Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
File: 1-RZH5UfEr05b3GWeTBT5H_nOigU.mft (raw, json)
Hash identifier: 1H4iE3DWcXgOia0JE9hMqmWHNwZqWhuPiXwCh0d9I60=
Subject key identifier: DA:09:8A:C4:63:CE:A9:BA:F6:95:C6:F1:EE:31:A9:06:64:77:6E:A2
Authority key identifier: F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
Certificate issuer: /CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Certificate serial: 019A221B7BFC333733BA9CADEB8B38E35FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
Manifest number: 3B
Signing time: Sun 26 Oct 2025 20:00:17 +0000
Manifest this update: Sun 26 Oct 2025 20:00:17 +0000
Manifest next update: Mon 27 Oct 2025 20:00:17 +0000
Files and hashes: 1: 1-RZH5UfEr05b3GWeTBT5H_nOigU.crl (hash: qCeITLC7dcqcZcbWmvdq8QS1+s1S6JkqjhMzuNrfpJs=)
2: 2WniE5dL7byWUDCeGxHoMJMqczE.roa (hash: IjkZ5kKZt7FJQZkAKdTzI1e8SsDRi0qw3ixu7BVqjpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:7b:fc:33:37:33:ba:9c:ad:eb:8b:38:e3:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91647e547c4af4e5bdc659e4c14f91ff9ce8a05
Validity
Not Before: Oct 26 20:00:17 2025 GMT
Not After : Oct 27 20:00:17 2025 GMT
Subject: CN=da098ac463cea9baf695c6f1ee31a90664776ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5a:5b:87:4c:3a:ce:5e:7f:e5:d3:e4:bc:f2:
65:7b:cb:7c:d1:73:ae:04:79:91:de:68:12:4c:7d:
60:4a:5f:8c:95:0f:7b:9a:45:d4:00:f6:5e:6d:89:
95:9a:2d:46:dd:5a:21:ac:6c:11:ac:91:b8:20:21:
a2:4e:03:21:41:90:9c:4e:89:f4:cc:06:16:88:4f:
db:46:b9:2b:d8:ec:86:e6:25:0a:28:13:9e:65:ac:
e8:a0:62:d7:76:5f:0f:3c:25:52:55:5d:94:51:ab:
6d:53:af:43:50:db:98:5e:83:df:f9:6a:52:38:e7:
7d:ec:7c:22:d1:c7:47:bc:a1:db:b1:95:0c:3d:3c:
ad:f3:b1:7e:47:30:2d:e4:b7:36:ca:d5:01:f1:2f:
dc:04:02:80:7a:be:4c:9b:89:8a:1b:cc:51:3e:70:
92:46:cf:40:2c:57:b1:fe:8b:75:1b:c6:f9:a3:bc:
16:fa:c3:2b:5e:00:a4:8f:f0:ae:3d:de:d3:c7:c8:
31:28:4e:cc:62:a6:e1:d9:ab:c5:d7:8e:10:20:1f:
2f:21:88:b4:49:33:62:41:b4:3f:a6:52:9d:be:05:
06:09:d4:28:88:61:26:a1:69:c5:da:07:d2:8d:18:
dc:1d:8a:22:ad:90:24:b4:c0:2d:b3:e0:e5:73:42:
fe:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:09:8A:C4:63:CE:A9:BA:F6:95:C6:F1:EE:31:A9:06:64:77:6E:A2
X509v3 Authority Key Identifier:
keyid:F9:16:47:E5:47:C4:AF:4E:5B:DC:65:9E:4C:14:F9:1F:F9:CE:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RZH5UfEr05b3GWeTBT5H_nOigU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/3e2663-1fb3-436d-ae75-214f87530baf/1/1-RZH5UfEr05b3GWeTBT5H_nOigU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:16:a8:e5:e5:9b:68:9b:67:e3:df:ec:ce:51:25:1a:0d:05:
b0:10:d5:14:62:23:e5:ac:b5:ac:63:4c:1d:77:ea:02:2d:8b:
45:f7:eb:75:80:20:83:f0:b8:67:b7:1b:93:0a:00:0c:fd:70:
16:a4:12:e4:43:8c:78:f3:72:47:c8:29:81:7a:00:ee:eb:c3:
b4:ad:42:c3:9e:30:7f:2c:2c:df:9c:3c:05:32:b5:43:32:d6:
ca:af:d6:4b:ae:e3:24:fd:63:e3:a6:3c:82:48:c2:5e:d1:79:
1b:4a:f6:c2:23:fd:cf:8b:08:ed:ae:54:3b:7b:0d:1d:83:b9:
32:00:d6:35:2f:da:11:28:a0:a9:2c:5c:ec:8e:af:60:40:0a:
58:ec:39:eb:14:ce:49:cd:6c:8e:28:b5:33:aa:7e:f0:39:4a:
4d:71:ca:c7:90:67:fe:c8:63:5b:ac:ca:75:0c:e9:5a:db:d9:
ed:12:75:a9:28:29:b5:4f:9a:62:ad:c7:d6:a6:53:55:e4:e3:
52:0c:ee:2d:c6:be:bc:65:aa:0a:f4:68:27:82:e9:48:db:ad:
29:f0:a9:e7:46:0d:1a:5b:12:8a:5c:9a:3a:b1:62:7b:fc:d3:
63:21:df:28:9a:6e:32:73:71:28:73:71:7a:22:0f:20:e3:88:
5b:63:88:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 03:03:02 2025 by rpki-client