Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json)
Hash identifier: HQkv204o0zEuWHVJSI0/EBa01g7Bw6VXwQhzPMKTnnQ=
Subject key identifier: C7:EB:12:3C:C7:3A:D2:3D:75:09:BB:4B:1C:FC:FC:30:F3:5C:4A:46
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 019A7112D99EEDEA08BABB7D24A7300C89DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
Manifest number: 152C
Signing time: Tue 11 Nov 2025 04:00:51 +0000
Manifest this update: Tue 11 Nov 2025 04:00:51 +0000
Manifest next update: Wed 12 Nov 2025 04:00:51 +0000
Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: 8gLTTECrdFKuPvx90z00FIMXkVMvcDUv1yVDQ3PCsjI=)
2: BkhUnEeKLpdw7zqQsCW8fb_TG_I.roa (hash: krWgcFHtgzZmGIlUNG6InVr0KfezPC+cFYoPcdTkKaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:d9:9e:ed:ea:08:ba:bb:7d:24:a7:30:0c:89:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Nov 11 04:00:51 2025 GMT
Not After : Nov 12 04:00:51 2025 GMT
Subject: CN=c7eb123cc73ad23d7509bb4b1cfcfc30f35c4a46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:24:e6:fb:7b:37:5f:a9:50:1f:c6:f9:ac:
f1:81:a6:47:2f:60:63:f6:0f:50:6d:81:28:0b:a0:
55:95:a9:90:0c:01:98:9a:c9:94:70:ec:c6:c7:47:
ec:63:d9:ba:e9:12:36:64:66:bb:01:45:1f:a3:0a:
0c:cc:d3:b6:3d:c1:5a:9e:86:80:50:a9:31:55:49:
09:08:18:9e:b2:a4:ae:bb:8f:c8:71:52:d0:b5:cb:
63:bb:68:15:6a:5a:80:76:5e:64:8f:25:e1:a2:c5:
d7:cf:1a:a8:5c:81:5f:cb:b7:40:95:9f:9d:12:7e:
da:20:0e:d5:da:f8:b7:6c:53:a6:ad:71:c5:27:ba:
96:59:be:6a:66:df:c8:5d:b3:41:da:7f:14:5a:b7:
36:60:2e:5a:b2:d4:ae:df:47:2d:64:80:f8:ba:6f:
fa:e0:09:f9:b4:26:d5:8e:c2:58:24:8c:05:af:fa:
39:f8:c5:c1:83:31:db:e9:0e:88:5c:c4:83:09:19:
14:36:d7:79:ee:f9:04:17:ca:d8:63:a8:a9:0e:e5:
20:e1:5e:30:54:fc:af:04:1b:9a:22:04:90:ce:c2:
1d:37:e1:e1:fa:24:b6:0f:c5:40:a0:d6:30:0e:78:
8f:02:6a:72:67:2a:64:4c:d3:fc:52:a0:3a:93:84:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:EB:12:3C:C7:3A:D2:3D:75:09:BB:4B:1C:FC:FC:30:F3:5C:4A:46
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d1:cd:5c:93:e9:80:46:13:6c:df:70:b6:3a:9f:00:a7:d5:
31:66:ac:fe:43:2a:c3:62:60:a6:b6:16:6a:4c:0f:d1:4c:a4:
43:1e:83:35:8c:34:6c:eb:2e:97:9b:8c:2c:32:53:1f:08:58:
d9:94:9e:eb:b2:24:25:c4:46:56:5a:ce:74:c2:4c:35:e0:12:
a6:78:55:49:21:06:1b:b1:fa:10:66:f9:eb:28:bb:21:2a:ab:
65:60:f3:b7:6a:ac:a4:16:68:d8:e7:51:10:cf:33:e0:9e:f3:
ad:50:b0:a6:4b:6b:72:af:52:96:f9:3d:86:e4:9d:e2:7f:1b:
58:02:e0:07:be:3b:84:27:ed:da:86:4f:2d:23:02:00:12:47:
80:11:0c:d5:b7:31:60:a4:ee:85:30:28:b8:ed:bd:ff:f0:53:
d5:6d:18:5d:0d:3b:ee:df:c5:20:d0:4d:2c:25:83:75:76:c4:
14:3c:a8:d5:f2:f1:24:5c:6e:f5:0a:6d:e1:e0:46:6d:28:62:
fc:4b:8d:54:e5:13:db:78:d6:a5:ac:bd:05:ea:a1:80:df:9a:
fb:62:1c:1d:30:90:9b:6b:54:03:dd:9d:a9:77:dc:f6:3f:da:
8c:17:5b:40:2d:d5:8b:14:09:9d:b6:61:f3:58:cc:dc:99:2d:
af:ab:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:17 2025 by rpki-client