Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
File: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft (raw, json)
Hash identifier: PQ5PPVWrQTKsQlmTmtagPg3T0FNdo6ujqxReR19jAek=
Subject key identifier: 33:96:FB:9C:33:55:D2:A0:3B:42:51:B4:F4:71:50:94:32:37:B8:A7
Authority key identifier: FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
Certificate issuer: /CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Certificate serial: 019A706E08CFCAA47C36E6884E2E7C8B1FD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
Manifest number: 0B6B
Signing time: Tue 11 Nov 2025 01:00:50 +0000
Manifest this update: Tue 11 Nov 2025 01:00:50 +0000
Manifest next update: Wed 12 Nov 2025 01:00:50 +0000
Files and hashes: 1: 1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl (hash: 2mVox+7reMcdeQlw3QFC8jbdvq4+5JoV+lTVOS/XJ2s=)
2: LPmwSEr2cec7eKNG65DFfjhgZlg.roa (hash: 2uSr4hxNi+F1N3JsqPYCLDQN2e8AEP4YyYoo3iXqMBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:08:cf:ca:a4:7c:36:e6:88:4e:2e:7c:8b:1f:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb5602802a8793a24fda4d0edcc30a196c0f77e0
Validity
Not Before: Nov 11 01:00:50 2025 GMT
Not After : Nov 12 01:00:50 2025 GMT
Subject: CN=3396fb9c3355d2a03b4251b4f47150943237b8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:2a:0f:fc:4a:3f:43:16:64:91:44:61:b2:49:
77:3b:55:f0:39:23:4c:ff:04:9e:e5:8a:77:e0:c1:
42:e9:f9:d2:c8:41:63:54:b8:11:e0:0d:0d:c2:3d:
b1:2e:6e:e2:b8:ac:90:eb:4c:0e:99:30:97:eb:b5:
18:75:4c:76:59:a8:58:e4:6e:bc:5a:c8:63:ac:5c:
02:5d:c3:95:bf:29:01:bc:42:0e:ac:3f:36:52:db:
7b:cb:5c:04:41:0c:5e:fa:5b:84:7d:1e:51:b9:e2:
2d:fb:9b:18:22:f9:ca:28:c8:f4:ef:f9:0c:7a:e9:
c8:e5:1b:80:89:b0:7f:b5:a7:bb:d4:f7:9c:0e:df:
e4:39:39:93:18:cb:46:8f:e8:4f:bf:33:7c:93:ed:
36:a8:3e:bc:f9:0c:c8:e1:2a:30:2c:f2:87:b6:bb:
62:7c:7d:ea:87:90:2f:b2:e5:0c:7d:c7:24:c4:9c:
75:f8:f5:5c:d8:1b:74:c4:29:d9:da:32:f4:6b:2e:
16:a4:5c:14:37:d0:20:87:86:70:a7:68:bc:61:4b:
37:bb:67:a2:ce:88:e7:24:e3:b3:18:e0:4f:ac:61:
99:48:c2:70:59:b5:31:20:11:a9:f5:e0:91:69:3e:
65:ae:73:3b:ca:1b:26:38:a9:02:08:8c:45:73:94:
16:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:96:FB:9C:33:55:D2:A0:3B:42:51:B4:F4:71:50:94:32:37:B8:A7
X509v3 Authority Key Identifier:
keyid:FB:56:02:80:2A:87:93:A2:4F:DA:4D:0E:DC:C3:0A:19:6C:0F:77:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/8387a7-068c-4832-aa26-db5b1f89a50d/1/1-1YCgCqHk6JP2k0O3MMKGWwPd-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cd:f1:3c:79:d3:26:a3:4e:a4:84:a3:f7:93:33:7d:6c:6d:
fa:b5:1e:6b:ef:1f:e8:a7:d0:a1:10:3f:e7:70:3e:8f:c4:6b:
23:53:17:a7:59:a9:8e:e3:a1:0c:9b:6a:2e:29:75:84:69:19:
fa:17:bf:1b:a1:56:30:e3:f7:54:9c:5c:ac:0a:0d:67:6a:66:
74:69:d7:a9:f0:75:b4:8b:a2:c7:cd:a8:2d:0d:04:1f:7f:e1:
60:9a:31:82:fa:54:13:cd:ce:43:a6:8b:d9:fe:7f:70:99:db:
4e:ed:b3:d1:41:cc:ef:71:f2:50:e6:09:99:e8:e5:97:db:57:
36:48:f1:c9:1f:f3:df:ba:8f:85:f2:97:39:08:9b:e4:44:88:
90:14:4a:7e:06:d5:3c:bb:a9:e7:59:41:10:95:56:c8:cc:17:
ef:63:8a:4b:20:f6:5a:8c:91:28:3a:fa:c1:04:e1:ce:31:59:
26:e6:27:af:9e:e6:af:cb:a9:e8:33:ad:80:a1:50:a1:45:7a:
9e:a8:de:dc:e2:d4:fc:3e:3e:a9:82:7f:08:a7:23:fc:42:a4:
c5:b3:31:08:3a:14:4c:a8:93:c2:ce:b2:1d:0c:a7:92:d1:72:
b9:23:32:ff:e3:6d:f7:49:93:8d:27:82:c7:3b:61:a3:68:06:
75:db:28:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:20 2025 by rpki-client