Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: hN0tOczqO0HPO5oBX4axebcjR5K0Wcf5LeV3fKsML88=
Subject key identifier: 13:4F:BD:8A:8D:D9:5A:F3:F9:52:D6:59:1D:3F:E1:07:E8:4A:2D:84
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 019A7225B38BE73041CE4655D2F08646D929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 066D
Signing time: Tue 11 Nov 2025 09:01:04 +0000
Manifest this update: Tue 11 Nov 2025 09:01:04 +0000
Manifest next update: Wed 12 Nov 2025 09:01:04 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: f3SbhJx0zhI94oG+gtQFEOOu29kmScp/qiFg33Q3M2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b3:8b:e7:30:41:ce:46:55:d2:f0:86:46:d9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Nov 11 09:01:04 2025 GMT
Not After : Nov 12 09:01:04 2025 GMT
Subject: CN=134fbd8a8dd95af3f952d6591d3fe107e84a2d84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5d:79:5e:73:e2:a7:f7:0b:2e:b3:71:9e:b2:
1b:23:1a:71:a6:83:50:8d:ca:0b:1e:de:7e:05:1c:
10:30:d1:fb:e1:03:a9:86:c3:59:04:a7:9e:b9:4b:
95:50:76:62:25:9b:7e:61:ba:f6:03:48:bc:0d:2c:
2b:7a:37:f4:85:6c:48:87:e2:bf:db:87:b3:55:6d:
0d:8b:0d:f9:62:0a:7f:a5:51:6d:56:a7:72:76:ec:
e2:a3:93:c0:b4:a0:34:5b:cf:bd:ff:44:b9:c5:4b:
b7:b1:42:64:70:8c:c1:47:d4:ed:a8:f6:58:79:24:
57:36:27:14:e3:38:be:95:d8:fc:26:75:84:02:76:
2a:98:6d:e1:32:e3:c7:54:6f:4e:2b:e4:33:60:f5:
89:a1:09:85:7d:8a:46:3e:3f:a9:34:75:c6:3a:50:
7b:f3:d1:a3:97:bb:18:0f:90:9c:51:9a:35:ff:6b:
ce:44:fd:e4:e1:8a:61:e8:3f:a4:6b:a5:d4:69:8e:
7b:3a:4f:96:11:a9:44:eb:de:ac:68:89:74:8a:0f:
b7:90:5b:59:a6:3c:46:46:6f:e3:e6:20:8c:e6:d4:
d6:fe:27:90:29:db:2e:0d:08:a4:14:f8:38:aa:96:
98:53:f1:56:54:a6:10:ea:bd:76:39:98:38:6d:98:
47:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:4F:BD:8A:8D:D9:5A:F3:F9:52:D6:59:1D:3F:E1:07:E8:4A:2D:84
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:89:a4:d6:02:b1:47:38:77:22:5a:fe:8b:11:c2:1c:94:98:
36:48:3f:33:c4:46:88:a7:0a:30:06:fd:49:45:fd:27:d5:8e:
4a:19:b2:f3:3f:9f:09:f5:14:50:17:a2:a7:4a:49:6b:84:a2:
30:1e:25:fa:bf:21:4e:8c:44:c3:3d:06:85:2c:59:58:e2:0d:
68:ec:50:71:2d:a0:cf:4e:32:5d:8c:dc:c6:61:87:24:4d:51:
2a:01:d3:48:92:2a:2f:3f:4d:5e:e2:98:09:78:04:c9:40:f5:
91:e5:3d:0e:3d:58:23:f4:c7:4d:69:96:1c:71:f0:d5:c8:b0:
4d:72:e1:06:5c:cc:b6:ce:7a:95:56:c5:3f:b3:be:f6:90:9a:
c8:01:b4:0b:15:08:ce:6b:bd:6e:21:0c:b5:71:db:1a:78:3d:
d6:ed:cd:fa:6f:6a:c5:15:21:4f:c9:d0:9a:af:ba:0d:6b:1f:
22:03:aa:65:91:08:f6:c4:d2:14:7a:02:44:e2:6a:0a:3c:d3:
d1:0a:5b:8c:35:b4:5a:b0:36:26:7b:84:bf:f5:04:14:06:79:
dc:d4:34:be:f2:6b:fb:74:3a:71:69:96:d7:42:26:38:ea:99:
f3:ee:ab:68:42:73:f5:34:cc:54:dc:d8:37:c1:97:ba:e1:74:
89:96:47:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:54 2025 by rpki-client