Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
File: 1-zuztKtv_1iN20zyr-bVrEZVe7k.mft (raw, json)
Hash identifier: ITPkt3losWgXMLxN1nsS8ZMG2SZlx+tni8osDTd9AQg=
Subject key identifier: BA:8F:92:EC:6C:B4:29:DC:7E:A4:47:27:A9:1E:CA:7A:5A:9F:8B:7F
Authority key identifier: FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
Certificate issuer: /CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Certificate serial: 019A2109109E50C2BD7216701E0C01F7DCEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
Manifest number: 10B3
Signing time: Sun 26 Oct 2025 15:00:33 +0000
Manifest this update: Sun 26 Oct 2025 15:00:33 +0000
Manifest next update: Mon 27 Oct 2025 15:00:33 +0000
Files and hashes: 1: 1-zuztKtv_1iN20zyr-bVrEZVe7k.crl (hash: lP19kiS3hRp64MoHcFSoNd4eE21E45S/xyUKx/6C+3o=)
2: pQlM2OtK0QxqZYQEu_V-X_TzrUw.roa (hash: GdjsGztAnCLXoyesv/dDZLz4ADxr8P9UdhbYUeTe7Kg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:10:9e:50:c2:bd:72:16:70:1e:0c:01:f7:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bb3b4ab6fff588ddb4cf2afe6d5ac46557bb9
Validity
Not Before: Oct 26 15:00:33 2025 GMT
Not After : Oct 27 15:00:33 2025 GMT
Subject: CN=ba8f92ec6cb429dc7ea44727a91eca7a5a9f8b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7f:e4:fa:fe:cc:85:c6:98:f1:a1:31:08:3e:
42:1d:97:19:67:81:d4:84:fc:0d:2e:1c:ac:bf:fc:
97:75:84:ac:0e:a6:4e:33:f0:a1:5b:6c:00:07:6e:
5b:58:84:61:c5:b7:7f:db:1d:e9:ee:6b:fc:a7:a8:
34:37:ea:25:a6:ad:07:cd:b7:7e:33:15:cc:cd:0b:
cf:18:c7:41:a3:0f:d2:70:8d:08:cb:01:e2:d4:af:
a3:d0:45:56:f2:dd:ed:f2:f8:08:bf:d9:6f:b0:03:
c4:bd:df:49:39:8a:0b:f7:16:49:4b:58:d6:b2:8a:
b0:a5:98:03:26:3d:b2:a3:80:d0:41:9a:4c:20:1e:
ee:78:96:06:e2:db:97:ea:cd:45:2d:e8:c5:25:b2:
c6:78:4b:86:55:54:65:3c:02:fa:59:8e:cb:11:a6:
63:26:ba:03:3e:96:ea:c2:b1:f1:64:75:67:22:fb:
f8:2f:d9:65:5d:c6:a2:e8:b6:7f:19:e2:ea:5b:51:
07:c1:2b:27:ec:97:ae:f1:8e:c0:98:a2:69:e9:aa:
46:1a:71:2e:9d:4d:44:02:61:28:bd:3b:1e:13:ee:
30:55:fc:c0:bf:d9:e0:1c:2c:72:46:bd:33:24:ca:
bd:ce:64:21:0e:e8:aa:67:6c:c0:aa:13:28:ac:89:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:92:EC:6C:B4:29:DC:7E:A4:47:27:A9:1E:CA:7A:5A:9F:8B:7F
X509v3 Authority Key Identifier:
keyid:FB:3B:B3:B4:AB:6F:FF:58:8D:DB:4C:F2:AF:E6:D5:AC:46:55:7B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zuztKtv_1iN20zyr-bVrEZVe7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/68fbaf-45f1-4946-a346-686a01888d29/1/1-zuztKtv_1iN20zyr-bVrEZVe7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:87:7b:14:45:75:ed:69:b2:21:15:b4:81:ea:77:a5:e7:
25:eb:e4:a2:4c:e2:a1:3f:8c:f2:51:23:74:8b:0b:6c:e6:a8:
8a:4d:6c:5c:66:34:0e:99:b6:55:69:03:b1:a4:46:35:4c:72:
2c:ee:d1:71:85:36:cc:bd:05:e1:2b:73:1d:6f:ff:19:26:d5:
77:34:cc:4b:2d:0e:53:8f:bc:04:c0:93:c9:4d:d5:04:e8:18:
3d:96:36:a2:79:e0:ea:48:98:9d:be:c3:bb:bd:6f:43:6e:a9:
76:3b:d3:e0:44:74:0c:b4:12:55:cf:9f:eb:07:59:3b:44:3e:
2f:ef:af:12:a6:90:72:e6:33:ea:fc:4c:91:a9:4a:5b:31:b4:
73:8d:dc:d0:63:66:50:de:fb:71:c2:5a:47:f9:12:95:df:64:
33:2b:c8:25:e7:b0:3d:49:4c:62:9f:cc:92:39:99:fe:68:70:
b3:de:64:ff:51:d7:44:45:c9:08:54:3d:f8:4e:71:f4:0d:c3:
8a:5b:d2:ad:75:a7:4a:10:d4:f2:0d:e5:d1:dd:55:3d:ab:0a:
11:16:71:60:d9:8d:88:54:b2:64:e4:16:17:3e:49:0f:35:9b:
18:f4:13:a3:35:f8:f8:10:92:47:17:dd:82:7d:8f:61:34:05:
65:2e:18:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:31:11 2025 by rpki-client