Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: jFL9YvxhvI+mZPxkW6fFfS5tPZyhmNGgHB68HJpYWvI=
Subject key identifier: 3C:8A:C1:9F:03:B7:5F:9E:73:33:A8:63:93:3B:D5:FC:A9:41:F9:7E
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0199221F2C7BAD0E3DDA1AE8D3D1009542BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 05BF
Signing time: Sun 07 Sep 2025 03:01:32 +0000
Manifest this update: Sun 07 Sep 2025 03:01:32 +0000
Manifest next update: Mon 08 Sep 2025 03:01:32 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: t0eIFR89tTOEvxmLypTcjopeNb+gvEQ2C3vaPkodGOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:2c:7b:ad:0e:3d:da:1a:e8:d3:d1:00:95:42:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Sep 7 03:01:32 2025 GMT
Not After : Sep 8 03:01:32 2025 GMT
Subject: CN=3c8ac19f03b75f9e7333a863933bd5fca941f97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:65:6a:84:09:ac:84:f5:c3:96:f0:2f:3b:c9:
41:23:48:93:73:6a:e7:c7:bc:ca:3e:f8:f2:bf:cd:
83:de:a9:f8:42:77:7c:39:69:ce:64:02:11:14:19:
76:ef:ce:30:bf:fe:08:b1:0a:51:a9:dc:73:d1:41:
92:45:9c:d3:39:e5:e1:85:26:ac:bd:75:75:62:9c:
6b:03:d4:88:3e:a6:77:ea:6a:7a:3b:7f:27:b5:27:
2d:92:5f:3a:dd:ae:fd:b8:6a:71:8b:70:f1:95:a6:
fc:ca:29:80:d7:3a:23:78:14:7d:e8:06:af:9f:c4:
23:81:7b:99:e0:01:ff:d7:0b:0a:36:ed:ed:38:7e:
6e:2f:02:4a:6f:ac:db:5c:4f:4e:6e:a9:ed:e8:96:
7c:79:b4:a3:49:77:08:3e:c4:90:09:42:2e:1e:43:
b7:67:60:bb:a1:bd:1e:f1:bd:61:4d:c3:64:df:6d:
7c:a3:3b:c1:bd:69:2d:57:de:2a:1b:96:62:9e:d2:
8e:d1:c0:24:44:3a:2d:f6:da:15:c0:bc:86:b9:65:
fe:f0:4c:20:62:bc:43:0b:f5:e9:d8:68:1d:b7:c8:
09:25:1f:14:50:03:47:ce:8e:e1:64:96:39:6e:6b:
36:c5:44:a3:b8:9f:2a:d1:cb:93:49:24:b8:d3:5b:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8A:C1:9F:03:B7:5F:9E:73:33:A8:63:93:3B:D5:FC:A9:41:F9:7E
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:13:42:e3:a6:7c:2a:52:eb:04:d3:e8:b4:7f:a1:92:d7:68:
e9:00:3a:10:9e:e3:4d:52:25:50:95:19:c7:b3:5e:a3:ab:b5:
af:20:c3:85:26:5c:b2:ee:86:26:5a:12:e4:39:a0:4d:ac:de:
d9:09:be:56:9d:6e:c5:1b:92:d9:52:fe:8e:ee:71:d1:82:12:
0c:dc:5c:fc:71:c0:6f:04:48:ac:e1:e6:3a:5c:c6:25:82:51:
d1:b2:88:25:bd:ac:19:2e:49:06:35:cd:b7:23:17:e6:1c:e8:
e6:8e:ee:66:3e:10:d5:52:cc:04:06:49:42:fd:c9:28:72:a9:
32:ee:26:67:3f:b7:cb:da:af:12:0a:32:c4:54:e6:27:1b:1c:
f6:ba:23:16:23:99:ad:50:04:97:99:ae:ee:83:ec:bd:45:94:
7a:b8:83:94:68:64:fc:60:5f:c7:30:70:a5:92:ef:c3:bf:b6:
da:9f:6e:70:f6:71:de:20:13:91:d8:f5:01:ef:a6:2f:92:d8:
46:0b:ba:81:85:71:9f:d7:22:4e:19:87:44:ad:0b:60:53:a1:
c7:d9:ce:25:fa:0f:d6:22:33:c6:c6:15:42:28:7e:6e:7e:d3:
32:16:7a:08:5e:ca:24:23:5c:cd:92:fd:1c:10:35:f2:79:95:
45:12:9a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:07 2025 by rpki-client