Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
File: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft (raw, json)
Hash identifier: GlSbmK4ltY3NGZNcby5qeTBj5Ky2/f0wxk2d4w1K+nU=
Subject key identifier: 3D:22:80:12:89:9C:45:77:2B:ED:8E:DC:2A:2F:64:34:D7:80:8F:C6
Authority key identifier: FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
Certificate issuer: /CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Certificate serial: 019A239C4532CF10CAA80AEC653D5D990D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
Manifest number: 047D
Signing time: Mon 27 Oct 2025 03:00:35 +0000
Manifest this update: Mon 27 Oct 2025 03:00:35 +0000
Manifest next update: Tue 28 Oct 2025 03:00:35 +0000
Files and hashes: 1: 1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl (hash: SY/40Ian9xFx5jK+k2NT/gnTXHsyiFMxpKcI3oaG5aE=)
2: _Hfi64A6Hl1aWvf9UFKs9bEjNC0.roa (hash: nJS1uo48whuK1gGV1XTB4odY1z3nztNhEHWCw4wMlx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:9c:45:32:cf:10:ca:a8:0a:ec:65:3d:5d:99:0d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa11c9560fa9105e6bdc4b492efab641ab50801d
Validity
Not Before: Oct 27 03:00:35 2025 GMT
Not After : Oct 28 03:00:35 2025 GMT
Subject: CN=3d228012899c45772bed8edc2a2f6434d7808fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c4:10:37:d0:60:48:75:23:3e:04:db:29:9e:
94:16:73:ca:28:10:0a:e9:a8:6d:50:3a:d4:bb:88:
41:94:b3:58:92:5d:6a:40:a0:03:e7:54:c8:e7:b7:
99:dd:66:d0:60:f4:9b:81:d9:d9:34:1d:3d:e9:e3:
5a:29:76:ee:6e:3d:3e:38:89:3c:e4:04:a4:8c:cd:
81:e6:4d:15:89:9b:50:05:50:8d:ba:c5:7c:95:bd:
44:03:d8:05:2d:40:98:38:b8:28:c6:0d:9f:81:a6:
cc:11:0e:87:c4:d1:3b:3f:e3:ef:ff:c5:ff:40:af:
6c:61:60:2d:45:78:ea:67:f4:33:24:c3:59:67:8b:
a7:3c:74:75:35:85:f7:56:59:41:8b:31:8e:b7:60:
83:c0:d1:93:6b:71:1d:b8:5d:e4:c9:05:36:4c:5b:
61:b0:0e:30:c8:bb:e3:76:94:7e:5c:78:1f:8a:aa:
d9:4c:89:3d:ea:24:9a:73:fe:9a:af:59:c1:c8:ff:
ff:d8:46:40:b9:6d:19:2f:5c:ad:70:e1:57:5a:4c:
81:f8:c7:ee:2d:5b:d6:78:4c:03:d3:f4:21:5e:f4:
e4:83:08:2f:9e:0b:6b:f8:fc:de:20:9e:b0:08:74:
c5:84:e4:19:67:12:9e:fc:10:33:68:a0:c7:8c:e6:
b3:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:22:80:12:89:9C:45:77:2B:ED:8E:DC:2A:2F:64:34:D7:80:8F:C6
X509v3 Authority Key Identifier:
keyid:FA:11:C9:56:0F:A9:10:5E:6B:DC:4B:49:2E:FA:B6:41:AB:50:80:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hHJVg-pEF5r3EtJLvq2QatQgB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/00ee6a-5e95-4e10-8ee6-7e222bfecc90/1/1-hHJVg-pEF5r3EtJLvq2QatQgB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:8b:b1:ca:eb:28:4f:58:46:ac:4e:4f:5a:d4:e6:e4:ff:
70:32:f1:c3:4c:4a:4b:a3:f8:44:b5:7c:93:f6:54:ca:1d:31:
ad:27:e5:95:39:de:97:7d:aa:39:ea:1f:5b:4d:cf:dc:86:73:
ae:f8:b2:7c:92:02:91:49:1e:4f:fe:b1:01:3f:ca:a1:72:76:
07:a7:ed:ba:33:6b:ea:69:08:16:0a:a7:b2:79:a5:b8:28:08:
ae:13:77:61:66:f0:58:d5:16:b7:39:67:06:66:25:68:d0:b7:
7b:63:c6:42:2c:c8:dd:fd:ab:6d:b4:e1:86:0b:f6:07:66:e9:
92:e5:55:cc:43:b6:4a:9b:ac:0d:5c:67:d1:4c:7b:1a:ef:4c:
7f:cc:16:bd:02:17:93:2b:13:a1:0c:68:9d:83:9d:d0:d8:98:
56:c6:95:e3:96:76:76:cf:9b:e8:d7:86:7d:c4:c4:66:3b:16:
fb:a9:91:65:ce:e5:85:2a:51:da:c7:09:35:d7:4d:c5:81:4c:
34:34:25:d7:cb:67:36:23:eb:aa:a4:63:45:7c:76:56:ed:2a:
e0:62:fb:cb:ba:01:76:c0:ff:7d:68:92:d9:d9:7a:f6:87:36:
97:7e:71:fa:5f:d6:cb:1f:bf:e7:50:fc:aa:f4:ad:1c:4e:9c:
2d:1f:0a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:40 2025 by rpki-client