Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: L9cvrGCVLIwjcOu8pN6SY5k/9C6qG0XJflyLp9rVBfk=
Subject key identifier: B0:22:65:45:32:03:14:6D:51:32:7A:A2:79:47:91:04:48:27:25:4C
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019A71B8F96F8600BE926F29D02DA7764DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 07CE
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: +VtAWUSYGX5LSbdb920135/skwoni9ofQnLay/QAg+U=)
2: Fkj26JF70VbKRFMhWrYdU9NtaxE.roa (hash: /6tYIOX0HTJdH0wQZ5VKDfqhCBzYhIWs9k6pWyv6yuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f9:6f:86:00:be:92:6f:29:d0:2d:a7:76:4d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=b02265453203146d51327aa2794791044827254c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:74:cf:fe:f2:9d:99:c9:0b:39:9d:39:95:
ae:8f:fd:32:80:0b:24:88:c2:c9:c7:f9:3d:63:3c:
59:2a:e3:76:bb:9c:9d:c6:d8:25:1e:40:60:48:07:
ee:fc:e1:b6:a2:b4:3d:e8:14:29:ca:dd:7c:49:b0:
67:ae:99:13:15:40:40:a2:b8:10:55:8d:e1:72:aa:
31:7d:9a:ec:13:92:d0:37:19:3f:0a:bf:78:ba:72:
14:95:4e:18:cc:93:db:1e:84:3a:1e:38:8d:c3:17:
c6:1d:c7:22:1c:d0:fc:05:af:81:16:24:3b:49:aa:
b7:4c:d8:c0:e9:74:c6:f0:3c:e6:69:2c:87:84:06:
fd:ac:b0:90:b0:0f:b3:83:88:39:14:06:af:ae:de:
b7:2b:fb:fb:3e:21:a3:ba:fe:ba:0d:14:6a:d1:9b:
a9:15:6f:13:51:9e:ca:f6:52:b1:07:c0:eb:e1:5b:
73:58:9d:a4:d2:9d:6b:58:0e:bd:3b:22:be:0a:e0:
f7:1e:f5:19:0e:17:1e:db:31:4a:0a:d9:07:c1:a4:
82:56:f9:20:46:14:89:1d:d5:35:25:cb:51:4b:56:
17:d9:73:db:5a:c5:89:96:ff:a3:44:4c:23:7e:df:
67:83:11:3a:c8:88:e8:2e:16:02:8c:cf:54:2e:bc:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:22:65:45:32:03:14:6D:51:32:7A:A2:79:47:91:04:48:27:25:4C
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:07:dd:6f:f9:8c:ea:10:1c:88:a4:bc:11:be:7d:f8:46:c1:
35:c5:3a:d5:df:00:37:df:9b:1b:6e:62:da:40:19:9c:fe:83:
c4:fc:07:cf:d0:2e:9d:e0:f0:82:1e:d8:1b:d4:5b:d0:73:f2:
f5:cf:d7:5d:68:27:96:d3:b9:93:e7:01:89:f9:27:46:98:a6:
a6:4b:f4:ee:a3:bf:e7:d9:cd:6a:e1:a0:63:0b:d3:74:05:c3:
c9:6d:61:49:7a:aa:fc:8b:1a:6a:59:c4:98:a9:6b:4f:d0:f2:
eb:62:2b:d1:f8:44:0c:c1:c0:dd:8f:2e:f6:39:c5:9f:51:98:
d1:f7:dc:79:4f:4b:28:ab:9c:21:97:45:b4:43:8c:e0:2e:be:
01:7d:6b:70:6e:0b:ca:be:c1:d8:8d:40:9d:32:61:9b:40:08:
82:fb:39:88:9a:a8:05:b9:41:78:f2:24:08:c8:58:b1:7f:53:
63:96:65:dc:52:c9:3f:09:9c:b4:39:a2:33:48:b4:37:80:56:
ef:97:19:73:7e:eb:29:27:90:97:f4:88:84:90:8a:fc:c5:57:
00:4b:23:71:b4:2a:55:ac:32:13:99:8c:6f:f6:85:2f:74:fa:
90:9f:d4:11:67:1a:6f:cd:69:e4:db:2b:70:c7:77:0e:f1:8d:
74:46:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:51 2025 by rpki-client