Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
File: 1wYe6H9bVfGQOis3BOuglEqwxaw.mft (raw, json)
Hash identifier: r96SdZ1CLF2typht68X1ThiOWPNislfN0iXB7IPlEtY=
Subject key identifier: F3:AC:32:17:5E:FD:A1:38:87:2F:7C:19:31:4D:D8:6C:40:7D:51:2F
Authority key identifier: D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
Certificate issuer: /CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Certificate serial: 019A71B8D9AA9E821DE4A91C1FCC3A67A043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
Manifest number: 1338
Signing time: Tue 11 Nov 2025 07:02:11 +0000
Manifest this update: Tue 11 Nov 2025 07:02:11 +0000
Manifest next update: Wed 12 Nov 2025 07:02:11 +0000
Files and hashes: 1: 1wYe6H9bVfGQOis3BOuglEqwxaw.crl (hash: 3eGgESvtH/ULVK8c9QpiwEM3ezrzkmKMZ3Lyp9giioY=)
2: 2b3B0SMO2-9Ek_cqqjJKk3pOSZM.roa (hash: GJ30AXhunHYfQ1Yyx4o1wHy0UcxPP3zTYg1IKwU8P4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d9:aa:9e:82:1d:e4:a9:1c:1f:cc:3a:67:a0:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7061ee87f5b55f1903a2b3704eba0944ab0c5ac
Validity
Not Before: Nov 11 07:02:11 2025 GMT
Not After : Nov 12 07:02:11 2025 GMT
Subject: CN=f3ac32175efda138872f7c19314dd86c407d512f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:f0:0f:6c:5b:5b:ec:25:22:df:16:46:ad:
e2:e5:41:d9:f8:d2:c1:47:c8:fc:a7:27:72:d2:55:
e4:ef:09:63:94:88:77:36:3b:b8:dc:d2:48:07:4b:
fa:9b:cd:9a:38:77:10:1f:65:df:31:11:9d:e4:f4:
aa:24:28:d1:5f:50:c5:d7:a4:ec:7a:7c:89:c1:32:
3f:f5:f9:4c:3a:71:ae:9c:4f:be:24:4c:22:7e:62:
8a:e3:02:b0:8d:7e:7f:b9:97:b6:98:aa:60:fe:02:
59:37:db:0d:e9:ec:3a:d6:e3:03:ec:a8:a7:59:10:
a7:63:1c:04:a2:43:a6:c4:98:00:39:40:2e:a2:21:
61:dd:70:42:60:45:66:d7:14:31:31:11:35:cb:bf:
4a:a9:f3:53:c9:96:4d:27:78:f1:86:8b:a3:e4:a1:
7c:47:5f:6e:8b:fa:71:57:c5:de:b2:75:aa:45:0d:
c4:46:ed:3d:8e:78:eb:bc:3e:d9:24:5a:6a:d0:34:
f8:60:76:8a:ec:c4:b3:6f:aa:26:e9:da:c0:9f:67:
aa:2d:bb:26:81:39:38:88:f6:50:af:e0:3c:15:26:
aa:5a:9a:2f:04:6b:2c:a0:0d:0e:66:76:e5:61:e2:
bf:98:85:39:0f:9a:d3:57:7e:da:40:4d:2e:9a:c3:
e3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AC:32:17:5E:FD:A1:38:87:2F:7C:19:31:4D:D8:6C:40:7D:51:2F
X509v3 Authority Key Identifier:
keyid:D7:06:1E:E8:7F:5B:55:F1:90:3A:2B:37:04:EB:A0:94:4A:B0:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wYe6H9bVfGQOis3BOuglEqwxaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b113c4-7cf1-411c-873b-2883f88a86ec/1/1wYe6H9bVfGQOis3BOuglEqwxaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:fa:6a:9f:1d:41:57:ac:fc:a2:84:5b:54:59:03:84:6a:83:
9e:c3:7e:5d:cc:f1:f0:d4:9f:1a:56:42:a1:15:cf:16:ec:bf:
eb:b5:5f:9f:33:e7:74:a0:ff:bf:4b:53:37:fe:d5:49:77:80:
a4:96:01:81:3b:a0:23:ad:32:ac:bb:1d:4d:01:23:fb:ab:48:
7c:e5:b4:06:bc:df:5a:6b:cf:15:c7:18:3a:cf:fa:88:b8:b0:
44:ce:d8:53:7d:95:e7:bb:c9:ba:22:b5:01:41:b2:89:cb:ec:
54:e0:f8:65:bf:f3:f3:a8:f2:52:ba:8b:c3:f6:f1:06:f4:9d:
78:3c:6e:bc:5a:7b:72:fb:64:74:55:ec:43:0c:9d:89:43:9a:
5e:1c:bd:37:97:71:42:a1:df:17:fb:37:2c:42:a0:d7:8d:f7:
1f:88:48:de:b7:11:70:89:d8:9b:3a:98:60:e9:6d:af:68:0d:
df:4d:cd:7d:b0:57:2a:bc:9b:04:a4:4e:8c:ec:2e:1a:7e:26:
e2:fc:a8:8b:31:31:d9:1a:84:22:ba:5a:33:c9:09:9a:18:dd:
85:b2:09:0d:20:a6:75:3e:d5:98:70:d6:c7:9a:42:7b:b6:a0:
21:cf:3d:d0:a1:81:27:33:d5:77:58:fc:0f:74:d0:66:8b:ed:
e8:f0:48:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:29 2025 by rpki-client