Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
File: 1-83RF-rHV7b485QoZTrhJQjMaYk.mft (raw, json)
Hash identifier: HG2SGvrxRDCAnWzZh0QXTCDpfDjMgsvaUM+CcrO1FNg=
Subject key identifier: 21:B4:55:6D:D3:E6:8C:F3:A7:DC:FD:19:60:BF:6B:11:AF:F5:8E:49
Authority key identifier: FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
Certificate issuer: /CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Certificate serial: 019A1CBEC5D49451586F61045E43D2499361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
Manifest number: 150E
Signing time: Sat 25 Oct 2025 19:00:55 +0000
Manifest this update: Sat 25 Oct 2025 19:00:55 +0000
Manifest next update: Sun 26 Oct 2025 19:00:55 +0000
Files and hashes: 1: 1-83RF-rHV7b485QoZTrhJQjMaYk.crl (hash: nG9UEBO8MmvHA+QBsdQ2e1+r8cd9xPUs2nRxz+Id8yU=)
2: HLsqpW_Z-fbGO_aC3llZw59d0HA.roa (hash: zNqiqKUQYXwQHeg5g/DJfaZuunabikgAw4lZ3lENgDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 11:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:be:c5:d4:94:51:58:6f:61:04:5e:43:d2:49:93:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbcdd117eac757b6f8f39428653ae12508cc6989
Validity
Not Before: Oct 25 19:00:55 2025 GMT
Not After : Oct 26 19:00:55 2025 GMT
Subject: CN=21b4556dd3e68cf3a7dcfd1960bf6b11aff58e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:46:72:f8:b4:07:f4:a5:d9:d4:95:52:17:fe:
a3:0f:ec:d6:3a:c3:ed:f0:91:3f:fa:6e:e0:58:73:
1b:14:3c:7b:2f:dd:7b:0e:fa:89:d7:69:6d:98:bb:
a4:92:79:5a:00:8d:0b:2d:88:a5:09:81:37:09:72:
2d:4e:53:65:50:94:0f:26:c5:82:11:05:db:5e:0e:
bc:d6:e6:d5:0c:16:2e:a9:a3:e8:1f:11:d0:1e:e0:
a4:42:10:9e:aa:8d:e9:2e:bf:b9:fe:58:39:96:ce:
87:e4:dd:9f:63:81:14:ba:33:e8:80:41:90:23:f2:
9b:8f:ec:f4:07:11:2b:1b:09:f4:d6:5d:87:17:dd:
43:1e:02:d1:a8:4d:c0:54:df:b2:cc:5d:e1:24:19:
b9:71:f4:c2:1a:3b:39:e5:60:4a:7d:6d:94:d1:79:
d8:b7:c2:e9:03:9b:34:60:36:cf:f3:92:01:19:d2:
38:c5:6e:af:5f:8f:64:56:d8:e6:d6:80:a7:b1:a2:
73:20:d1:de:10:13:76:65:64:c0:29:91:02:22:ae:
44:4b:7b:24:da:99:72:59:9e:e2:de:c2:6a:22:36:
0f:d6:a7:a8:6a:42:a5:11:ce:38:44:14:d9:d2:ab:
9b:4c:7a:80:b4:9f:bc:29:58:85:53:7f:a2:f2:b6:
48:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B4:55:6D:D3:E6:8C:F3:A7:DC:FD:19:60:BF:6B:11:AF:F5:8E:49
X509v3 Authority Key Identifier:
keyid:FB:CD:D1:17:EA:C7:57:B6:F8:F3:94:28:65:3A:E1:25:08:CC:69:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-83RF-rHV7b485QoZTrhJQjMaYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9aa99d-be43-4d74-afc9-964425c18c6f/1/1-83RF-rHV7b485QoZTrhJQjMaYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4b:f9:9f:ef:be:92:5d:cf:34:95:0b:b5:0f:0b:33:2b:26:
6d:1a:82:e1:9e:5a:eb:a2:f1:86:df:32:ff:2f:b4:3f:92:64:
1b:5b:15:87:97:2d:72:55:b0:a7:dd:94:b8:43:e8:a2:50:d9:
e5:63:1b:5c:0b:88:29:6d:d7:5a:95:bb:4f:06:a1:bf:a8:17:
93:88:15:a5:55:b2:5a:89:37:a8:b9:9e:32:b6:01:e9:03:db:
42:32:c9:46:3b:66:08:3f:48:a2:75:c5:72:db:ce:8f:44:ef:
c3:41:05:be:2a:7f:9b:e4:af:7f:af:53:1b:45:97:d0:a4:99:
f9:5b:a5:ea:06:da:d4:2b:cd:eb:77:77:ce:20:71:fe:a3:49:
8d:40:6d:65:ad:b5:7b:4c:12:44:18:04:2a:d4:a8:1f:2f:ce:
05:98:e1:2f:9b:e7:71:53:99:14:db:c6:82:07:62:b7:c7:f6:
ca:b3:cf:43:eb:69:5e:3e:82:61:92:f1:a9:cd:04:f4:84:40:
6f:34:28:7c:4f:66:15:89:bd:e4:76:32:66:67:e4:90:97:c4:
b5:cf:45:39:d5:83:36:c7:59:d3:ff:f2:e7:93:39:88:6a:42:
f8:a2:98:15:77:54:aa:78:dc:15:5e:ed:70:35:f2:16:74:13:
d8:85:59:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 21:17:07 2025 by rpki-client