Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
File: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft (raw, json)
Hash identifier: xKFuQPK6W8MCzC4ONgA5vApAUdM+LQumMk6OD05Q2kc=
Subject key identifier: 23:07:55:6C:B8:EB:34:C4:FE:C2:64:65:57:87:3A:62:32:52:9A:93
Authority key identifier: FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
Certificate issuer: /CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Certificate serial: 019A72267A7D9A33C98E5E6B0AF4267F2B46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
Manifest number: 0220
Signing time: Tue 11 Nov 2025 09:01:55 +0000
Manifest this update: Tue 11 Nov 2025 09:01:55 +0000
Manifest next update: Wed 12 Nov 2025 09:01:55 +0000
Files and hashes: 1: 1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl (hash: cGHMvkXm6mhrx9BHc5Ocypz5ouR+N2Trxw3NBj9j/Bs=)
2: EOs1OcIjU7QpGNyQW0WAVHDhwZk.roa (hash: GhAzKLkw2PqF2q1j22FlhKv8LsjLpt0qx1W6/h0p4Js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:7a:7d:9a:33:c9:8e:5e:6b:0a:f4:26:7f:2b:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7cfac6af108660d94e2fced61e61ff219c0a56
Validity
Not Before: Nov 11 09:01:55 2025 GMT
Not After : Nov 12 09:01:55 2025 GMT
Subject: CN=2307556cb8eb34c4fec2646557873a6232529a93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:86:1c:90:02:5a:7a:a1:16:f8:13:3d:87:2a:
68:5d:ad:96:31:02:81:e5:f4:ce:cf:e2:f6:65:21:
ec:e1:5a:4b:81:68:dc:5f:f3:dc:10:ef:41:ca:ee:
42:39:1d:f0:a8:b4:ad:6e:3c:a6:6f:2a:d6:62:65:
e8:c2:ca:b5:1d:8c:4c:d5:06:06:15:87:2d:86:e4:
90:60:7a:78:c5:92:cb:df:d1:f7:8e:53:c4:86:c9:
88:5d:d8:67:6c:f2:d3:1c:27:2d:23:90:a9:f6:99:
31:5f:d3:3b:02:40:48:b0:cf:33:86:98:7c:a5:3f:
12:78:a4:f1:8f:83:2f:af:e6:b6:4f:5a:d7:1c:47:
21:ee:e6:90:d0:ac:a6:70:9e:f5:a1:74:d5:95:7b:
0f:e3:c1:a4:2d:04:9a:4e:a8:9d:75:00:60:04:80:
23:c5:e0:45:b2:6f:a5:5f:05:9b:d8:70:79:61:c2:
3c:f5:9b:d9:4f:b7:15:2a:cc:6a:5e:82:79:9b:03:
e5:76:60:40:7c:a9:d5:c5:79:52:cd:70:be:b5:9b:
b6:dd:4f:7c:ed:04:23:4f:45:fc:27:9b:fe:38:22:
18:aa:24:0e:f6:dd:72:34:79:3a:90:cd:eb:86:72:
83:5b:29:8e:3e:33:fe:47:1e:20:f9:5c:96:a5:62:
aa:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:07:55:6C:B8:EB:34:C4:FE:C2:64:65:57:87:3A:62:32:52:9A:93
X509v3 Authority Key Identifier:
keyid:FA:7C:FA:C6:AF:10:86:60:D9:4E:2F:CE:D6:1E:61:FF:21:9C:0A:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-nz6xq8QhmDZTi_O1h5h_yGcClY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/682230-b4cd-4595-bd1e-32a41ba3e3c5/1/1-nz6xq8QhmDZTi_O1h5h_yGcClY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3f:2e:38:b0:46:5c:d2:77:33:d5:1e:c5:df:f6:d4:cf:c3:
e5:9e:87:4d:1c:51:f9:4c:e2:16:b8:2b:1d:be:50:92:1e:c0:
c2:af:4e:9c:12:2f:2d:35:58:f9:16:c9:7c:f6:19:e6:12:cc:
43:1c:b6:a8:3b:d1:ee:81:a3:e5:29:46:2e:3e:b5:05:fb:91:
77:94:3d:0f:6a:52:25:0e:49:d0:aa:8d:d7:99:4c:99:5b:f0:
e0:bd:6d:d1:94:83:0c:19:6b:68:ab:2a:a7:f4:50:b2:f9:f3:
ca:cc:31:45:9f:dc:f9:bf:34:02:c3:8b:82:63:10:32:d0:ae:
83:fa:58:3e:1e:59:c3:46:9b:b0:08:ff:e9:9c:c3:b6:28:53:
d9:51:09:b9:00:c0:b6:80:8c:55:2e:01:72:f2:68:0e:27:f6:
e3:8d:8f:cf:1b:cf:3d:8a:16:fb:19:c9:ad:6b:01:03:4a:93:
ef:0a:46:aa:45:55:58:43:22:cf:12:72:da:79:3d:04:24:b0:
bb:3b:21:9f:41:53:08:94:46:ca:6d:80:ba:03:20:2b:df:19:
8a:c9:f2:4c:8f:eb:de:44:cd:16:ba:45:72:1a:24:72:48:ff:
b8:aa:40:dd:22:05:ab:4e:9f:70:12:1b:f8:30:ef:88:bf:4f:
4e:e4:d8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:28 2025 by rpki-client