Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
File: 1-v3j2ZJau-IPw8bZGEx99nBH-54.mft (raw, json)
Hash identifier: ef9++jjojXJPltQ7WtfiXqK/COJlpqQN3NsIagbLgNQ=
Subject key identifier: 42:E0:FD:93:F6:17:55:37:47:24:61:CB:8D:CF:EA:A1:12:27:50:F7
Authority key identifier: FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
Certificate issuer: /CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Certificate serial: 019A725CE4F3E20F6CB901B0A1A3D02A4794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
Manifest number: 72
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: 1-v3j2ZJau-IPw8bZGEx99nBH-54.crl (hash: +7USlI+TU7ywfqU6yQ6M+W4+0YRrysC7yhJ1qzpfBEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e4:f3:e2:0f:6c:b9:01:b0:a1:a3:d0:2a:47:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fafde3d9925abbe20fc3c6d9184c7df67047fb9e
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=42e0fd93f6175537472461cb8dcfeaa1122750f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ae:c1:17:56:35:b3:c1:79:7c:0b:6b:12:57:
24:4e:19:d0:3c:83:88:f1:6b:f1:9d:a4:d3:1b:13:
35:c8:0a:61:92:fd:a0:c9:99:cc:3a:dc:08:a4:8b:
b0:88:55:cf:a5:5b:1c:4e:29:5c:ff:21:96:35:e1:
62:ac:d0:6b:27:22:1f:5c:69:ed:6f:87:d5:60:7e:
bf:4d:22:48:d6:e8:cf:6c:98:d1:58:0c:3b:56:83:
6c:dc:93:c7:7c:9e:31:35:53:6a:41:ef:63:49:1f:
f7:7b:1b:17:1d:4c:8b:14:ae:e6:be:a5:fc:96:3a:
01:6b:7b:50:be:51:fd:7a:61:2c:c7:35:08:e0:44:
2b:e6:62:ea:6e:6d:46:ea:82:b4:e5:d4:0a:99:7b:
60:00:29:cf:0e:0e:d9:52:d1:72:9a:fb:e7:65:4b:
e0:e5:48:07:dc:38:06:05:55:e2:47:58:d1:42:e6:
a1:9e:60:43:fd:2d:fc:67:17:69:96:e8:a3:3b:ed:
e3:28:45:14:5c:f0:91:09:19:c6:a4:f8:6e:b8:9c:
6a:f5:f2:ae:83:0a:97:2c:56:72:82:12:95:be:8f:
a6:8b:c0:03:01:54:01:0b:80:01:fd:e1:34:6e:f8:
32:49:b7:94:39:de:b8:a2:4b:6b:69:2a:7a:9a:96:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E0:FD:93:F6:17:55:37:47:24:61:CB:8D:CF:EA:A1:12:27:50:F7
X509v3 Authority Key Identifier:
keyid:FA:FD:E3:D9:92:5A:BB:E2:0F:C3:C6:D9:18:4C:7D:F6:70:47:FB:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-v3j2ZJau-IPw8bZGEx99nBH-54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dc8d00-f2c4-4991-989e-43d19dc3f138/1/1-v3j2ZJau-IPw8bZGEx99nBH-54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:54:71:d8:a8:bb:0e:e7:da:84:e7:bd:84:75:a4:c0:82:9b:
af:ee:f4:93:be:af:a7:ae:25:83:4c:3e:3f:04:08:62:c6:62:
1a:66:de:60:1b:16:eb:31:c0:90:79:cc:74:80:24:43:cf:c1:
ec:d5:95:e2:21:44:0c:75:71:43:5e:b3:b5:b5:8b:6d:47:7e:
51:7c:cb:6a:6e:0a:15:29:17:30:f1:47:2b:ec:23:aa:a6:cb:
e9:72:35:ef:3a:fa:36:1c:05:c9:af:fa:f5:64:68:ec:23:aa:
c8:a5:5e:75:d1:c4:c6:60:8a:7b:06:46:d5:d7:86:51:44:6f:
7b:c8:72:96:a0:96:92:e2:c5:08:f8:01:b8:b8:91:20:ff:5f:
d4:c0:e5:00:9e:38:5f:49:b9:4a:1f:54:fc:2f:b6:42:cf:b3:
96:97:14:e4:9e:11:62:84:61:df:f3:b8:03:39:37:fd:4e:40:
0e:bd:50:f1:e1:6e:de:15:9d:1b:42:e8:c7:8d:a4:fa:c8:eb:
c4:71:84:ce:de:c9:92:df:ab:12:ad:7f:d2:ed:ae:3c:4b:a6:
53:ce:4f:b8:e8:63:eb:92:58:bb:da:2d:d2:80:99:ef:9f:83:
db:9b:6b:bc:1a:2d:20:08:0f:0c:cd:b6:7b:4f:95:3b:c2:c7:
ab:9c:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:23 2025 by rpki-client