Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: 2O9yV/sQf61T6onHNUzL8BFZp5jcZxog1N9JK7ZGKaU=
Subject key identifier: AD:AE:7F:47:BA:0E:D1:DE:9C:BC:49:08:9C:18:50:7D:D4:F2:47:0E
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 019A7149ABFCE99458799B967AB7902A74F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0C57
Signing time: Tue 11 Nov 2025 05:00:44 +0000
Manifest this update: Tue 11 Nov 2025 05:00:44 +0000
Manifest next update: Wed 12 Nov 2025 05:00:44 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: GXyT8ss9tSOtR9PeeZOQIe3rUbD3LqHWYIhlLGw0GlU=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ab:fc:e9:94:58:79:9b:96:7a:b7:90:2a:74:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Nov 11 05:00:44 2025 GMT
Not After : Nov 12 05:00:44 2025 GMT
Subject: CN=adae7f47ba0ed1de9cbc49089c18507dd4f2470e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:99:6e:df:23:2e:dc:02:80:f8:4a:e7:7c:
4a:18:48:26:48:95:71:30:fe:97:b8:2b:43:2d:1f:
f7:39:28:ca:f2:bd:c2:4a:b3:bc:9e:37:b3:44:73:
40:15:9d:fe:d2:94:38:1f:9f:53:45:f0:2e:f8:f2:
8c:68:0d:80:31:76:c6:33:52:07:ee:1d:3e:2d:f5:
a8:0f:2b:27:7a:96:6f:03:eb:5e:54:47:86:ac:4c:
08:e6:43:61:83:e4:80:05:31:7f:8f:c3:f1:d3:f5:
c1:e9:22:7b:9d:4c:29:37:ef:8b:1b:53:69:18:45:
dd:07:5b:fc:0a:a5:11:66:41:b5:2f:ad:db:b6:7d:
72:ec:f7:c7:1c:5a:c8:ae:73:16:0f:d1:ad:d2:28:
fa:43:70:c3:ef:cf:2a:61:bd:fa:b8:c7:3a:b0:06:
ca:42:31:70:b3:62:ac:d8:08:ed:bb:d0:8e:93:b3:
cc:7c:15:26:24:24:0f:25:5a:53:fa:ba:61:03:76:
aa:92:47:35:ec:2c:77:2f:2c:a6:4c:fb:30:5d:7a:
08:12:5e:a1:09:dd:77:e4:1f:50:c8:13:6b:56:6b:
23:d7:09:a7:0d:f4:d5:a8:db:6a:d8:d0:56:c3:df:
6a:8e:53:3f:22:03:19:6d:50:c6:4b:05:54:3c:f5:
75:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:AE:7F:47:BA:0E:D1:DE:9C:BC:49:08:9C:18:50:7D:D4:F2:47:0E
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:1d:59:6c:f2:ff:b1:d7:a0:ca:cd:f0:90:de:58:3d:67:3e:
d8:b5:db:93:f8:22:48:64:4b:bd:38:d1:33:39:b7:6f:3b:9e:
15:fa:2a:57:b7:7f:be:7e:6c:95:9f:e6:b4:e9:7c:34:28:11:
a9:91:56:7b:f3:07:aa:ea:3b:ae:4e:fe:b7:40:57:ec:18:b8:
7f:32:fc:4d:e8:ab:a0:55:43:16:b8:17:f1:0e:ac:fc:9a:b2:
ad:36:da:c6:91:6c:d0:6e:95:bc:71:5d:ee:7d:e1:f8:1d:01:
b3:0f:9d:4c:bd:aa:12:03:9e:77:ac:12:a1:15:c1:a8:08:4a:
e9:a9:4d:38:af:08:ad:55:4e:91:60:4c:5d:3b:ac:62:f7:fb:
55:40:61:e7:04:4b:e8:05:2c:73:74:ee:e1:4c:2d:59:e3:2c:
90:37:a5:de:f1:db:33:20:41:aa:2f:79:96:76:ed:0d:17:a2:
06:86:d5:bb:cf:5c:48:fd:ca:18:75:12:29:66:a7:33:57:77:
2a:bb:6b:5f:66:51:20:fd:03:4b:06:f4:88:8a:69:1b:13:51:
9e:f6:87:84:64:3d:4d:b1:38:6e:8b:ea:11:6e:03:ee:7b:70:
1e:62:74:f1:5b:9a:3e:af:2d:c2:b8:6d:b5:fc:38:55:5a:7d:
96:d6:92:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:49 2025 by rpki-client