Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
File: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft (raw, json)
Hash identifier: DVGR9poEXTEFeuCjBD4Ez4QypNOVYMkiV2F/dtKl32E=
Subject key identifier: 67:00:E1:4D:D8:21:F0:33:45:32:46:2B:42:3D:70:A8:9E:A6:F5:6C
Authority key identifier: FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
Certificate issuer: /CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Certificate serial: 019A4D73AC82E9DBA8FA85A7B0006ECF1B43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
Manifest number: 0A1C
Signing time: Tue 04 Nov 2025 06:00:17 +0000
Manifest this update: Tue 04 Nov 2025 06:00:17 +0000
Manifest next update: Wed 05 Nov 2025 06:00:17 +0000
Files and hashes: 1: 1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl (hash: gUlj0pDBemKS2XTFEpkjgqU5bEneOGtQ9gjweNlfZSw=)
2: 8lqYFrGrNOkRZZeWUQj06Qu37Rs.roa (hash: ffxrtsFLmlsEwmAGCn/uwuGnyvYGEI5eYJBSJExNWs0=)
3: goJ06I4X-EH8W30V7EVn5y0FKWk.roa (hash: 3tlp0UONPTSFHKc2l1cIXSXdpnGW/o8EYSwZkHrH5Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ac:82:e9:db:a8:fa:85:a7:b0:00:6e:cf:1b:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa758fbd62c6eabaa3c9875305f207805e37cdcb
Validity
Not Before: Nov 4 06:00:17 2025 GMT
Not After : Nov 5 06:00:17 2025 GMT
Subject: CN=6700e14dd821f0334532462b423d70a89ea6f56c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:fa:e4:5f:36:66:e4:00:71:b0:a1:85:72:
11:de:b2:52:34:46:7a:15:e8:5d:f7:f6:91:97:be:
aa:c9:0d:2c:f4:c5:60:35:70:4a:7b:9f:f6:9c:31:
a2:56:19:f8:0d:c7:01:ca:26:95:89:64:2b:23:1b:
a8:12:8f:58:de:89:cc:c8:47:77:62:5f:23:0e:d3:
79:0d:a9:6e:b6:98:59:1a:2d:05:87:f8:a4:23:34:
da:e2:a3:61:a3:a3:60:4a:8c:81:bc:a8:d3:68:92:
96:79:fb:a8:bb:e6:19:61:36:f2:d4:ba:c1:a5:86:
66:74:b0:10:a7:9d:c6:43:fa:d5:fd:f3:7c:f7:92:
cc:b2:f7:12:20:23:6e:49:e3:a1:2b:d1:71:ca:68:
e2:97:49:a5:8e:07:88:5f:88:ff:bb:eb:82:e4:58:
03:63:7a:2d:ec:c8:6f:bb:86:08:f0:f3:30:b7:12:
e1:42:bf:fe:7f:4b:9a:3e:46:d0:c6:0e:4a:ed:18:
bf:28:d2:d1:b0:e2:65:69:53:5c:38:ce:b0:73:14:
1d:e2:ad:51:8f:ef:2e:de:d5:0d:3c:6c:05:f3:e8:
b9:50:71:91:5d:0b:58:08:1e:29:c7:0a:cf:eb:e8:
37:45:e0:c7:df:17:db:dd:ff:ed:5c:9d:86:2d:48:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:00:E1:4D:D8:21:F0:33:45:32:46:2B:42:3D:70:A8:9E:A6:F5:6C
X509v3 Authority Key Identifier:
keyid:FA:75:8F:BD:62:C6:EA:BA:A3:C9:87:53:05:F2:07:80:5E:37:CD:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nWPvWLG6rqjyYdTBfIHgF43zcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/46a4cf-be6f-4077-8d4c-bca4cb51a739/1/1-nWPvWLG6rqjyYdTBfIHgF43zcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:cd:1d:d6:41:de:83:69:81:82:8d:3d:06:f8:e5:a8:30:86:
f9:95:25:1f:35:8f:19:32:f0:f9:c5:3c:b6:c1:ca:bf:3d:f0:
18:61:e6:b1:4c:da:22:7b:c7:0d:78:1c:cb:de:41:9a:52:74:
13:93:00:d6:2a:91:ee:83:be:26:e6:bd:e1:cf:6c:3e:3d:cc:
4d:d2:c1:5b:06:b3:9a:8a:9d:87:47:9f:30:c3:ef:b0:8e:7b:
5a:68:d8:86:a6:62:14:5a:be:69:18:b3:88:78:8a:e1:c1:89:
96:04:58:b1:a5:24:39:84:6b:12:30:ee:43:df:9c:72:01:30:
e1:e7:00:cb:27:03:80:aa:1d:e7:9b:87:8a:4c:32:5f:a8:f2:
4d:6c:0a:03:b4:92:3a:e5:e0:a6:ee:bb:0a:f3:fa:95:e2:f6:
c6:18:64:91:04:d7:00:37:ce:4a:bb:de:51:18:7f:06:5f:a1:
d3:b5:df:48:39:38:5d:4a:8f:2f:46:4d:74:5d:3b:e2:62:6f:
be:c6:b8:47:e4:74:a7:48:5d:80:c8:a4:4d:46:ba:33:a3:27:
f6:9b:14:94:7d:c4:ea:f3:cf:70:c4:8a:c8:9e:bd:e1:fe:4d:
b0:83:64:91:a5:1a:5e:9d:b1:4a:07:04:a4:69:dd:ad:3b:e7:
20:09:1d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:06 2025 by rpki-client