Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
File: 1-yqlrPybsP5rkR8eytPrVNRcs28.mft (raw, json)
Hash identifier: bhogrAos4KnRdcmpcgR1lVMlBxBs5HOYluTcl/owYm8=
Subject key identifier: 82:68:F7:CC:A3:D4:09:28:BC:09:7D:B0:92:66:97:40:E7:0E:CB:F1
Authority key identifier: FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
Certificate issuer: /CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Certificate serial: 019A078196387DD058F2D8DEC001423B8CC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
Manifest number: 0833
Signing time: Tue 21 Oct 2025 16:02:04 +0000
Manifest this update: Tue 21 Oct 2025 16:02:04 +0000
Manifest next update: Wed 22 Oct 2025 16:02:04 +0000
Files and hashes: 1: 1-yqlrPybsP5rkR8eytPrVNRcs28.crl (hash: PfOMRhR8m8dZnjtcoks5EAxH1/KFqoeQCmBpA0Z4Oso=)
2: 8BItxdRwiz6e55f08Mt17mlwvV8.roa (hash: cojnwxd3ILvAkZ0dYhgxffSNvY1zxZ63Duvu6PuvkIM=)
3: QO_GooH2m885Q2taEPXMPgyGMvU.roa (hash: 1VnTsOfjtKGYm7FG0JLVMLSQUzntH2YHEOdl/AmQZTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:96:38:7d:d0:58:f2:d8:de:c0:01:42:3b:8c:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2aa5acfc9bb0fe6b911f1ecad3eb54d45cb36f
Validity
Not Before: Oct 21 16:02:04 2025 GMT
Not After : Oct 22 16:02:04 2025 GMT
Subject: CN=8268f7cca3d40928bc097db092669740e70ecbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8b:a6:21:5d:0e:1a:2e:c2:b5:0a:19:52:ec:
ce:26:ba:7f:4b:5d:ad:a7:e9:aa:3b:c0:2e:92:2c:
cf:e5:51:bf:8c:33:bc:43:c9:49:1b:b5:77:ce:b9:
03:b4:bb:59:d1:c2:40:ea:7b:b1:43:82:87:cb:16:
bc:27:55:7f:51:d6:db:b0:fc:9c:54:ab:82:e2:c3:
ed:b3:12:55:3a:ef:ed:80:5f:b2:bf:1e:c8:3e:94:
34:cd:2e:5b:31:cc:58:6f:25:b7:14:59:60:3e:9c:
e6:0c:06:93:6d:6d:13:3d:8f:c0:2d:b5:ff:4f:31:
7e:e8:c3:14:a6:6f:09:f5:83:f3:d4:2d:0d:61:d7:
e2:29:f9:59:54:fd:d5:19:fb:92:1a:cf:93:68:19:
eb:1b:45:9c:bc:32:2c:90:0a:1a:1b:3b:7d:06:f8:
8f:3e:bd:0b:b8:9a:de:71:98:57:b1:12:5c:0c:6a:
b9:ab:20:39:05:dd:68:f1:53:fb:fe:d3:30:52:d7:
ba:0a:22:02:37:55:34:de:43:3b:96:99:72:37:dc:
09:72:38:e9:6b:b6:3b:71:fa:fa:76:55:b8:54:32:
09:3d:fa:82:a6:b7:41:4a:17:6d:f3:8e:8f:14:cb:
57:87:2f:a4:1d:97:d6:e6:48:41:d1:c5:60:73:aa:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:F7:CC:A3:D4:09:28:BC:09:7D:B0:92:66:97:40:E7:0E:CB:F1
X509v3 Authority Key Identifier:
keyid:FB:2A:A5:AC:FC:9B:B0:FE:6B:91:1F:1E:CA:D3:EB:54:D4:5C:B3:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yqlrPybsP5rkR8eytPrVNRcs28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/d9e7ed-3c0f-4a92-8716-ee057cf9c161/1/1-yqlrPybsP5rkR8eytPrVNRcs28.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3e:a1:e6:3f:e6:51:0a:76:d8:c1:29:c1:0d:d3:33:65:87:
f7:a4:c4:54:ce:6c:97:50:ce:e6:31:db:12:64:cb:fd:9c:68:
ed:50:20:b6:80:9c:ef:92:5e:1d:b1:9b:8c:9e:ff:67:a4:31:
0e:cd:68:31:f1:98:ef:a9:88:76:27:05:91:53:f9:4b:48:f6:
16:e8:af:ba:c6:7d:6c:62:af:20:ae:13:d2:f4:9e:34:0a:b6:
0a:22:f3:bd:50:08:08:7c:49:b1:38:f8:8a:ed:c6:bd:03:84:
e8:53:cb:4c:8a:2e:d4:6e:0a:3f:58:5b:1c:01:e5:d4:db:e0:
6d:78:86:51:c5:8d:d8:90:c0:4b:3d:c3:34:bb:69:8b:43:b8:
a3:26:42:f8:07:d3:2d:fb:c0:07:43:47:41:90:73:d5:52:95:
cd:42:78:42:ff:a1:69:4c:73:e7:1b:e0:e9:e8:77:e7:e0:df:
52:dd:22:ef:e4:fe:78:51:24:4a:3b:69:9f:e3:3e:4b:34:48:
96:2d:e1:9c:a8:c2:92:f1:17:75:52:df:04:8d:94:75:d0:dd:
cf:4b:25:30:bf:b1:0a:3d:a9:9e:cf:14:46:0c:81:cc:e1:56:
f8:2d:29:b8:27:cc:4b:66:c5:0c:9a:16:00:8a:51:5a:43:33:
42:d0:9b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 23:13:31 2025 by rpki-client