Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json)
Hash identifier: 4aBXXmmbwaRU1kpN9Ug1SMoCEtKtAvdHixxZnzuLNdI=
Subject key identifier: CB:99:74:61:70:14:84:2D:C6:D3:35:C3:D1:62:37:A8:ED:15:83:71
Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Certificate serial: 019A71B828BBE0D37B464C3358F398599FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
Manifest number: 0CE2
Signing time: Tue 11 Nov 2025 07:01:25 +0000
Manifest this update: Tue 11 Nov 2025 07:01:25 +0000
Manifest next update: Wed 12 Nov 2025 07:01:25 +0000
Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: 3aUZF3wlB5hl6CVpLs9rOJpPjLgrE+QgIxSkgcdoE0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:28:bb:e0:d3:7b:46:4c:33:58:f3:98:59:9f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c
Validity
Not Before: Nov 11 07:01:25 2025 GMT
Not After : Nov 12 07:01:25 2025 GMT
Subject: CN=cb9974617014842dc6d335c3d16237a8ed158371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:13:58:9c:b0:78:2b:a1:4c:7e:8e:77:bd:12:
b5:35:2c:89:c6:a0:37:0e:a5:31:f6:47:97:43:74:
cb:b3:29:a5:e6:a4:4e:d0:cf:da:f9:30:80:03:6e:
be:c3:5a:4e:62:f2:f8:be:60:ca:62:56:7b:10:05:
b2:3c:64:7b:ef:76:f4:2e:46:47:8d:d4:83:47:53:
9f:96:ae:af:ba:7b:aa:c2:04:ee:83:6a:dc:ab:07:
29:85:9d:46:9c:9d:70:03:42:2a:47:b7:21:95:f6:
c8:7d:90:3e:4d:4b:16:f1:78:08:1f:12:29:51:c9:
fa:b0:c6:c7:d4:a6:f9:f5:29:7f:74:b1:c0:83:a7:
f6:fa:b5:bc:2d:00:70:27:97:91:0f:89:1b:8a:d8:
f7:6e:62:2a:2c:63:c9:66:67:bd:fe:aa:26:b0:3b:
56:93:fe:07:fa:7f:7e:b3:8e:71:9f:36:f4:72:15:
d7:02:eb:64:98:41:bb:99:34:46:af:ff:74:cb:f2:
40:fc:64:d6:37:0b:ba:1f:ea:58:f2:c8:e4:6d:84:
83:57:0c:67:ed:18:2f:f2:36:44:f3:bd:59:f2:a1:
e9:03:ac:89:27:63:81:f8:54:a6:0b:58:4c:0d:57:
46:c1:65:5a:ef:b1:a9:0b:58:eb:7c:3b:e7:5e:73:
fe:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:74:61:70:14:84:2D:C6:D3:35:C3:D1:62:37:A8:ED:15:83:71
X509v3 Authority Key Identifier:
keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:86:89:1e:3b:80:d1:73:92:b5:e8:c4:73:19:85:22:3e:5d:
ed:43:31:5b:ce:f5:25:fa:02:f3:b9:24:28:62:32:7d:60:12:
ab:12:b0:af:ea:e5:16:32:f5:19:20:fd:9b:80:c1:78:8c:5b:
ad:cf:fe:85:cb:69:04:6f:1e:59:c7:13:cc:e7:7f:00:56:76:
32:60:a4:f3:08:39:6b:48:9c:92:b2:52:b1:1c:1e:4b:8b:35:
6f:17:84:8c:15:fb:22:bf:db:22:4a:ec:b4:cb:74:d8:8d:56:
5a:25:8e:ff:73:6c:ac:ee:15:e4:3d:33:60:06:3d:0d:87:5b:
6b:47:94:c2:66:41:ef:9d:cf:8a:0f:30:79:8d:64:12:c1:18:
de:3e:44:f6:c9:e0:18:9d:4c:94:27:ed:ca:a2:57:40:41:5d:
11:09:a0:1a:87:e8:f7:fd:d6:3e:12:0d:f0:68:07:3b:b5:ee:
5e:16:85:ac:5d:20:c7:aa:1d:51:a1:1e:5d:6a:0f:59:eb:b5:
31:31:70:22:99:47:4d:82:ff:02:6f:91:5a:26:f5:25:88:a3:
dc:24:ec:33:f3:b3:e9:95:ca:01:48:e2:26:0d:96:30:e5:62:
ec:c4:c5:fe:80:34:d0:d8:dc:e5:ec:35:15:fd:9b:5e:13:7a:
2c:37:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:48 2025 by rpki-client