Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: jz94MEDqmOCGLG9rJ7zVlgOePuIhShso+pqMpqOVJog=
Subject key identifier: E3:51:6B:E7:20:06:1F:3F:BA:C2:A7:B3:9A:BE:AF:BC:1E:29:7F:C7
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 019A7301578983ED756216AE73F16B25D355
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 0824
Signing time: Tue 11 Nov 2025 13:00:58 +0000
Manifest this update: Tue 11 Nov 2025 13:00:58 +0000
Manifest next update: Wed 12 Nov 2025 13:00:58 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: 7DlmVrWXymwWvW+YHzFydmzGVyyBe6IHITMNEmrwAYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:57:89:83:ed:75:62:16:ae:73:f1:6b:25:d3:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Nov 11 13:00:58 2025 GMT
Not After : Nov 12 13:00:58 2025 GMT
Subject: CN=e3516be720061f3fbac2a7b39abeafbc1e297fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7d:8b:2a:0b:93:81:d2:b1:f8:de:65:18:81:
f2:ec:40:5c:9c:90:70:98:21:ad:8d:d0:3c:a9:9f:
2d:c0:83:6c:41:30:a4:d1:33:23:1c:2d:67:4c:c0:
cf:44:62:57:82:11:07:e7:f0:9c:a5:44:ae:37:43:
1c:2c:3f:b8:12:d2:3d:43:02:d0:0d:1c:34:ff:6e:
16:55:1d:ed:9e:18:df:12:03:0f:f4:0c:10:8a:b0:
9a:31:fd:53:42:ed:99:dd:a2:a6:20:b1:be:40:71:
b1:c1:34:ae:89:d7:35:6f:4b:54:0e:46:fb:e5:27:
84:10:b5:b2:97:b8:82:2b:99:aa:52:25:da:5e:13:
43:0c:10:1a:27:e3:c0:74:4a:43:38:4c:38:27:63:
3b:ed:5c:e4:a2:b2:09:df:b3:aa:af:e3:90:62:6e:
70:6e:b1:0e:f5:37:cd:bd:a8:91:48:12:46:fc:bf:
68:ac:45:9a:b5:49:e1:94:3b:99:71:86:b9:f4:87:
a6:c2:43:70:76:71:8c:da:23:49:f8:5e:af:9c:22:
f3:19:d2:a4:e1:ed:a8:b9:bf:69:34:5f:48:03:0f:
48:48:15:17:ba:fa:b1:11:1e:90:84:49:fc:a6:8c:
c4:51:a4:d4:8f:4f:e0:75:bf:71:29:46:69:63:e7:
83:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:51:6B:E7:20:06:1F:3F:BA:C2:A7:B3:9A:BE:AF:BC:1E:29:7F:C7
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:a5:95:87:fb:f2:3a:fa:22:5b:1b:88:04:bf:1a:9d:c9:cf:
ed:85:07:ae:14:23:bd:8d:c8:d4:44:a5:96:ae:55:21:8b:fb:
da:2b:cd:ab:eb:72:1d:2e:f5:b2:ff:92:88:8c:f2:91:ea:cb:
71:21:32:06:19:cc:15:a1:1a:64:a9:6f:f3:c8:bd:ae:66:28:
99:22:7e:aa:06:7b:0c:f6:8a:c6:9b:d8:73:69:e9:16:43:14:
f2:38:ec:2a:c1:7e:83:3f:2d:83:f1:f8:b2:e3:75:c4:60:52:
18:b4:ab:6a:d1:8d:5e:62:d0:69:c5:06:e2:f3:84:6a:35:3e:
b6:02:0c:45:88:6c:ad:da:a5:9d:08:42:3e:4c:82:ff:aa:d5:
c3:9f:12:59:29:d4:04:46:f6:85:a0:2c:06:4e:a3:36:ff:b8:
bc:d5:6f:d8:c2:44:b1:8b:e2:bf:68:74:16:eb:5d:67:cd:9d:
e9:0a:fa:40:47:34:67:54:0e:84:37:d7:ab:41:46:14:58:38:
a8:f8:8f:24:d3:9c:97:65:1b:15:6c:a4:af:d0:57:2d:0b:74:
6d:e4:d2:61:be:d5:46:fc:3f:93:1b:eb:6a:3d:3b:29:31:ca:
b3:05:ec:32:a6:8f:67:a2:a7:7c:99:12:bb:23:d4:d6:58:43:
33:96:3c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:20:11 2025 by rpki-client