Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
File: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft (raw, json)
Hash identifier: Yd+DO0CYtF7KPywumHlwRYmaggkaS76gbGD8Im/1ONQ=
Subject key identifier: 3D:AB:05:1F:C0:E3:3B:CA:CF:20:BD:1E:C9:42:F5:E0:14:67:6F:FC
Authority key identifier: D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
Certificate issuer: /CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Certificate serial: 019A4B4E555B14B6A6BFBDBC8E9966F40EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
Manifest number: 1042
Signing time: Mon 03 Nov 2025 20:00:16 +0000
Manifest this update: Mon 03 Nov 2025 20:00:16 +0000
Manifest next update: Tue 04 Nov 2025 20:00:16 +0000
Files and hashes: 1: 1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl (hash: WpvUYPcEayz55qZiI24ed8ZcNAMNksn2aF1JhJ+gRn8=)
2: fKmmYJWJ4PEyW03R1GMx50v7dJU.roa (hash: mKILdaPsSf1rCWCwboqDxfWauZkoLUzcUqKnlg5HNcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Nov 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4b:4e:55:5b:14:b6:a6:bf:bd:bc:8e:99:66:f4:0e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eeff69011ad01a1b179a6dd70d59a1116f51f3
Validity
Not Before: Nov 3 20:00:16 2025 GMT
Not After : Nov 4 20:00:16 2025 GMT
Subject: CN=3dab051fc0e33bcacf20bd1ec942f5e014676ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b0:b8:ba:3c:8e:d8:ee:5a:4a:3c:43:76:09:
cd:de:78:47:a1:db:c8:70:c8:5c:f3:b2:26:25:1f:
1d:f2:90:37:1c:c4:c1:d0:78:f2:8c:3b:ed:15:b3:
12:c5:81:83:80:ee:04:57:2e:c0:f8:e0:da:13:14:
52:2f:8a:09:58:39:16:ee:10:73:8b:b3:83:39:e8:
f3:9d:d1:75:e3:f6:b3:6e:3d:17:b0:35:87:8d:7d:
b9:7b:9f:4a:78:aa:4e:5e:42:48:22:7c:85:3f:6a:
2c:96:9f:e7:01:77:08:62:b2:03:69:88:fe:a0:29:
de:3b:e1:7a:3e:ae:53:e4:f4:6b:b6:5d:77:11:62:
db:4b:bf:22:17:9d:2a:e1:cb:74:9b:15:64:42:2b:
e9:53:d7:f5:9a:51:d2:61:75:d8:3e:29:ec:b6:e7:
76:c4:79:0a:c1:89:fd:71:fd:ae:c6:a8:f8:de:e9:
15:f1:7f:78:85:1e:f7:60:f0:39:20:14:44:af:a7:
05:b4:d8:b1:0b:ab:2b:71:e5:94:1b:b6:4b:97:3c:
7b:55:69:3c:eb:fe:c6:93:58:aa:ab:f6:9a:e8:b3:
31:9e:4d:b2:23:3b:46:9b:f7:54:2d:33:c7:70:87:
a5:48:7e:5c:0e:e7:5f:7f:59:15:0c:75:77:58:04:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:AB:05:1F:C0:E3:3B:CA:CF:20:BD:1E:C9:42:F5:E0:14:67:6F:FC
X509v3 Authority Key Identifier:
keyid:D6:EE:FF:69:01:1A:D0:1A:1B:17:9A:6D:D7:0D:59:A1:11:6F:51:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u7_aQEa0BobF5pt1w1ZoRFvUfM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/2231d2-cd9a-4cf1-80d0-51b2aa5980be/1/1u7_aQEa0BobF5pt1w1ZoRFvUfM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:93:fb:8a:bd:2c:66:6d:56:40:7f:05:11:4a:41:69:b3:bc:
a3:b4:d8:af:0f:8e:06:25:d3:0c:c2:c2:9b:2a:c0:ec:25:4d:
ab:ea:bf:26:6a:e5:8d:f8:7e:54:bf:ea:ad:31:fc:7b:3b:3b:
76:d6:7d:e7:26:fb:95:f0:9f:0c:08:35:e4:a9:e3:4e:ab:67:
2b:a0:98:f1:6b:a5:76:19:41:9a:b4:1c:18:08:22:31:7e:7e:
f8:47:55:bc:0d:f2:ca:87:9e:70:1a:e4:be:74:39:1a:3d:3c:
63:c2:02:39:c1:a3:d2:04:0b:ab:61:64:d1:8c:d4:13:bb:37:
88:78:81:bd:f9:70:28:39:11:a5:2a:84:67:6a:da:5c:90:10:
30:a2:23:31:55:ed:3f:91:34:4d:ca:13:09:50:e6:39:86:44:
9c:1f:8d:9e:d9:e9:63:df:c3:51:ac:4f:54:b1:fe:ac:cb:90:
78:23:fb:44:dc:60:2d:81:96:d5:d0:c5:64:a3:25:ef:74:32:
99:59:ee:d3:29:37:7c:70:b9:9e:e0:d8:08:93:fb:d5:ae:a8:
e9:36:9d:da:79:7d:ac:25:83:26:4f:93:7a:f1:0c:07:0d:10:
d1:61:f4:cb:54:db:03:32:da:18:d5:78:3e:e8:11:f8:23:85:
ba:37:bd:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 04:01:17 2025 by rpki-client