Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
File: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft (raw, json)
Hash identifier: jg4eJ919M3bOnE5n+OQGQme56tvu47swadG4N3uyP2U=
Subject key identifier: AF:6F:86:F2:C0:18:87:8F:2F:37:21:CF:19:ED:87:82:AC:0F:58:D4
Authority key identifier: FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
Certificate issuer: /CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Certificate serial: 019A70DC2396DEB2229F288232B4253BCC04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
Manifest number: E1
Signing time: Tue 11 Nov 2025 03:01:06 +0000
Manifest this update: Tue 11 Nov 2025 03:01:06 +0000
Manifest next update: Wed 12 Nov 2025 03:01:06 +0000
Files and hashes: 1: 1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl (hash: RBOCqcwp4j9cOeB+xo3Dx0Z7+FieNY7oeDoTeVyJNFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:23:96:de:b2:22:9f:28:82:32:b4:25:3b:cc:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faebf107f05fba9d4e4ca61aea0c1772519f5e38
Validity
Not Before: Nov 11 03:01:06 2025 GMT
Not After : Nov 12 03:01:06 2025 GMT
Subject: CN=af6f86f2c018878f2f3721cf19ed8782ac0f58d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3b:2e:d3:b5:74:b4:d5:fb:16:9a:b1:1f:de:
36:71:05:73:bf:b7:84:47:5d:1a:3c:d5:21:1e:0e:
1e:fe:b9:80:29:3a:67:4e:15:c6:52:d6:c1:e4:8b:
7a:e8:e9:a7:46:bf:9b:fb:06:74:d4:8d:79:4f:32:
11:40:1d:19:6a:82:e1:49:b2:d6:60:19:cd:f8:05:
e0:fa:4d:b6:4d:5e:ca:48:86:e6:17:10:de:f8:e2:
33:50:32:ef:51:d9:80:88:b1:ef:f3:30:cc:81:1f:
c9:90:0f:87:1e:08:a4:07:ed:3f:42:0b:7f:e9:6b:
ec:2f:ae:05:20:7e:e1:be:47:c9:7f:a2:a3:f7:2b:
c6:e3:ef:3a:b1:1e:8c:15:bd:8f:9d:be:06:b2:d5:
15:87:39:35:52:af:a3:48:5c:44:5c:3b:27:9c:1e:
f6:bc:6a:02:eb:a3:9e:73:05:a2:b4:0a:26:c6:a9:
b4:bf:fa:82:2a:e8:05:fe:c3:ba:dd:5e:25:a4:4f:
04:6a:3b:b7:45:fa:bf:4f:8c:f2:19:c7:8d:f0:e1:
2f:b2:c4:a6:3d:2d:96:57:51:9d:ad:a6:2e:c2:82:
f2:d2:37:6a:fb:56:35:18:71:b9:e4:4a:39:c7:96:
4a:11:a1:e0:43:a1:e3:4c:c9:ee:ee:b8:ec:13:7e:
f4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6F:86:F2:C0:18:87:8F:2F:37:21:CF:19:ED:87:82:AC:0F:58:D4
X509v3 Authority Key Identifier:
keyid:FA:EB:F1:07:F0:5F:BA:9D:4E:4C:A6:1A:EA:0C:17:72:51:9F:5E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uvxB_Bfup1OTKYa6gwXclGfXjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/069628-97da-40fe-9a08-68ef882bc973/1/1-uvxB_Bfup1OTKYa6gwXclGfXjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:dd:d6:84:0e:ee:4a:1d:0c:ce:d9:b0:d9:ec:19:76:a6:66:
70:97:58:65:34:4c:49:91:5f:a9:c6:74:33:c7:bf:40:91:d5:
e1:75:34:2f:fb:24:c3:74:d6:55:5c:8f:69:e2:6a:9e:84:df:
f1:b6:e9:4a:ab:7b:25:ab:6b:2b:6e:5e:de:ab:cf:6b:af:26:
b1:65:14:f7:de:bb:d6:cd:a8:7d:8c:dc:18:88:f8:0a:9c:ae:
3c:98:c5:eb:e8:dc:f2:ba:c0:e5:a9:77:3b:58:07:80:f7:e8:
ec:52:f4:8d:b8:23:44:81:5b:60:ef:b2:b8:57:45:09:ec:4b:
bd:64:64:4d:fa:95:52:ae:93:9d:d1:c4:20:bd:ae:04:e6:a2:
92:87:65:3f:f6:86:ca:cf:95:d9:78:32:01:a6:ac:d1:e9:cc:
90:56:8f:d2:cd:35:c0:d5:c7:ef:fa:b6:7b:d9:44:c9:29:a7:
ef:fe:72:d2:b3:cd:a4:61:1f:b6:0e:04:29:c8:40:f6:d3:65:
f7:fb:87:fb:90:ec:06:1d:8e:ce:9c:6d:f7:43:5c:b5:4f:80:
d2:c9:82:89:05:68:ca:c9:06:b3:c5:55:ef:36:d8:7e:f1:12:
9e:85:15:05:14:2b:fb:1c:57:9c:02:43:90:f0:f0:b3:39:08:
b9:74:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:56 2025 by rpki-client