Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
File: 1-_YvdgYnP0GmzMjilWB288Ch61Q.mft (raw, json)
Hash identifier: eAQLUNmRxiSdkyQRhWlIYZD6+Bo2u3GGTenpXQlYEVQ=
Subject key identifier: FE:63:1F:8E:09:7A:26:7F:84:0F:11:55:88:C5:74:18:85:E4:A6:B7
Authority key identifier: FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
Certificate issuer: /CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Certificate serial: 019A71B80D231116AC0F7205B024F853E848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
Manifest number: 1741
Signing time: Tue 11 Nov 2025 07:01:18 +0000
Manifest this update: Tue 11 Nov 2025 07:01:18 +0000
Manifest next update: Wed 12 Nov 2025 07:01:18 +0000
Files and hashes: 1: 1-_YvdgYnP0GmzMjilWB288Ch61Q.crl (hash: HP/JpP8wk06KlwBOcO/leP87Pe+6YdYUp2hoVQUCMQ0=)
2: gVx18rt52MyPf0oqDqUou5AuUBM.roa (hash: vA3SGzj0FAH1RwjbpG6kC2zF7wZB8RzhXo7xrGq4Z4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:0d:23:11:16:ac:0f:72:05:b0:24:f8:53:e8:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf62f7606273f41a6ccc8e2956076f3c0a1eb54
Validity
Not Before: Nov 11 07:01:18 2025 GMT
Not After : Nov 12 07:01:18 2025 GMT
Subject: CN=fe631f8e097a267f840f115588c5741885e4a6b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e6:32:26:cd:f1:74:bd:27:20:c2:a5:4f:d0:
3c:90:dd:c9:5a:29:f9:3a:73:0c:5f:e1:ee:8b:22:
61:59:67:87:94:5d:7c:f4:d1:75:f7:7b:7c:2c:f7:
96:23:69:43:0e:7c:fa:8a:af:52:2d:d3:5b:d4:3d:
f9:ae:f8:56:d4:6a:f7:74:08:a3:c0:79:34:50:a8:
48:45:f3:e3:ff:1e:87:21:bd:33:df:8d:14:de:e3:
d4:8c:15:22:66:17:5d:e0:f8:2d:86:27:c3:73:cb:
0a:d0:5d:26:a1:ca:8d:f0:92:b8:6f:20:ea:21:40:
92:aa:02:a1:f7:28:ab:65:a4:e5:38:93:aa:12:19:
36:c1:7b:74:49:54:17:0f:15:f5:f5:e7:4f:ba:fe:
da:2f:69:b1:12:74:4d:19:89:90:0e:40:2e:cd:7a:
a8:bb:89:95:05:c3:ac:c5:72:32:2a:5a:0e:d5:eb:
f9:c4:1d:ba:5f:bd:74:06:17:b7:a2:36:25:71:a5:
a1:2f:70:5a:12:17:77:83:74:8a:27:41:76:16:bc:
32:6d:59:f1:13:ba:8c:47:49:dd:93:c5:7b:bf:67:
42:a8:47:c0:9e:0b:d1:5d:b1:e4:64:31:88:70:f0:
9a:24:83:d8:57:f5:bb:b2:71:c4:2b:77:43:4c:2c:
a3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:1F:8E:09:7A:26:7F:84:0F:11:55:88:C5:74:18:85:E4:A6:B7
X509v3 Authority Key Identifier:
keyid:FB:F6:2F:76:06:27:3F:41:A6:CC:C8:E2:95:60:76:F3:C0:A1:EB:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_YvdgYnP0GmzMjilWB288Ch61Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/95eebb-0a9d-4f71-b3f9-5649e1b192bb/1/1-_YvdgYnP0GmzMjilWB288Ch61Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:63:e0:5f:a5:7e:89:b7:ba:58:e6:f5:c9:29:ae:8e:b3:c3:
2e:56:05:28:88:56:dc:50:e1:4e:0d:e7:13:5f:5f:65:51:78:
8d:ff:65:ef:70:43:a3:97:c4:f8:74:1c:b7:e8:1f:ae:a1:41:
11:2a:6e:2d:0b:78:75:69:09:15:6f:92:f4:86:38:2e:f9:19:
84:43:fa:a5:3c:39:c3:26:17:36:30:5d:be:55:e7:eb:7f:d2:
51:a9:90:57:0b:b0:4b:a3:6a:5a:30:26:8f:de:40:27:7d:ac:
6c:45:fc:28:38:ea:4c:d9:1d:fd:5b:76:53:a7:86:75:19:7e:
20:fd:eb:e1:22:b6:96:69:d8:2a:ac:46:7d:75:42:74:f1:52:
0b:01:f0:6a:73:20:53:a0:97:1e:c8:c2:57:77:68:bb:cb:e5:
12:bb:c3:b4:0d:48:3d:02:3a:e6:f3:1c:b1:29:d2:c7:26:11:
65:bc:c4:89:a4:49:78:55:ba:46:6f:7b:56:30:97:a3:1f:97:
3e:a6:58:82:0d:11:87:2a:7b:d4:32:fd:67:fe:68:ca:df:c7:
ad:e3:2e:92:fc:61:31:48:fc:b8:fb:60:cf:5b:df:91:5f:7b:
6f:5b:33:c2:0f:80:d7:6a:6a:ac:76:e4:cf:d2:b1:d3:03:3b:
20:0a:73:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:15 2025 by rpki-client