Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: Ge2oeVZUJjtkXvzjOFWDrT7mMxI/XCU9f9g/tBiGhq4=
Subject key identifier: EE:D1:1C:46:37:83:C2:B7:7E:6A:7E:7F:C3:CA:EF:AC:51:5D:43:0B
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 019A06DBB9EC0126C2FF76289CA33A6D7595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0936
Signing time: Tue 21 Oct 2025 13:00:54 +0000
Manifest this update: Tue 21 Oct 2025 13:00:54 +0000
Manifest next update: Wed 22 Oct 2025 13:00:54 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: wKcral5sBK3a22iRIcx2xqH6/ekHx+2cf0oo1LrohkQ=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:db:b9:ec:01:26:c2:ff:76:28:9c:a3:3a:6d:75:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Oct 21 13:00:54 2025 GMT
Not After : Oct 22 13:00:54 2025 GMT
Subject: CN=eed11c463783c2b77e6a7e7fc3caefac515d430b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:5f:5e:3e:6e:58:39:69:33:4a:68:7c:52:
8c:8c:6f:ec:9e:43:e3:a3:9d:0e:93:9e:f2:48:b8:
67:64:24:20:33:2a:02:4b:d4:31:04:95:c8:29:78:
a3:91:51:b2:27:12:5c:f8:ee:f3:a5:91:7a:1b:20:
81:30:02:59:c6:ee:c3:97:49:4e:83:27:e7:02:81:
4b:09:41:b6:d4:d8:ad:45:ce:dc:43:70:f9:57:6c:
05:a2:f9:ba:26:42:cf:28:62:ca:9e:02:b6:e8:58:
66:19:72:54:9f:f3:ba:46:df:e1:d7:3b:2a:4c:8f:
d4:e3:e7:01:20:89:35:d3:20:8e:53:87:03:24:dd:
bc:2e:ea:51:8e:e4:88:3d:14:1f:0f:65:d7:de:cc:
f1:8a:a8:75:d9:5f:43:97:8f:0f:e1:30:4f:62:c1:
86:f8:99:1f:b3:b2:ac:10:c2:da:7d:06:13:58:65:
6a:ff:8e:52:9e:c5:5f:fc:5e:cc:28:31:c3:89:21:
1d:c6:d2:68:99:cb:32:47:df:09:5b:dc:5c:2c:4f:
4d:32:6b:3c:ec:72:55:36:02:38:c9:47:41:54:1f:
eb:22:c9:42:a7:97:11:8b:50:dd:f1:3d:c9:6f:b5:
1a:89:46:56:de:9e:06:8a:24:08:9d:62:27:20:ab:
7c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D1:1C:46:37:83:C2:B7:7E:6A:7E:7F:C3:CA:EF:AC:51:5D:43:0B
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f4:72:b9:b3:b3:d9:c7:46:0b:92:0a:4e:3c:63:d6:ce:35:
84:f5:2f:a9:2c:2c:20:b6:8f:53:ec:38:a8:e3:b2:1f:a9:71:
b3:be:bb:78:a9:ed:61:84:17:71:1a:54:ba:3b:ff:30:e7:f2:
e1:61:61:ad:ca:fb:b1:be:d3:61:b9:50:2d:d4:1e:da:6a:01:
e1:cd:c8:00:80:40:dc:0a:c1:ca:04:a4:66:a3:63:d5:d1:71:
bc:71:fa:08:e1:25:9d:b3:84:b5:73:60:c4:5a:61:f1:a8:68:
15:8e:8e:56:a0:41:8f:fd:40:f1:2e:17:d9:f5:74:ed:42:3a:
12:0a:4f:3a:73:34:46:c2:c0:2f:a3:1d:1e:40:6d:d6:49:8b:
3b:5b:ae:d3:a0:cc:3d:3a:cb:9e:38:55:b4:36:fc:df:9c:ef:
7d:a7:51:00:85:11:be:d2:7d:a9:5b:77:dc:d8:3e:29:ec:36:
bb:c7:79:1e:94:97:c4:74:db:5c:50:16:10:9c:c0:b7:94:35:
62:82:c6:e0:00:c3:64:78:f0:ec:a8:5d:5e:5d:e4:d3:a1:42:
f0:59:5d:68:75:76:44:e7:c6:54:8f:a6:eb:7f:2a:a9:17:64:
7b:9d:72:29:ed:e7:34:9a:7c:1a:1e:2b:19:ae:e9:83:bb:74:
12:db:a6:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:28:40 2025 by rpki-client