Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: C/Lhgw1gR/cXcMS5iq9rHpwIiHleSODicnsWRSUckvY=
Subject key identifier: D5:EF:7E:FB:7A:BA:BA:DA:71:88:75:72:3F:DC:14:24:A6:46:F7:E4
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 019A71134A350246EBE9D98DAEAE837E2C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 1246
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: ccK3vZQN2LqcmduumNwMvTQlo1CtRxyRGaQpzuJg4yY=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4a:35:02:46:eb:e9:d9:8d:ae:ae:83:7e:2c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=d5ef7efb7ababada718875723fdc1424a646f7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c8:0a:f9:b8:d5:63:27:99:41:b7:30:cd:69:
af:9d:22:4b:85:15:ac:52:2c:d9:41:5c:6b:f5:94:
48:c2:58:7a:34:4a:b6:68:c2:39:4b:a8:a6:13:2b:
00:fa:ec:ff:9d:96:b5:00:53:7e:7d:5f:61:ca:75:
b5:24:57:7d:bb:ff:2c:18:b4:0c:4e:37:d0:c1:fb:
f6:b9:50:42:74:d6:c2:ac:02:db:36:74:5d:ff:cc:
d5:3a:f5:d1:0c:96:06:e3:3f:0d:f0:71:aa:37:87:
9a:09:17:84:fc:76:28:82:b9:92:33:cb:11:c0:29:
2c:b7:ae:db:0c:1f:eb:25:fa:d0:ce:4b:c6:09:75:
81:63:7f:60:05:96:70:7c:f9:76:2d:9a:81:74:f6:
35:c5:4c:69:70:ba:76:ff:85:17:7c:16:77:03:40:
16:4a:a6:69:cc:4b:38:18:6d:27:37:2d:a9:25:05:
52:35:81:6c:be:14:0e:d4:e4:14:e8:19:2d:1d:ea:
08:cc:b9:11:27:ab:bb:be:cc:74:1b:57:c6:19:88:
38:dd:54:93:79:f6:26:1a:36:35:8e:b1:db:ca:9c:
29:27:44:7b:c6:75:3b:b6:75:fc:1a:0e:76:79:5f:
ba:2f:68:72:bf:3e:d1:22:eb:45:8a:c0:6a:2f:77:
cc:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EF:7E:FB:7A:BA:BA:DA:71:88:75:72:3F:DC:14:24:A6:46:F7:E4
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c7:3c:7a:80:ba:a3:8a:bf:c5:22:8f:bc:d0:67:85:c4:b9:
53:99:aa:ae:b9:85:26:a9:67:3d:c7:fd:97:92:2b:6c:83:3e:
6d:90:da:01:48:03:46:35:53:f1:59:d3:cf:dd:80:97:a1:3f:
11:e7:35:f8:2e:17:58:25:7c:2d:7d:4e:53:e1:85:43:fa:55:
8b:2e:4f:cc:a0:14:56:54:35:45:ff:0a:f0:94:ee:39:cc:91:
8f:1b:7b:55:d7:e3:78:bc:d9:d2:7a:57:33:6f:64:fa:cd:90:
39:c3:92:8e:fe:6c:f3:83:c4:91:91:ff:60:29:a4:c1:3f:1a:
52:14:e3:a2:e0:35:52:6b:6d:b2:f5:6c:d8:2d:33:d1:b6:5c:
4b:ab:fa:13:23:29:23:62:6e:92:72:3b:21:86:9b:de:5d:e5:
a4:1f:71:97:81:8c:42:c1:cd:f1:9b:45:6b:0b:5d:67:74:55:
f9:0d:3e:0b:6a:84:1c:82:c2:7c:2f:6b:d2:ea:f4:a4:28:08:
2f:86:c2:6e:5f:da:8c:91:09:8e:dd:46:52:c1:00:3a:96:d3:
ec:ce:2b:3f:8c:4d:82:89:63:f3:db:1f:56:22:06:41:35:12:
ad:d5:a3:99:3c:98:13:2c:ed:8e:85:7a:c7:62:ac:70:c3:32:
f7:f8:01:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:59 2025 by rpki-client