Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
File: 1-38ZGo278fExR0l1NY8kRNaVDoI.mft (raw, json)
Hash identifier: 1Vc93nXeVcw89jdfgBVZ8pQukMNdTRvceSfUpKT0zUc=
Subject key identifier: 13:A8:48:D2:E8:CC:E9:12:CB:4F:37:AF:4B:E1:E7:95:8D:34:1F:2A
Authority key identifier: FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
Certificate issuer: /CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Certificate serial: 019A71809AF44211A536024125833928B150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
Manifest number: AB
Signing time: Tue 11 Nov 2025 06:00:44 +0000
Manifest this update: Tue 11 Nov 2025 06:00:44 +0000
Manifest next update: Wed 12 Nov 2025 06:00:44 +0000
Files and hashes: 1: 1-38ZGo278fExR0l1NY8kRNaVDoI.crl (hash: eJ9LhoW3XvLVeKBqBj0RsAVlVhA7SvtzRdi+9Tmn+CE=)
2: _uXBkuhUshA9qmVceLo2r4NfxjI.roa (hash: eLDt5MUCNFk11wBf0J4j69ReU2zTScT7dm7QbxFh55c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9a:f4:42:11:a5:36:02:41:25:83:39:28:b1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb7f191a8dbbf1f131474975358f2444d6950e82
Validity
Not Before: Nov 11 06:00:44 2025 GMT
Not After : Nov 12 06:00:44 2025 GMT
Subject: CN=13a848d2e8cce912cb4f37af4be1e7958d341f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8c:dc:03:f5:b2:ac:2d:9a:7c:57:22:a8:00:
35:71:b8:80:3f:1d:10:93:50:da:ad:29:21:5a:09:
89:79:47:76:2c:28:94:b9:d6:82:fc:f8:1a:d4:a3:
b9:6d:bc:2d:78:07:3d:90:c7:db:1f:03:47:e6:a9:
1b:df:08:9c:5e:e2:e9:dd:ff:bb:1e:8a:a1:7c:7a:
0a:53:26:58:a2:ee:40:e6:36:4a:56:16:32:a1:e0:
a9:b0:3f:c3:f1:e5:b3:03:15:06:04:0c:8f:e7:52:
9e:4c:27:67:f6:5d:79:da:5c:35:31:9e:0b:83:30:
a4:e7:e0:f6:17:93:75:85:51:39:0d:51:96:ec:3d:
43:51:3d:9a:0f:c2:74:06:e7:10:2f:03:d3:bf:51:
5a:31:b5:56:27:7d:d4:be:b0:06:3f:1f:ac:14:8e:
85:91:b6:57:05:e7:75:54:9c:4d:ab:2c:01:72:16:
cb:02:f4:83:d6:1b:b4:ec:db:a3:6c:c4:b9:2b:23:
f0:17:b6:41:2f:36:c2:1a:22:97:17:b8:ff:33:ff:
ad:c1:cc:db:3d:6e:ca:a7:f3:e1:15:0f:2c:24:1c:
9a:2b:c1:ae:5e:55:d6:3a:a1:46:8a:c4:1c:d5:fb:
fa:d7:6d:e8:1d:5a:01:50:f3:55:7b:2d:8e:cd:76:
5f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A8:48:D2:E8:CC:E9:12:CB:4F:37:AF:4B:E1:E7:95:8D:34:1F:2A
X509v3 Authority Key Identifier:
keyid:FB:7F:19:1A:8D:BB:F1:F1:31:47:49:75:35:8F:24:44:D6:95:0E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-38ZGo278fExR0l1NY8kRNaVDoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/22f0a8-b6f0-44b6-9aa1-8747daa593f2/1/1-38ZGo278fExR0l1NY8kRNaVDoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:27:a2:a0:86:39:56:cf:4d:96:1c:da:af:97:ea:b3:e5:c6:
ae:be:77:eb:93:d4:69:20:05:23:49:42:61:4b:22:4d:f1:9f:
67:cf:cc:c2:33:e5:33:99:cd:28:3f:aa:a7:0f:20:d1:c1:4b:
a2:aa:b6:4f:af:cb:70:6a:5b:fd:83:07:22:69:54:d2:eb:71:
70:ef:a6:67:15:57:57:b1:62:d9:c3:c6:fc:c2:05:61:56:57:
02:86:f8:1b:8a:37:c6:50:e7:09:cd:95:e0:55:08:37:62:8d:
99:64:87:79:a4:4c:83:42:37:84:fc:88:9e:22:e7:17:50:ea:
9b:79:66:80:2b:8d:22:a0:5e:b1:78:2d:86:49:78:48:34:7f:
7f:e5:bf:43:43:22:d5:9c:77:8d:a9:d2:1d:0c:65:b7:1d:d9:
e5:ce:6f:40:c8:74:6b:7f:d1:89:85:9f:32:79:0b:e1:4c:99:
0f:2f:94:78:68:88:19:93:97:84:f9:54:d5:49:15:96:69:67:
6e:a8:23:2d:ff:55:36:31:5c:e0:73:81:72:ab:94:7c:45:bf:
68:43:1a:24:7a:8c:34:41:d9:40:be:cc:c5:6b:79:17:af:35:
c7:2b:6e:a2:3a:ae:fb:d7:03:86:91:44:b3:21:27:1c:c8:c7:
49:4d:47:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:26 2025 by rpki-client