Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
File: 1-wH_19pe5FD8saZWq_xuCxshw2U.mft (raw, json)
Hash identifier: yxr5ezy/uYVTB4SpIvzxVShcRAg4xqnjK9VAXmFtFY0=
Subject key identifier: 64:6E:AA:33:BE:CD:DD:4E:4A:B8:FC:D7:B1:1D:32:36:E8:9F:F7:53
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 019A7112DEF1BC255D9E3002D10AB607EC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
Manifest number: 1420
Signing time: Tue 11 Nov 2025 04:00:53 +0000
Manifest this update: Tue 11 Nov 2025 04:00:53 +0000
Manifest next update: Wed 12 Nov 2025 04:00:53 +0000
Files and hashes: 1: 1-wH_19pe5FD8saZWq_xuCxshw2U.crl (hash: bqr0aUk9/FetWhJJzpcsSU71WwO43zv0CvDZtiDYN8Y=)
2: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (hash: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:de:f1:bc:25:5d:9e:30:02:d1:0a:b6:07:ec:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Nov 11 04:00:53 2025 GMT
Not After : Nov 12 04:00:53 2025 GMT
Subject: CN=646eaa33becddd4e4ab8fcd7b11d3236e89ff753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:1d:f4:a8:49:2e:07:2c:51:7d:37:86:0b:
9a:00:6f:18:be:73:7f:e5:3f:77:9f:2d:07:46:5d:
ce:18:d6:d1:cf:c3:97:05:d8:07:54:9c:b2:cc:1b:
f0:79:ba:0f:5c:43:8b:6e:67:ee:38:8f:ed:6d:d3:
05:dc:3a:17:07:e9:67:30:bf:99:50:dc:b3:4d:14:
15:c6:2b:cf:4a:c9:78:f5:c3:ca:7c:2f:4e:a0:1b:
38:3b:c1:53:49:4d:a7:04:68:4c:f7:e9:fa:21:90:
e1:c6:ef:76:0d:af:df:ee:38:ac:f3:fd:f8:e8:86:
fe:8d:be:7d:cb:4e:3a:dd:24:48:fc:ab:a6:40:67:
69:13:96:11:58:2e:62:96:59:5b:17:2e:39:84:2d:
cb:6d:d0:97:4d:a4:38:fd:a6:46:c4:e8:92:aa:d7:
a9:1c:01:c8:be:6f:e1:10:fd:6a:80:46:ac:8a:1a:
7c:28:93:7a:6c:53:73:91:1e:6a:25:6a:cd:ce:7a:
e2:34:45:b1:41:2c:2c:d4:2f:52:fb:3f:05:2e:67:
69:31:fa:98:c0:90:b9:be:33:84:32:ff:64:be:0b:
b7:10:fe:ca:86:47:20:26:1a:58:33:26:4d:bf:b6:
ba:2d:d5:0b:e6:7f:b1:8b:71:9d:fe:0c:85:e1:84:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6E:AA:33:BE:CD:DD:4E:4A:B8:FC:D7:B1:1D:32:36:E8:9F:F7:53
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:04:f8:28:64:9f:53:6e:07:5c:1c:d5:43:b7:ac:a4:3c:39:
2d:ce:4a:31:3b:4a:8b:80:ac:c5:f6:ee:74:81:0f:98:38:7c:
dd:e9:75:f0:d6:f8:68:75:c7:27:07:b8:16:6d:b3:58:ef:fc:
c1:47:9b:02:1a:f7:75:e2:7b:da:58:57:a6:72:bb:a1:17:c1:
46:9c:e6:d8:fb:85:d7:05:6d:53:50:22:84:62:8b:74:ad:e1:
f0:20:a6:78:38:64:f5:9f:27:ac:1f:6d:c4:62:02:22:1d:7f:
a6:74:6c:34:6a:6c:79:d3:06:27:e0:f8:e3:f1:04:5e:b8:59:
25:fd:70:3e:54:aa:b3:5b:98:e8:10:57:d7:4b:85:e3:37:b0:
bd:6f:75:5e:00:58:3b:91:e0:8a:e4:96:d5:3a:a0:59:3c:bc:
7a:28:70:4e:d7:c8:ca:53:f3:93:98:2b:94:6e:12:17:87:2d:
8c:22:98:da:c7:f0:fc:55:9d:31:66:da:fa:f3:cf:35:fd:fe:
64:6b:3f:b5:9b:d1:5a:69:3b:ff:73:59:a9:9b:0e:60:58:cb:
af:39:3a:59:da:72:8e:76:c5:65:3d:38:99:46:f6:3b:75:89:
fb:b7:bf:81:22:d1:eb:45:a9:93:17:b1:eb:af:63:99:27:29:
c3:6d:a7:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:48 2025 by rpki-client