Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
File: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft (raw, json)
Hash identifier: 0y2ZABkKFin3SWAFfGsEZm19nKUUlgy+jm74cktG5O8=
Subject key identifier: 3B:D5:4B:64:E8:65:F7:FC:B3:36:32:8F:9B:E1:C9:A3:D9:45:EB:2D
Authority key identifier: FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
Certificate issuer: /CN=fab796d980fa60fe2514fce62646f45d12c95165
Certificate serial: 019A72263136E9AB00F02870993C574C1E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:36 +0000
Manifest this update: Tue 11 Nov 2025 09:01:36 +0000
Manifest next update: Wed 12 Nov 2025 09:01:36 +0000
Files and hashes: 1: 1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl (hash: EI1absz1NIwHoEp3hNYWhWdNmIyGxdulK1g5jv365Bg=)
2: t-kDZ60Ga6s9XyZB2kPkoXB6jwY.roa (hash: +ne5fdeCEiZZDZ8TkDgbzZo5fLLpzzbaivx2MhBIpe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:31:36:e9:ab:00:f0:28:70:99:3c:57:4c:1e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fab796d980fa60fe2514fce62646f45d12c95165
Validity
Not Before: Nov 11 09:01:36 2025 GMT
Not After : Nov 12 09:01:36 2025 GMT
Subject: CN=3bd54b64e865f7fcb336328f9be1c9a3d945eb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5d:2a:07:c3:72:47:98:e6:fb:a8:bf:0e:02:
15:99:a0:94:7c:3c:70:aa:47:76:17:dc:93:68:6b:
fc:26:db:d6:12:6a:47:6d:08:87:fd:ca:6e:5c:bd:
44:44:64:7d:9b:ec:09:46:24:b4:c3:89:3c:c4:64:
ad:cf:ed:8e:e0:11:14:d9:a1:a6:45:b1:3d:52:11:
f2:96:31:e6:6f:6b:7c:6f:e7:f3:48:b2:57:ae:3d:
c3:c9:2f:83:7a:54:68:41:db:51:a8:f3:a0:94:b4:
cc:92:02:13:ce:a5:a8:de:8f:cf:5c:16:9b:d6:49:
d6:55:22:1b:e6:5e:5c:73:5d:2b:0f:35:1e:48:ea:
dd:0c:37:7f:04:d0:3e:66:d1:4e:e8:c3:95:e1:cf:
49:57:92:b5:12:97:19:77:e5:a1:56:f6:73:9b:cd:
bc:71:32:db:69:fc:e7:c2:fd:ce:9f:58:71:ee:bc:
77:a5:7e:bc:69:a2:46:05:16:20:f5:b8:a6:ac:f3:
1b:97:12:80:88:1c:fb:a3:9c:4a:55:5c:d5:01:7b:
24:66:74:57:45:27:04:9f:c6:f7:3f:0b:8c:d4:e9:
0d:29:3d:a5:72:02:c5:d1:44:36:ba:6a:e2:29:39:
15:46:1c:14:1e:29:e9:72:2c:02:fc:82:88:71:b5:
bb:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D5:4B:64:E8:65:F7:FC:B3:36:32:8F:9B:E1:C9:A3:D9:45:EB:2D
X509v3 Authority Key Identifier:
keyid:FA:B7:96:D9:80:FA:60:FE:25:14:FC:E6:26:46:F4:5D:12:C9:51:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-reW2YD6YP4lFPzmJkb0XRLJUWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/97f89e-82b5-442b-b672-5d192fbfcb0b/1/1-reW2YD6YP4lFPzmJkb0XRLJUWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:17:8f:12:d5:f5:77:00:d0:51:20:d7:c7:45:0a:16:14:60:
9e:fa:32:d2:f9:77:d5:8d:09:f6:94:85:e1:a8:92:3e:c2:87:
25:78:7a:54:05:c7:44:de:72:db:db:dc:f0:7f:99:6b:1d:bc:
58:54:c8:38:eb:d0:83:73:e7:fe:c5:b2:0b:1a:ce:2c:24:59:
b5:7e:06:b9:80:4d:7d:cd:c8:e0:86:38:8f:1c:ae:90:5d:61:
0c:34:c4:d7:fd:19:4f:a2:54:c4:3c:13:a5:54:c4:fb:ce:8f:
ef:a3:85:5e:56:e4:7c:b6:bd:94:81:f6:80:98:2d:ca:1f:a2:
be:b8:24:40:c3:66:2a:12:46:8a:41:39:86:8c:35:84:14:27:
fb:46:ac:ae:86:b9:ca:1c:dd:56:ad:d4:e6:4a:e7:da:0b:ff:
3a:d5:c1:20:e3:2d:b3:e1:9c:37:1a:41:58:7b:7c:4c:b5:cc:
ce:3f:bd:86:fa:cb:92:95:10:42:fc:b6:b8:e5:4b:94:c6:db:
4d:82:3b:0d:8d:60:b8:54:3b:16:b6:e0:4a:71:55:5d:2a:bc:
65:c5:0f:a6:83:17:06:96:82:62:bd:a3:44:3c:43:44:84:a2:
d4:83:13:cb:c4:48:bf:bc:02:58:39:cd:cb:29:70:7c:87:ea:
db:31:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:24 2025 by rpki-client