Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
File: 1u7ifzwsXJ7FeArNorbrBAptJaE.mft (raw, json)
Hash identifier: ABc+cs8GaZ+Ll2wgqf4ghvyVh1JLIzmtBfrlrEO/oBs=
Subject key identifier: FE:D2:22:08:CC:17:7A:25:D1:3C:7E:12:F3:0A:65:EF:D1:E5:C3:B4
Authority key identifier: D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
Certificate issuer: /CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Certificate serial: 019A73387FD1F52753DA394D002076FB5482
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
Manifest number: 1505
Signing time: Tue 11 Nov 2025 14:01:13 +0000
Manifest this update: Tue 11 Nov 2025 14:01:13 +0000
Manifest next update: Wed 12 Nov 2025 14:01:13 +0000
Files and hashes: 1: 1u7ifzwsXJ7FeArNorbrBAptJaE.crl (hash: JmbDMx9rZsvNdteUesHp4IkhtI6L42OBs14SJmpy+fM=)
2: pBQcYACEJFgZkwBTNup11LKnTk8.roa (hash: Y8ti6NLIY+LJpCwKrSvXBDtmqYcWgUzXZKj2i28mql4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:7f:d1:f5:27:53:da:39:4d:00:20:76:fb:54:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eee27f3c2c5c9ec5780acda2b6eb040a6d25a1
Validity
Not Before: Nov 11 14:01:13 2025 GMT
Not After : Nov 12 14:01:13 2025 GMT
Subject: CN=fed22208cc177a25d13c7e12f30a65efd1e5c3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:4c:12:7c:0a:a2:dc:11:c3:a3:2b:3e:10:
6e:68:81:4a:70:11:93:99:9c:30:da:fb:59:c3:1d:
6d:73:04:83:3e:f1:9b:b3:2f:50:91:ad:24:b4:e3:
38:d6:61:a8:40:08:6a:e0:8f:fa:67:3e:ef:1f:97:
15:62:dc:34:1b:4b:85:a0:0a:a2:57:78:99:ec:b4:
cb:0a:45:d8:64:13:4e:dc:62:7b:29:e7:2f:3a:3b:
26:d6:f2:89:f1:29:bb:c6:45:86:cc:35:6f:70:2a:
ed:99:66:07:51:56:bf:8d:17:af:d4:4f:16:3e:c4:
60:bc:cf:3e:a5:58:4f:49:5c:15:de:63:21:26:d9:
c8:99:e9:d0:83:a8:fc:e9:23:b0:48:c3:a9:f8:1b:
d3:df:43:bf:f2:f6:76:85:07:b3:cb:b8:2f:e7:42:
8c:1f:cd:f7:c0:18:47:58:13:73:9d:8e:aa:dc:f0:
71:e2:4a:28:69:44:c7:88:d2:d7:55:c5:96:aa:63:
c8:44:0f:02:da:ac:c8:72:9f:98:a3:74:2a:4b:fd:
3b:54:32:af:ba:0b:83:64:8b:0d:9e:01:37:82:e1:
ad:49:30:4d:83:a4:9c:ee:b5:25:be:fd:c3:da:8b:
2f:dc:6e:0a:c0:d5:2b:af:e7:1b:b2:61:5a:8d:b1:
99:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D2:22:08:CC:17:7A:25:D1:3C:7E:12:F3:0A:65:EF:D1:E5:C3:B4
X509v3 Authority Key Identifier:
keyid:D6:EE:E2:7F:3C:2C:5C:9E:C5:78:0A:CD:A2:B6:EB:04:0A:6D:25:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7ifzwsXJ7FeArNorbrBAptJaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/b82285-969f-4c2f-a04c-7d3c3351492c/1/1u7ifzwsXJ7FeArNorbrBAptJaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d2:48:34:4b:e8:04:40:3f:09:8b:e3:44:f9:f0:0b:21:0a:
ac:e2:39:c3:9e:e8:2b:35:bb:5f:78:a9:24:da:b8:02:b3:27:
e7:72:a6:62:ca:af:33:5a:fe:c0:78:1a:c7:ea:aa:45:33:f3:
a6:c4:64:2c:5a:f5:2b:ce:15:72:4d:fb:4c:b0:00:d8:ad:e8:
6e:41:fa:71:5b:6c:36:89:34:b2:32:b7:97:d6:e4:fd:c8:a0:
84:d9:a4:b6:0d:29:64:5f:60:2a:ca:e9:4e:a6:e6:9d:a4:85:
f8:ca:27:4a:d1:c8:8d:63:5f:75:d8:a1:5d:21:04:b9:88:9a:
3c:ac:a8:89:10:52:f0:6d:0f:90:5b:3d:ef:18:81:48:bb:d4:
ed:00:2b:4a:71:bb:9a:7d:0a:fa:ae:20:e0:bb:36:9f:17:8b:
84:e0:9e:bb:7b:9c:d2:f9:2a:b1:21:09:b1:44:2f:d7:cd:52:
c5:0e:b0:d1:82:46:5b:8b:0c:96:9c:5a:d9:55:12:bd:d6:92:
d6:0f:1d:d2:d9:23:cf:44:6d:cc:ee:c4:83:2f:20:4a:b7:d8:
25:53:4e:25:b1:80:88:32:a1:77:a0:a4:09:12:a1:de:be:05:
e2:cf:e9:f3:11:e5:f1:39:ed:55:1b:5a:2b:c9:a0:c0:29:89:
f1:9e:84:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:07 2025 by rpki-client