Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json)
Hash identifier: csv04U/qg0KCdtlBpho6vDYOo0frBubUsACjgM2bVME=
Subject key identifier: 19:07:3E:20:02:AE:79:22:35:AA:BD:5C:CE:24:E4:C8:10:E6:4A:FE
Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Certificate serial: 019A718094B3AD1F957224EFEB8FA9AEEA80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
Manifest number: 1142
Signing time: Tue 11 Nov 2025 06:00:43 +0000
Manifest this update: Tue 11 Nov 2025 06:00:43 +0000
Manifest next update: Wed 12 Nov 2025 06:00:43 +0000
Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: JAPysE5bxwWKjnOKezNKFlDiI7lMbRyLSK89s/s8O7o=)
2: DiLoOspEZ-miVIlFnPiykV7JGvU.roa (hash: 2IDQXBT0pmiOkj8NyXZhIUPtoHmvSFqSMYQziKEr2Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:94:b3:ad:1f:95:72:24:ef:eb:8f:a9:ae:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c
Validity
Not Before: Nov 11 06:00:43 2025 GMT
Not After : Nov 12 06:00:43 2025 GMT
Subject: CN=19073e2002ae792235aabd5cce24e4c810e64afe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:74:9d:79:1d:19:cf:ea:1e:d6:86:fe:6a:aa:
e7:7a:dc:15:96:d9:1b:6f:60:27:55:dc:90:8c:6e:
f3:bb:3e:2c:d6:bc:02:56:b6:8d:99:36:4b:d2:24:
b2:c6:61:25:03:6f:36:81:9b:1a:86:87:9b:30:6b:
c7:19:33:d1:ab:a9:f5:c2:40:f1:be:b0:f4:c1:f9:
7b:87:4a:25:88:e9:1a:7d:0f:b2:fd:a1:8e:d2:64:
33:c9:b6:f5:04:4b:66:dd:2b:55:28:c1:51:c1:e3:
32:b4:c8:0c:ed:b7:67:aa:a8:e5:4f:c4:ca:6d:7a:
ac:f1:e5:41:fa:9c:4f:a8:c1:29:e7:4a:a4:2a:39:
2f:21:6d:8c:7d:fd:3b:a5:bd:53:69:cc:db:d0:1a:
3a:67:71:11:19:fb:61:d7:36:ff:03:82:b6:f5:22:
67:35:f7:9d:69:1c:4b:8b:52:ab:c1:3f:62:e0:4a:
02:8f:91:40:63:1a:93:79:f0:9f:b1:60:a5:e5:38:
d6:d2:f2:26:5b:48:2d:f5:ce:45:60:da:25:62:df:
2d:f2:c6:d2:8b:1c:a3:99:fa:f6:f5:1e:8b:72:2d:
95:ad:aa:5a:ab:63:f2:41:82:e0:23:24:38:35:4d:
9b:99:5d:88:27:ee:84:6d:e2:dd:db:c4:25:ab:a6:
ea:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:07:3E:20:02:AE:79:22:35:AA:BD:5C:CE:24:E4:C8:10:E6:4A:FE
X509v3 Authority Key Identifier:
keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:63:51:ad:4f:81:83:ac:b2:40:23:fb:5f:dd:96:e7:a9:45:
5a:cd:23:e4:00:e2:79:dd:bc:f8:1a:22:68:77:0e:3e:f7:1b:
e6:01:ee:0c:92:9a:a9:f1:01:60:a8:03:6e:de:bb:30:7e:34:
fb:60:8c:4d:ef:af:f0:52:6f:fc:1d:c3:4f:3f:9d:40:ca:f5:
b5:aa:5d:d6:86:9e:c5:d8:cb:a1:4a:bb:5e:19:9b:1d:29:ea:
3f:1c:0f:ac:e6:5a:30:eb:ea:b0:17:79:c0:5b:f2:09:0a:6f:
14:6c:3d:ea:89:8b:49:75:27:52:fd:49:b0:7d:d7:d5:5d:16:
ec:b4:07:7c:56:f0:dc:b0:a1:48:4c:88:d0:79:3f:8d:95:8c:
4d:62:d2:39:46:7e:8f:70:46:06:3d:a6:73:fa:4d:2d:5f:2b:
ca:fa:57:b5:04:3f:ac:bd:97:8d:b1:4b:9c:91:63:5c:bb:91:
1a:f4:a2:8e:5e:f4:00:cf:9a:62:07:a3:a2:0e:fc:1c:33:57:
52:72:88:f2:bd:17:ef:7d:66:93:6a:cd:60:c8:bc:d3:4f:4d:
f1:55:a7:87:d9:f2:fe:c5:2b:f5:63:7e:ff:92:4f:9c:29:e2:
22:48:18:44:43:d5:d2:45:da:d5:75:7d:21:65:79:d6:f5:d5:
a4:41:d3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:21 2025 by rpki-client