Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
File: 1-9JdpktGOvOLRE_zcxGxVm31_LI.mft (raw, json)
Hash identifier: P6GW+OSSR7ZyvK7BXDO7+AKL21uzKNTy3mFm7DBAJ8o=
Subject key identifier: 34:2D:E2:59:FE:55:B9:58:98:0B:85:6B:68:7E:14:2F:F7:8C:DA:D1
Authority key identifier: FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
Certificate issuer: /CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Certificate serial: 019A2A799B3A029E04C70B46BE8C13DB2E1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
Manifest number: 16FB
Signing time: Tue 28 Oct 2025 11:00:03 +0000
Manifest this update: Tue 28 Oct 2025 11:00:03 +0000
Manifest next update: Wed 29 Oct 2025 11:00:03 +0000
Files and hashes: 1: 1-9JdpktGOvOLRE_zcxGxVm31_LI.crl (hash: s4/mKwbztrEeTTJMPugxiMVXZWPhI5oSd2FhzzZnmLI=)
2: 3GvpHIxxSBOh_JH9oQawEJfN78g.roa (hash: m/cK1kN4KKcnsjbPKB2PXLCdGbbG3lcfoo431XMf3kI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:79:9b:3a:02:9e:04:c7:0b:46:be:8c:13:db:2e:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd25da64b463af38b444ff37311b1566df5fcb2
Validity
Not Before: Oct 28 11:00:03 2025 GMT
Not After : Oct 29 11:00:03 2025 GMT
Subject: CN=342de259fe55b958980b856b687e142ff78cdad1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:64:7f:93:b2:99:a1:15:4c:05:34:5c:09:c1:
e4:63:f4:29:f3:b2:e7:6f:f9:5d:a3:fe:4c:e8:92:
6f:34:5a:91:6c:98:46:1f:00:1b:3a:aa:26:22:9b:
bb:35:dd:8e:ab:0e:57:46:b1:3f:dc:90:7c:c0:ff:
a0:db:6e:d7:95:56:04:5f:48:b3:90:fb:fb:87:58:
f2:03:5f:8f:aa:ac:2d:c4:b3:b4:0f:b9:1c:ff:5f:
65:77:e3:03:c5:86:29:bb:93:8d:59:bd:7d:e4:ef:
e6:d4:90:56:12:33:41:ff:52:65:20:b9:e3:28:b2:
39:0e:63:53:33:03:85:cc:cb:1e:1b:9c:4f:e0:ca:
e6:31:27:a1:6d:b1:46:2e:49:a1:7a:41:16:61:7e:
31:22:4d:3b:18:c2:ef:66:4b:2a:c7:14:5b:e1:8c:
48:d1:a6:b3:2e:97:4f:76:dc:cf:a3:c3:b4:43:0f:
d4:7f:bb:ae:bc:37:c6:9e:e7:a5:b8:4c:74:d5:11:
15:b6:4b:7c:cd:e0:71:69:59:fd:2e:80:96:ce:df:
3f:76:76:91:d0:7d:29:0c:b1:a7:1d:df:9a:73:46:
63:32:9f:d0:82:2d:9e:00:4d:ae:1b:87:f9:c9:72:
9f:fd:ed:1a:c4:cf:57:a8:10:65:51:ea:b4:09:ff:
e8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:E2:59:FE:55:B9:58:98:0B:85:6B:68:7E:14:2F:F7:8C:DA:D1
X509v3 Authority Key Identifier:
keyid:FB:D2:5D:A6:4B:46:3A:F3:8B:44:4F:F3:73:11:B1:56:6D:F5:FC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9JdpktGOvOLRE_zcxGxVm31_LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fa65e8-e597-4738-8396-825ec1075de6/1/1-9JdpktGOvOLRE_zcxGxVm31_LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:9e:b9:64:b1:94:0a:46:e7:f6:fa:15:76:c0:99:8c:bf:1a:
ec:df:2e:37:65:d1:38:be:94:fd:97:35:36:73:ea:12:12:ea:
22:8c:f9:4e:ab:6a:1b:cb:c2:e3:c3:c9:80:87:5c:86:20:7e:
9e:5d:88:33:68:6c:48:b6:5b:42:8c:37:f3:c7:8f:93:86:0c:
80:16:69:27:4e:63:1f:6d:ae:00:c6:8d:18:3e:a8:95:09:78:
8c:ae:ea:8e:b4:8c:e1:bc:d9:e8:39:a5:d3:50:80:27:2a:c8:
84:15:e1:17:4d:59:70:c4:94:a9:dc:f9:e7:e3:1b:d7:cd:64:
12:34:f8:58:19:92:65:ea:74:0f:c2:8b:2d:03:0b:0f:dc:fb:
61:32:52:9e:5b:a3:a5:3e:81:95:e8:cd:f4:03:2b:bc:d7:e6:
55:eb:b2:e1:24:62:67:54:65:b0:71:0f:a8:0b:6e:5d:82:10:
24:2c:11:ef:91:e2:ba:3c:58:89:2e:20:7d:16:36:a3:37:4c:
26:fa:10:20:40:00:e9:5a:62:4b:92:73:1e:41:af:d1:32:f7:
78:54:b8:aa:f4:cb:15:7c:a8:76:67:81:ab:32:9f:a3:01:88:
a5:0a:28:a4:cb:f7:4f:2a:8c:51:04:2b:78:97:58:2f:c2:c1:
fb:1b:1b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:56:35 2025 by rpki-client