Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: ANIkHZI4JPPVrpGtQdQbpHJBrAxvpcUgRho96o6lXnU=
Subject key identifier: 12:3E:A6:C9:46:34:35:A6:EB:B6:BA:7A:BB:78:F5:99:C9:D2:B9:E8
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 019A0A4A98FE61A098D33F882EBAAF0E7FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 108F
Signing time: Wed 22 Oct 2025 05:00:52 +0000
Manifest this update: Wed 22 Oct 2025 05:00:52 +0000
Manifest next update: Thu 23 Oct 2025 05:00:52 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: Ruk8v408rGW8A4G4EiKW+fgojomqcA9pCK/AwU+oDn8=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:98:fe:61:a0:98:d3:3f:88:2e:ba:af:0e:7f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Oct 22 05:00:52 2025 GMT
Not After : Oct 23 05:00:52 2025 GMT
Subject: CN=123ea6c9463435a6ebb6ba7abb78f599c9d2b9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a2:05:d2:8c:78:08:72:af:af:68:0f:a0:4a:
4f:ec:1e:37:b1:ac:60:32:12:c8:20:12:c0:2f:f1:
a4:77:0c:78:f7:aa:17:4d:4e:49:9b:e0:cd:3f:ac:
89:b1:8e:35:dc:b3:bd:d6:62:9f:4a:86:56:32:b4:
c7:f6:76:85:c4:a9:0a:03:9e:05:39:9e:b6:1f:1c:
7d:ac:32:5d:d9:f5:0e:bb:ae:a6:38:f9:18:0e:4b:
92:bd:61:26:49:70:16:7a:80:31:9b:2e:d3:1e:4a:
07:7d:c9:da:b9:fa:fd:a1:89:a7:72:b1:d5:7f:41:
ce:03:6b:22:a7:16:9a:16:cd:00:5f:8f:f2:74:ef:
3c:60:6f:aa:c7:25:99:ec:0d:1a:88:0d:55:cf:c9:
e8:e0:a1:0f:d9:48:53:e7:48:8e:e3:17:47:71:52:
32:db:09:b3:48:14:1b:4a:28:3a:27:9f:ca:22:10:
12:21:21:2a:31:19:d4:7e:08:dc:f1:29:60:72:44:
b9:df:8c:a9:c3:00:dd:57:30:cf:4f:63:81:fa:57:
fd:83:de:12:fa:2d:69:c3:31:b9:4c:ae:32:a1:11:
90:69:b3:65:78:22:e6:dd:8f:51:e7:71:ef:3f:fd:
ab:02:d4:33:7e:70:4c:46:62:87:78:01:76:90:19:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3E:A6:C9:46:34:35:A6:EB:B6:BA:7A:BB:78:F5:99:C9:D2:B9:E8
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:86:29:bf:bf:3c:14:93:5b:c3:76:40:e7:59:f8:3d:5f:
c2:6f:0d:38:49:86:02:a3:d8:4b:7d:5a:74:9a:ed:de:76:4a:
65:87:2b:b1:bb:f4:17:ea:09:64:75:aa:80:fd:09:80:2f:f6:
33:74:39:18:14:65:f7:26:56:07:2a:b5:7f:b3:bc:ab:33:c0:
e7:db:a0:a5:8b:55:ee:53:b6:1f:4b:74:a3:6a:7e:98:71:fb:
93:bf:a5:f0:07:06:d5:a1:7a:6d:8d:a1:ba:30:c2:35:36:98:
3d:28:1c:92:ad:16:fb:ce:2a:48:0e:68:6b:c2:33:ec:6b:5d:
12:a0:bf:03:a2:8f:5f:8a:06:9a:e5:53:e5:90:37:7f:f8:e5:
28:4b:63:28:03:d2:29:d3:24:34:fe:56:c9:91:a8:3c:6a:89:
e5:ff:e9:5d:b9:a9:85:c3:a1:cb:ec:57:b6:2c:04:15:91:f3:
1c:2c:63:33:ca:b7:33:7c:e2:44:9f:54:b2:34:22:02:63:b4:
fb:0e:fd:30:f7:eb:52:24:13:84:57:fa:63:49:e9:af:4d:de:
fe:1e:a2:57:b8:9c:04:d0:2c:14:64:3e:ac:50:44:1b:5f:9f:
08:da:90:63:74:f5:56:d0:a4:a7:78:99:94:3b:cf:74:98:1d:
f6:6c:3c:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 11:56:00 2025 by rpki-client