Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: VgkLhjwud8sPcJH28+5W5SO6lVGtm2p0N22XIf3fNUw=
Subject key identifier: 4A:EF:93:DB:B4:3F:E9:2D:C9:08:AB:87:43:D3:0D:7B:7F:76:3A:D1
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019A4EF5BB8A4E20D7165D1524E4BFBD96C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0858
Signing time: Tue 04 Nov 2025 13:01:58 +0000
Manifest this update: Tue 04 Nov 2025 13:01:58 +0000
Manifest next update: Wed 05 Nov 2025 13:01:58 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: E7HQsrf79UUaJUA65ZLtc2l7uS7+P5IzNBEjjaUX+Jk=)
2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=)
3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:bb:8a:4e:20:d7:16:5d:15:24:e4:bf:bd:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Nov 4 13:01:58 2025 GMT
Not After : Nov 5 13:01:58 2025 GMT
Subject: CN=4aef93dbb43fe92dc908ab8743d30d7b7f763ad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6f:ad:9d:cc:ff:89:8f:4f:07:96:00:3a:1a:
69:d8:5a:e6:25:7c:4e:eb:3c:fe:7c:36:67:03:ab:
69:ff:d1:9f:eb:c0:2f:58:17:32:2b:c5:77:3d:b8:
52:17:d5:66:cc:67:d3:7d:25:97:c7:60:00:38:f6:
23:5d:24:20:8f:28:f5:9a:73:cc:eb:39:e8:e1:43:
b3:5f:1d:77:73:8d:b1:69:a2:87:58:72:dc:d0:de:
23:35:11:20:0c:87:0f:ba:9f:ed:5f:2a:65:10:eb:
3c:e9:f5:89:8e:f4:fa:e7:b7:ea:f1:ee:c3:38:db:
43:3a:b7:1f:3e:e2:f1:75:0f:88:26:e4:0d:d4:ac:
88:cf:79:40:13:bd:46:b2:32:82:ba:e2:40:66:80:
49:1b:4e:61:17:3b:a7:26:23:2b:61:39:cb:23:39:
8f:bb:a5:34:4d:cd:ee:7a:e4:88:25:97:bc:f4:e3:
c1:43:41:a4:bd:ec:87:ba:04:bc:c2:df:86:cf:1e:
68:4e:8b:a0:52:7c:05:64:c1:1f:48:a1:2b:0e:9d:
67:5f:c9:88:28:2e:63:39:56:5f:9b:7f:5e:35:1d:
aa:51:13:e3:af:42:49:c3:77:f0:e5:f6:68:58:d7:
b4:fb:73:5a:c6:54:66:c8:40:01:71:9d:52:6f:12:
bd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:EF:93:DB:B4:3F:E9:2D:C9:08:AB:87:43:D3:0D:7B:7F:76:3A:D1
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:97:e4:9e:63:92:48:21:c4:89:3e:99:21:3f:ef:97:a5:79:
af:0e:71:06:ce:e3:b1:d2:17:e6:7d:ea:13:7b:30:53:df:6e:
ae:aa:15:03:1b:db:d4:3f:2c:65:93:29:c4:12:21:3d:92:a1:
8c:3c:db:48:7c:99:ac:d0:4d:09:4e:4f:29:f2:c6:24:d0:fc:
fa:1b:74:c3:12:a6:f9:2a:52:23:a6:94:a0:69:66:09:67:6e:
dd:78:e7:f2:26:eb:30:ca:f0:d1:d7:05:8e:bc:33:29:54:03:
3c:7e:a6:18:98:3f:75:8f:4d:b8:f3:93:c7:d4:e3:6a:72:b0:
d6:47:b1:1a:fb:72:d1:cc:d3:be:72:ab:3f:2b:f1:95:cd:c3:
84:db:40:90:6d:21:fb:02:42:99:5a:df:9b:42:68:d3:2d:ed:
65:a8:c0:19:9a:e7:80:aa:ab:99:46:af:5c:f9:33:1b:7d:50:
5b:87:8d:9b:bd:b5:5e:a2:3c:99:67:92:27:f7:a9:96:04:df:
92:2f:ce:3b:be:01:93:4a:79:bf:11:c8:85:8c:e6:99:13:4b:
d2:1e:73:98:1a:e0:6b:3e:7f:db:16:7d:07:87:ed:b2:31:f8:
53:36:77:db:c7:a0:51:c0:31:c8:33:d7:3b:2e:b5:c2:b6:da:
24:d3:4a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:38 2025 by rpki-client