Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
File: 1Fib0sD75-LYWSzuaHGSu7V5efc.mft (raw, json)
Hash identifier: 4DHUGdsbkyGlYLlz7xSbuSZu1EjZjcnEP6ifZ5LRNQU=
Subject key identifier: FC:55:39:B6:4B:9A:F7:1F:CA:85:C2:9D:11:58:E0:67:F8:F6:D3:96
Authority key identifier: D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
Certificate issuer: /CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Certificate serial: 019A71B784A10B48AA463E76EDF65E8431EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
Manifest number: 03DF
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: 1Fib0sD75-LYWSzuaHGSu7V5efc.crl (hash: RX6gX7rpyjExmIQtZUJYy56/3+0mKlYeS6ejttE3dm4=)
2: kWLYBV2lkiSE5J3RZk5fvmnmzB0.roa (hash: fcVu1jDo+tZnVop9ajN9Wj6s2WROmvxL/2WZUAGhZDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:84:a1:0b:48:aa:46:3e:76:ed:f6:5e:84:31:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4589bd2c0fbe7e2d8592cee687192bbb57979f7
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=fc5539b64b9af71fca85c29d1158e067f8f6d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2f:79:4b:2a:93:b3:d0:55:e7:8b:18:3f:7c:
a4:7a:4a:1f:7b:87:6f:5c:28:0c:8a:a9:7c:35:51:
94:96:8b:b8:1a:2e:77:75:49:ba:58:d2:36:ff:cc:
29:20:d3:d5:48:a5:3c:22:de:65:5c:7d:71:be:b6:
b7:94:f7:d9:06:48:cf:29:66:59:6b:89:4f:16:6d:
6e:c6:93:26:c9:fc:23:d8:71:1a:2d:22:55:6c:21:
a3:f4:8e:60:ed:b3:44:4f:86:05:ae:cf:2f:21:06:
d4:c8:fc:8b:a3:06:1d:26:d8:e1:cd:cb:b7:7b:95:
d4:e1:6a:64:54:9a:f1:9d:35:ee:f4:1e:9e:b3:e4:
73:7e:3d:71:01:56:49:4c:55:7d:de:ef:67:6c:e8:
d6:9c:cd:8f:2f:ba:c5:15:dd:18:e5:4c:2a:bb:93:
a0:8e:72:4b:8e:52:20:39:36:26:2c:8c:f8:c2:50:
df:66:a9:cf:9d:c8:77:e8:63:c6:90:a8:37:21:59:
b7:c6:4c:7b:a2:41:f4:7e:dc:78:fb:22:a9:9d:d2:
57:51:63:53:f0:46:67:21:dc:2f:7d:26:1d:37:77:
85:eb:84:b6:3a:ac:a1:dd:3a:30:13:b4:71:15:41:
46:9a:e5:c8:e2:91:69:13:3e:85:8c:87:35:e9:64:
93:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:55:39:B6:4B:9A:F7:1F:CA:85:C2:9D:11:58:E0:67:F8:F6:D3:96
X509v3 Authority Key Identifier:
keyid:D4:58:9B:D2:C0:FB:E7:E2:D8:59:2C:EE:68:71:92:BB:B5:79:79:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Fib0sD75-LYWSzuaHGSu7V5efc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ad6ad3-4014-4000-a400-f049839fa730/1/1Fib0sD75-LYWSzuaHGSu7V5efc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:63:71:5f:c3:69:53:1e:e8:18:93:b1:83:9a:d2:54:f3:89:
30:ff:24:e5:08:6c:0b:9b:9d:06:7a:48:97:65:59:67:c8:a1:
b8:46:17:51:7f:79:3b:ac:56:e9:6a:d8:16:dd:19:ee:27:60:
bb:12:26:74:b4:ea:23:c0:9d:16:d2:4b:36:7d:be:55:b4:e2:
70:b9:c5:43:9c:6e:61:15:72:4a:01:3a:bd:4f:1b:92:50:d1:
ed:ab:13:7b:27:21:de:16:f3:bd:dd:ce:36:be:bf:23:c2:b0:
ce:83:89:d1:b3:2c:04:cb:69:4c:d8:89:23:f8:63:d6:3d:01:
85:fb:2a:d3:00:30:2b:d6:75:5e:cb:5d:de:df:b5:52:41:4d:
94:8b:ca:6f:b7:21:6f:b5:cf:8e:3d:74:d4:00:68:99:67:49:
74:af:e6:3b:52:78:8f:45:7a:23:ae:b5:96:ab:c4:d1:00:81:
21:5d:b0:43:2b:17:5e:f1:f8:df:7f:26:d4:d8:5f:c6:08:d2:
27:16:61:1e:25:87:a3:83:b7:e7:b1:b2:71:74:00:03:c5:cf:
b1:4e:18:c7:ab:59:e2:cf:6b:10:d3:54:80:70:42:72:19:98:
82:e5:04:d1:f9:06:5c:94:cb:87:8e:a1:70:59:81:83:4f:2b:
7a:19:2b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:38 2025 by rpki-client