Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: cib4g2ioLPp0cQ3emlJuRWWp9QEl49qjVN5PpvdKa6I=
Subject key identifier: 4F:2D:ED:02:B7:9E:B6:6E:2E:59:F9:A4:F0:1F:DB:9F:BC:EC:1F:C0
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019A71132FE5967026349966436FA161B96B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 169D
Signing time: Tue 11 Nov 2025 04:01:13 +0000
Manifest this update: Tue 11 Nov 2025 04:01:13 +0000
Manifest next update: Wed 12 Nov 2025 04:01:13 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: aDmnbfUn1r6cN7no5zz6xjr5rV0G65wrPa8oNEvPC2I=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:2f:e5:96:70:26:34:99:66:43:6f:a1:61:b9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Nov 11 04:01:13 2025 GMT
Not After : Nov 12 04:01:13 2025 GMT
Subject: CN=4f2ded02b79eb66e2e59f9a4f01fdb9fbcec1fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ae:56:d3:26:27:11:84:f5:31:f1:de:a9:74:
06:5f:3c:24:89:4b:16:1d:4c:7b:e5:61:5f:00:26:
ff:ed:8c:f6:c3:e3:74:f4:35:b5:31:c7:66:54:db:
f8:95:09:c5:99:f8:66:4d:21:2a:4d:4d:83:16:62:
74:ce:25:f1:35:3a:79:44:c9:e6:88:5e:a5:ef:a9:
80:a4:f8:28:f7:6a:1e:cd:2a:aa:a6:65:6c:1f:07:
93:9c:98:e6:2b:ef:17:48:5d:0f:dd:6a:47:07:91:
1f:0c:32:44:de:b7:68:3a:b9:7a:f0:8e:74:02:1a:
f8:a8:b0:4a:64:de:e1:88:8e:58:37:a0:ba:05:ce:
2b:c8:18:e7:51:79:b2:d8:dd:30:cc:ec:aa:2d:d0:
ad:ea:6e:32:bf:44:f3:0b:ba:f8:54:d0:70:8d:6c:
80:47:0c:02:b3:c8:c1:5c:06:9e:58:8b:f0:a7:0f:
e8:e3:6b:be:f5:25:04:12:b4:02:e1:bd:10:fc:08:
ae:5f:09:a3:0e:6f:dd:ac:12:10:8c:88:40:b2:5d:
fe:b9:5e:cd:0b:63:8a:6c:8d:f4:9b:2e:0d:e1:71:
e6:3b:4d:c1:0d:a5:90:a5:4b:25:74:e8:ad:b9:3d:
9a:ca:27:eb:e3:39:6c:15:0b:03:ce:7f:c5:cd:a5:
d2:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:2D:ED:02:B7:9E:B6:6E:2E:59:F9:A4:F0:1F:DB:9F:BC:EC:1F:C0
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d9:fb:0c:d4:04:ab:c3:a2:05:5f:5f:64:c1:ae:a2:f5:97:
c6:d0:a5:98:ba:15:f1:58:92:84:8f:34:53:f7:0e:90:2d:b2:
1f:7e:a6:b9:16:10:79:6c:4a:1c:64:9f:99:6c:b0:c7:b8:d1:
eb:b5:b2:e0:67:d3:b2:1a:6f:b1:00:d1:fd:14:3f:f8:70:02:
e2:b2:17:22:e2:56:90:d8:d7:72:16:6f:f0:26:6a:c2:aa:8f:
ce:8e:ba:02:4e:d7:65:ad:42:48:26:5e:29:30:b9:d9:5b:59:
1e:6a:15:49:49:98:c7:66:2d:87:57:17:b7:8c:57:ac:a8:89:
78:73:4e:d5:62:b0:11:f2:1a:66:a3:97:e2:d1:24:5e:4c:53:
6c:64:c7:ce:10:b5:eb:10:96:d6:31:19:21:d8:f9:e0:df:4d:
a9:03:b8:d4:91:53:bf:51:c2:e9:72:01:69:fc:f7:2b:a8:2f:
46:73:ac:8b:0d:b8:11:c8:a3:5e:aa:d6:7f:05:0b:ab:ae:f1:
a7:20:3e:1c:c9:b1:ee:d4:74:d5:d1:94:63:b3:65:ed:72:99:
18:c0:03:9d:03:66:76:7d:55:35:63:ab:e7:30:84:43:48:bb:
91:02:89:59:71:ce:fe:63:58:d8:14:4c:57:b9:41:9e:a3:f4:
3e:1e:e3:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:12 2025 by rpki-client