:87:85:00:e7:bd:e2:0c:4d:2b:6f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1ff4df2efc69ecc192ea5aefd7b3b97f580901
Validity
Not Before: Nov 5 03:00:47 2025 GMT
Not After : Nov 6 03:00:47 2025 GMT
Subject: CN=9c613a6a009d33844bb9bcd0427ec241b240f5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:cc:7d:f4:83:f4:79:cc:45:18:d9:49:90:
a3:2a:11:88:30:55:3c:48:10:f0:07:02:6c:08:e4:
c0:ef:34:dc:f0:ef:c8:a3:02:e1:7e:46:5e:e8:b1:
4d:d7:fe:28:62:f1:1f:eb:33:a5:38:12:ef:ea:29:
6e:bd:ba:13:1a:a8:81:6d:a4:47:bf:ea:b2:33:87:
a8:fd:07:89:5d:a6:53:35:92:8e:a9:c6:4e:8c:93:
d9:33:4e:71:23:41:14:6f:cf:03:d2:78:8a:b0:bd:
72:4d:24:c5:56:90:8c:11:34:4c:31:db:8a:92:9c:
13:ad:30:25:38:b7:35:a4:c5:f9:0f:a0:8b:83:5d:
7c:54:20:94:0e:3a:2d:4b:b6:b8:46:62:67:22:86:
83:2a:d5:93:33:ee:8f:15:30:dc:10:2f:f6:12:76:
4b:4d:5c:95:a2:71:3e:1c:3d:85:cd:3c:4e:84:f9:
0e:f5:97:87:fd:17:28:b9:97:3e:5d:ee:35:da:8d:
83:d5:2e:9f:f0:88:18:25:e0:48:b6:5f:77:8d:7a:
8a:32:92:c7:9b:0f:16:9a:ca:b3:23:37:61:45:94:
76:ba:23:14:14:4f:40:9e:b7:e2:f2:13:f9:ec:57:
f0:14:cc:70:6a:14:96:08:9a:5f:37:69:28:62:85:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:61:3A:6A:00:9D:33:84:4B:B9:BC:D0:42:7E:C2:41:B2:40:F5:D4
X509v3 Authority Key Identifier:
keyid:FB:1F:F4:DF:2E:FC:69:EC:C1:92:EA:5A:EF:D7:B3:B9:7F:58:09:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_03y78aezBkupa79ezuX9YCQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/679e15-e1a3-42b5-9b7b-3f1c023ada05/1/1-x_03y78aezBkupa79ezuX9YCQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a4:0c:77:46:57:23:fe:a6:24:83:74:4a:b5:a7:41:c2:2b:
2a:44:c0:c4:d2:0b:51:7b:41:5a:7f:79:98:1a:9e:be:a9:fc:
4e:14:7b:4b:f0:2c:2a:b6:a1:f0:5a:89:42:a4:32:2c:2f:cd:
3c:bd:cd:91:6d:6a:2b:7f:bb:ac:37:d4:54:a2:55:ef:d5:b5:
3e:40:a5:11:5a:3b:22:90:73:f6:cb:20:92:3d:c5:29:d8:ad:
91:4b:65:77:af:51:da:9e:4f:41:e9:95:a2:98:4a:67:de:e2:
f8:45:5a:f7:28:2a:b2:1c:2a:27:3e:c5:d6:1f:f1:71:77:27:
f2:ed:fc:b7:66:08:b6:68:4d:de:32:54:fd:28:63:74:74:4d:
29:c3:39:c6:d2:42:5a:da:01:21:d4:a7:94:52:d9:df:98:2f:
92:e7:b2:e9:a9:8b:58:6d:7c:07:d4:52:a8:2d:8c:49:cf:1b:
57:18:19:9c:b0:37:2b:1f:9c:7f:b9:fd:ac:e9:7d:50:30:02:
5c:67:f9:7c:67:c9:70:25:bf:c3:13:05:37:91:fb:31:60:4e:
28:ab:af:ba:26:ae:a0:78:eb:4b:95:0b:89:81:d3:19:4a:3b:
56:48:08:7c:1f:27:d7:73:a3:bb:b1:39:1c:4a:1e:29:03:bd:
9e:74:88:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:51:27 2025 by rpki-client