Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
File: 1-geuOnkY-TLqJMwVa0tum6VYG_o.mft (raw, json)
Hash identifier: SHvkdM1TSpcKfITZghOGigrGKyYio8klDSSJLtwVZRo=
Subject key identifier: 2C:CB:5B:BE:F0:05:B5:4F:1F:72:0C:0A:6A:A0:80:43:DA:64:BD:D7
Authority key identifier: FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
Certificate issuer: /CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Certificate serial: 019A7293936E1CBDE2552F258B87E7E2C25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
Manifest number: 042D
Signing time: Tue 11 Nov 2025 11:01:05 +0000
Manifest this update: Tue 11 Nov 2025 11:01:05 +0000
Manifest next update: Wed 12 Nov 2025 11:01:05 +0000
Files and hashes: 1: 1-geuOnkY-TLqJMwVa0tum6VYG_o.crl (hash: p3w8CYOtumygcDG07rk3ouPpfbFXLfji5h1IvU1kKn0=)
2: rs3gWt450Dc5VAdX-LPh4FxzPfI.roa (hash: yHX556DQVgZDjr2xTPApsPlrmF99zYD+miBAgNn4a5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:93:6e:1c:bd:e2:55:2f:25:8b:87:e7:e2:c2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa07ae3a7918f932ea24cc156b4b6e9ba5581bfa
Validity
Not Before: Nov 11 11:01:05 2025 GMT
Not After : Nov 12 11:01:05 2025 GMT
Subject: CN=2ccb5bbef005b54f1f720c0a6aa08043da64bdd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:c6:56:7b:37:bb:14:5d:0b:80:c2:b7:7b:
e4:e9:c9:ee:c7:e8:63:28:d5:75:fd:90:ba:83:bc:
50:ff:27:e2:a1:10:86:8a:84:01:9e:f6:75:fc:43:
c6:69:76:97:60:b5:da:be:f8:b2:d9:e2:be:dc:f9:
fe:75:50:4a:4f:48:74:c5:ee:47:88:9b:d9:61:94:
b1:f6:44:86:99:5d:8f:77:bb:8e:4d:ee:c6:76:8d:
de:fd:31:25:a1:dc:b7:db:d0:f8:2b:8c:1f:92:d3:
b8:68:b1:2f:fe:91:1e:10:f4:86:36:1c:85:47:86:
de:15:e1:cc:d5:07:b2:eb:fd:70:9f:94:a7:7b:58:
52:4b:8b:4d:e8:48:1c:99:ee:89:ea:d0:ec:69:97:
8b:27:ab:4f:5d:99:0e:5e:5e:4a:e9:11:47:f9:89:
41:1d:0b:29:7b:e5:af:f7:6d:61:29:b4:4a:2e:fc:
4e:b0:0b:d2:ac:70:78:38:75:27:2b:c4:db:43:63:
60:8f:62:1c:08:70:8d:9d:75:b3:38:88:13:bc:23:
ad:70:a8:e2:1e:83:09:94:02:c1:bf:fa:1c:60:e3:
ad:fc:ae:70:19:4e:73:d1:02:f7:18:c7:b7:fb:a6:
0b:f4:19:d2:72:f0:f0:6e:cc:8f:b5:5c:ae:8a:22:
59:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CB:5B:BE:F0:05:B5:4F:1F:72:0C:0A:6A:A0:80:43:DA:64:BD:D7
X509v3 Authority Key Identifier:
keyid:FA:07:AE:3A:79:18:F9:32:EA:24:CC:15:6B:4B:6E:9B:A5:58:1B:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-geuOnkY-TLqJMwVa0tum6VYG_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a97dc0-5685-4f6e-987f-2a5a6e2d7948/1/1-geuOnkY-TLqJMwVa0tum6VYG_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ab:74:93:a0:be:f0:71:3c:a3:8f:3b:e4:62:87:c2:43:fa:
8d:c0:cb:e8:60:6f:bc:c3:31:c1:3f:84:76:50:ef:09:88:82:
a7:e3:11:c9:cf:97:e7:cb:c5:f9:d1:ca:c6:1c:52:4c:c5:b4:
6f:18:58:2b:ed:d2:e9:9e:72:89:ff:60:55:9c:da:01:b4:5e:
81:22:f7:02:19:e2:7f:53:89:05:51:11:9c:f7:a9:a8:33:f3:
90:57:97:cc:d1:14:cf:53:15:35:0d:d9:3a:2d:02:9d:59:0d:
0a:22:94:cb:90:6d:43:c2:6e:69:19:2f:37:27:5b:1c:b2:d4:
9a:89:5c:e3:65:b9:f8:23:a8:d1:d2:19:e0:04:35:84:2c:f7:
2c:01:cd:12:c4:0e:ab:7e:c1:82:52:3c:28:41:de:ee:aa:53:
10:a0:14:4a:79:48:e6:20:1a:db:0a:8a:50:64:f2:3b:6c:7c:
31:f4:6f:be:f1:52:66:06:9b:93:9a:c2:d5:18:a9:87:72:38:
f7:eb:23:ed:a2:ff:9b:02:a6:26:95:79:e2:b7:98:11:b6:c9:
58:63:3c:25:ba:55:10:f5:3c:0a:da:e0:2d:77:14:16:30:71:
4d:d3:c5:01:6c:1e:d2:15:91:91:28:ec:c4:af:27:bb:d4:f9:
03:0c:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:16:06 2025 by rpki-client