Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: P1ROj+f7D6frQgMJoQYIOK7h6Ksj7lLGtB3pw75mSYw=
Subject key identifier: D8:70:1E:08:71:FB:8C:FA:DB:51:C5:65:53:29:7B:41:C1:79:D9:2E
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019A720C920F292E4D0E00F32EEDA62005C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 04B2
Signing time: Tue 11 Nov 2025 08:33:37 +0000
Manifest this update: Tue 11 Nov 2025 08:33:37 +0000
Manifest next update: Wed 12 Nov 2025 08:33:37 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: My2qzIKg8sCpK5BQdAdVzARSczOpdoHzuEDFMt5Y78E=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=)
4: ZB4LbNWANDxD2OGhZaFKGVmPVqc.roa (hash: zEeyPPBtIpME2FXN1g85zYsY+3yYWfxT85ifdYuGGN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:0c:92:0f:29:2e:4d:0e:00:f3:2e:ed:a6:20:05:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Nov 11 08:33:37 2025 GMT
Not After : Nov 12 08:33:37 2025 GMT
Subject: CN=d8701e0871fb8cfadb51c56553297b41c179d92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:73:66:3c:5e:3c:ee:f5:1d:cc:86:79:d7:
33:b0:b6:f8:c2:f7:eb:ea:f1:5e:72:89:64:81:bf:
1d:da:3c:03:a4:99:76:13:7a:78:0a:b2:70:a4:76:
3d:96:2e:a2:da:8b:49:b6:07:4a:66:bd:26:b1:c1:
a9:12:12:f6:78:32:cf:94:ed:1b:11:c0:7a:d9:5c:
08:6d:bb:d5:c4:ec:5e:92:87:ae:d6:75:e4:07:d6:
95:e0:42:c8:61:2f:31:c2:88:4a:01:63:e7:ce:2d:
4d:5f:91:6a:32:22:60:de:75:ad:7c:e4:16:1e:7a:
b5:5d:2e:6a:09:1d:bb:9c:f3:75:b1:71:11:0e:84:
29:f4:f9:a3:9e:f0:6c:53:4a:0f:f3:db:4e:4a:68:
ff:6d:45:67:c4:83:4e:fa:95:a7:50:09:55:2b:b3:
27:51:3b:e4:bd:59:e0:9d:4a:9d:f4:08:3c:91:69:
ea:46:b5:2c:05:1b:ce:65:86:47:51:40:e3:d7:6e:
21:70:99:7f:12:4c:4a:b9:01:a3:00:c4:46:cb:a1:
5b:3c:b4:03:73:8f:3b:97:6c:29:79:06:0e:d2:32:
ee:f2:7c:07:29:18:4b:d3:11:5b:fb:ad:56:f5:4b:
c8:6f:11:e7:5e:0a:7e:1a:99:a3:db:ca:5a:69:5f:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:70:1E:08:71:FB:8C:FA:DB:51:C5:65:53:29:7B:41:C1:79:D9:2E
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e6:ef:d4:59:30:d5:92:1a:96:30:a3:04:35:7a:fe:82:36:
54:3b:c1:02:bf:ef:3f:ff:83:46:90:d1:7b:d2:c0:b4:58:37:
fe:9f:f1:23:6c:e6:ce:70:3e:77:0b:dc:16:dd:bf:8c:8a:d2:
f9:84:b9:d0:f8:84:6f:4c:de:16:55:7e:b8:4d:c0:92:58:f3:
6e:de:3b:52:dd:ff:5d:d3:8f:33:16:06:70:cc:26:30:f7:53:
07:83:73:6f:99:de:7d:d7:ef:f6:59:70:1e:19:e5:bc:2f:57:
cd:6c:3e:63:f2:47:ab:7b:76:e5:ef:6b:10:9f:08:1b:8e:89:
7d:d5:2b:90:92:01:c5:02:c1:6d:f7:ee:02:82:b7:c4:3f:6f:
27:7e:4e:90:b5:08:e3:59:9a:bf:bf:6d:e1:d2:ac:a1:d4:dc:
e7:01:b0:45:c3:e4:42:e3:6d:48:9c:c6:39:ee:3e:b2:55:18:
9c:5d:33:4b:1a:4b:26:77:af:eb:02:60:7e:bb:24:fe:66:a4:
60:4c:b4:a0:01:77:81:45:b1:c4:87:1f:22:66:9a:1a:7f:5a:
30:71:a8:d7:34:95:06:08:75:b1:55:31:64:9f:3d:92:5c:22:
4f:a0:98:72:e4:71:dd:6c:0a:a9:57:59:0b:77:b7:f0:d5:7c:
e6:16:0c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:05 2025 by rpki-client