Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
File: 1-zZG-6aQRe3l745cOaL8F_nw0tw.mft (raw, json)
Hash identifier: fkdFI24oSkkZWRO2WaEgbo4Jb26WVXdW6rp86fStN5A=
Subject key identifier: AC:3D:B8:A2:A1:A4:AC:40:D5:4A:A0:49:7D:DB:02:F1:80:89:35:32
Authority key identifier: FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
Certificate issuer: /CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Certificate serial: 019A73388D5E5E79889AB7DA82BB57C77260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
Manifest number: 0E16
Signing time: Tue 11 Nov 2025 14:01:17 +0000
Manifest this update: Tue 11 Nov 2025 14:01:17 +0000
Manifest next update: Wed 12 Nov 2025 14:01:17 +0000
Files and hashes: 1: 1-zZG-6aQRe3l745cOaL8F_nw0tw.crl (hash: hBr6/qLSno5yn7ymF+/1dJywZUueJTx7wt2NuigvwKI=)
2: FLK4BXajTTtzozg6zwS2W0dW8TU.roa (hash: TZ26mwHHQp1z9Q90vDXRes8PV7AQXwe9m95HyPKhgHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:8d:5e:5e:79:88:9a:b7:da:82:bb:57:c7:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3646fba69045ede5ef8e5c39a2fc17f9f0d2dc
Validity
Not Before: Nov 11 14:01:17 2025 GMT
Not After : Nov 12 14:01:17 2025 GMT
Subject: CN=ac3db8a2a1a4ac40d54aa0497ddb02f180893532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:fa:5b:b1:e3:f5:20:44:16:61:f2:45:4c:
44:a2:df:6e:c7:d2:e6:40:18:7f:ed:0a:9a:8e:f8:
dd:22:d2:32:e9:8e:54:16:5c:a6:8b:20:25:57:24:
98:e2:bb:fc:87:7c:f1:3b:44:f2:6b:82:61:49:23:
45:c5:e9:4d:71:32:5c:a9:67:ff:1a:8f:82:fe:55:
93:78:d4:1d:b6:06:a1:7a:df:15:75:b7:51:93:41:
e3:a4:d0:09:8e:4c:2c:e2:39:ce:1c:be:fc:17:ea:
d0:48:b3:91:1c:16:9f:9f:7b:d5:6f:ea:b5:72:c6:
b2:9e:6b:2c:30:68:07:f1:8c:25:60:2d:ab:1d:12:
2f:9a:f7:aa:9a:01:1e:de:0f:34:c1:7a:cc:f5:73:
0b:db:a8:ac:91:46:dd:c4:ed:ed:32:bf:b8:38:10:
3e:8f:f5:a1:d3:90:b9:5e:ca:cf:db:e0:a8:a2:9e:
f6:ce:24:7b:3c:d4:fd:f0:9c:9c:5d:d1:6d:9a:d3:
28:e5:ac:d5:51:f3:97:e4:a3:19:ba:6c:78:af:b6:
b2:1b:f3:4f:b2:59:a4:00:89:86:f0:be:aa:ff:23:
15:f3:78:85:23:39:e0:ff:fa:05:a3:0e:a6:71:db:
f6:9d:ba:2e:d8:83:f8:92:52:46:60:2c:ee:3b:cf:
0c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:B8:A2:A1:A4:AC:40:D5:4A:A0:49:7D:DB:02:F1:80:89:35:32
X509v3 Authority Key Identifier:
keyid:FB:36:46:FB:A6:90:45:ED:E5:EF:8E:5C:39:A2:FC:17:F9:F0:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zZG-6aQRe3l745cOaL8F_nw0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/706f54-87a5-45e7-bf22-8a6b547666aa/1/1-zZG-6aQRe3l745cOaL8F_nw0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:9d:bb:da:71:17:a6:1b:9e:93:76:df:fe:b9:70:17:7f:f4:
8a:64:7d:00:cd:61:aa:10:62:e1:b3:69:a8:53:95:e2:55:fc:
14:93:49:a4:59:3c:ed:2e:54:f9:0a:38:55:b1:7b:09:77:78:
ae:f3:6d:75:a5:c8:8e:1d:21:ee:d8:b8:f2:20:ab:f3:f1:05:
41:4a:1f:fe:23:f8:23:ed:68:89:c1:76:81:62:12:b4:5d:85:
d1:03:d1:49:88:2d:60:bc:93:1a:77:e7:48:43:2b:cd:fb:7c:
90:d2:63:7c:95:18:9c:ee:f9:0a:1b:e0:03:46:e5:51:3b:53:
f6:5e:06:b2:cd:c9:9f:41:96:ef:2f:6d:6e:98:bc:4d:67:44:
b5:2d:55:e2:4d:95:31:dc:33:14:f4:70:bd:2f:55:ac:a4:d5:
56:b3:fa:20:6b:13:77:e7:05:e1:77:52:74:5b:4a:62:23:e4:
c5:f8:11:11:4d:11:17:88:f0:58:1e:f2:0f:2f:c8:1c:59:5f:
10:50:25:66:0a:ec:44:1f:be:c6:5d:06:8c:9c:55:2a:64:41:
c7:66:5c:bb:0e:2e:2a:db:77:a2:8f:8e:41:d6:f6:4c:02:6f:
a2:31:59:09:1e:5b:52:83:41:23:c9:b0:33:08:d8:b4:f3:52:
32:5f:ca:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:41:09 2025 by rpki-client