Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: g76SWEC9qqhiE6dO6p0LwK8qJXZzFJNaIn4+ejr2NHs=
Subject key identifier: 3A:34:74:21:1F:AA:5E:BD:E1:71:A4:D9:FF:47:66:B2:E5:BD:F7:1E
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019A71B8255AA50CA170AE18A7333FD1E16A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 138A
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: SKWptYqaeKFJq9AgQdhmxrGysenVKcKwi8BmnZJB4jI=)
2: MwEJqReLtYJIDzQC3nxs7sP0tvA.roa (hash: WyxWLsA6emUiFQU/YyUOL864IemIj/7UtRIviv8JcEw=)
3: iAzdsnC_l6rdd2kZ6hvA3HRXqCU.roa (hash: sMPWtnAj59EVmsTaMYwCg3wIrLPxpEslb0ZjPRwWR6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:25:5a:a5:0c:a1:70:ae:18:a7:33:3f:d1:e1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=3a3474211faa5ebde171a4d9ff4766b2e5bdf71e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:ef:0f:0e:ce:de:cb:d3:02:7e:a7:82:64:
7f:e8:b6:dc:20:89:e0:f5:1f:e8:4f:ce:e6:03:36:
3e:dd:cf:7c:32:be:f3:55:27:2f:69:07:d3:98:c3:
65:4b:c5:58:a8:40:1e:30:6c:fb:15:d0:64:3e:e1:
ed:31:95:8f:5d:7b:f6:bd:ed:3d:44:ae:f3:df:7a:
3e:aa:52:a1:9d:44:ab:41:90:c9:39:e7:44:86:de:
e2:88:96:72:d5:22:38:91:de:5e:48:fb:4d:e3:91:
40:2c:b1:3c:68:15:6f:c0:bf:a1:40:95:ae:26:ca:
bd:a4:1d:4b:98:a3:34:64:3d:96:7f:76:e0:37:a0:
4d:66:df:0b:df:b8:05:51:6d:fe:2d:e1:60:ac:08:
e5:b5:d4:2b:72:bd:ad:a0:6f:7c:03:ca:87:f5:a3:
43:66:dc:7c:6a:df:59:31:01:cc:39:b0:52:9f:e8:
81:cd:5c:25:e9:23:e2:1e:c1:99:08:05:bf:8c:52:
e3:22:75:62:9b:0f:e4:69:a7:bd:25:8f:fe:9a:f1:
81:73:6d:7e:75:f2:9d:04:4d:a8:43:fd:d5:e7:a9:
f8:6e:5f:a0:11:25:68:e3:e0:31:47:68:ef:90:8b:
7a:8c:16:6f:90:26:2e:c7:4c:d4:87:d5:48:83:29:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:34:74:21:1F:AA:5E:BD:E1:71:A4:D9:FF:47:66:B2:E5:BD:F7:1E
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a2:6f:6b:32:d9:e0:97:3b:5c:7e:47:a2:da:6a:b4:39:b2:
9f:50:d4:c4:2c:0f:ef:88:b4:ac:80:43:e6:fe:2a:09:16:4b:
61:0f:8b:c4:05:39:fa:01:70:6a:a8:68:d2:2b:3d:31:9e:e0:
8a:2d:96:90:ac:cf:ca:ac:bd:fb:45:20:6f:77:70:6f:4f:2d:
69:06:ae:ce:52:88:75:87:94:bf:fa:90:a9:f1:3d:35:49:39:
76:0f:37:5a:56:5d:14:56:15:32:e2:9c:37:2a:40:46:43:a8:
d9:2d:e9:da:6e:e8:2e:88:ba:4a:23:8c:6f:ff:9f:f5:ff:96:
c3:6e:ae:90:1f:f2:35:9d:a4:5f:35:6f:50:66:be:f0:a8:97:
ba:7d:7a:ef:d9:69:fb:24:fd:ef:c1:e3:f8:05:06:ee:71:72:
d9:fd:6f:77:7d:7f:44:03:6b:2e:8b:80:e8:74:b4:34:89:31:
73:04:a4:96:eb:97:6c:4c:c7:e6:69:76:58:44:4a:e6:2f:b1:
cd:cf:d7:3c:29:43:5f:73:91:bc:7d:a6:b8:dc:62:c5:a8:f8:
92:f3:88:2d:b9:22:ba:fa:64:e1:f8:19:2c:1d:76:a7:5f:5a:
25:33:70:de:07:c9:95:41:10:47:79:c3:2b:a0:d0:2d:74:7f:
dc:88:e0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:06:57 2025 by rpki-client