Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
File: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft (raw, json)
Hash identifier: jzV1/HBnt0Bu+GYnmQKa7GiOBzlL4ln8cH5Kop3m45I=
Subject key identifier: 90:FE:FF:D2:E1:3A:C8:D1:D9:88:67:54:A0:2F:09:0A:6D:C5:72:43
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 019A047F8EDB933CA33465EC19E92F2C6D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
Manifest number: 170A
Signing time: Tue 21 Oct 2025 02:00:59 +0000
Manifest this update: Tue 21 Oct 2025 02:00:59 +0000
Manifest next update: Wed 22 Oct 2025 02:00:59 +0000
Files and hashes: 1: 0PRh-Ryf5Bbnr0lOh4NNRU5Dvtk.roa (hash: jgK2NNDoTbWiQ7uIBzHm15T4lQ1IK4iXj6RZrP5o0x4=)
2: 1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl (hash: zs2Q27oFdtdSgvCodhGm3/KF0lNzl4HRckiJ3Ib2z9c=)
3: 2LNh2IK4jZn1zUGBoSeuOCdHsXI.roa (hash: oJ1ixo11Dgt3gqct0Oh6zVb2kz2NqX0+yoE97/FL8Fc=)
4: BG1cqZ9YVyNJo6yn7aRCRKFwi1E.roa (hash: iWMwZkGfB/SrRzVNIRiDbpY7F5RfXCU+vPN0FbVq8Zo=)
5: UhdjQtj-FfDyuU6V5WnFSOKYjmk.roa (hash: QbBqfb3nWseUxtS3InHqu29EzpheC2v8vhkaoLoZ0FY=)
6: X3rPCUQOCzHRW1aOB1JMsXT6ETw.roa (hash: Mnw7vSeAR5wWc2r0nd1dxOLcS1XganxG0iGji5vuiZQ=)
7: dkGowCxyAk57tMP-82kGQeDdynY.roa (hash: Vdu4x0hDwdG5RaDwCyJZJseIjrU0RN3jHw1tXALp/yQ=)
8: eV94BXe8LtEfrEreyIQkc6VGevg.roa (hash: n/7ce91I2ejVxdCN2rHxzeGGcgk6A9ogkMPQOK3FmSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:7f:8e:db:93:3c:a3:34:65:ec:19:e9:2f:2c:6d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Oct 21 02:00:59 2025 GMT
Not After : Oct 22 02:00:59 2025 GMT
Subject: CN=90feffd2e13ac8d1d9886754a02f090a6dc57243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:94:bc:9d:19:69:52:34:08:5a:f7:ae:d4:5d:
c6:53:5f:5f:78:db:43:eb:0e:41:eb:a9:8b:7a:f1:
d8:b9:0e:98:e4:ad:4a:69:a8:ec:11:6b:d9:fa:00:
f2:67:1d:2a:50:71:91:1e:cd:ca:09:f3:c1:f9:b3:
c0:64:d0:32:c5:b8:02:a6:be:f8:b7:e2:56:27:64:
d9:e6:eb:7e:08:97:fe:5b:e3:21:8c:9a:b0:6b:0d:
0e:c7:b1:0c:69:48:1e:9e:09:12:68:62:67:2b:77:
93:d2:db:4f:7c:d7:04:f1:00:6c:ec:86:4f:80:5d:
e2:aa:ab:fd:3f:5f:bd:0b:1e:53:a6:28:a4:0f:d2:
4f:5d:c3:ae:d9:ec:33:bd:aa:fe:15:97:f4:b1:50:
fa:5b:d9:eb:6a:b6:fd:7a:25:58:c6:f5:8e:2a:ce:
54:39:56:35:c7:7f:c4:f4:6c:ab:f4:5d:87:a3:25:
7b:09:59:7d:e5:15:32:81:72:26:df:88:16:87:c7:
ee:b1:70:5f:41:02:50:98:b6:a2:96:65:7b:76:7c:
60:27:a0:58:23:4b:b3:4a:31:67:2c:5b:02:64:f3:
89:fc:71:da:01:1a:52:6e:98:42:f7:86:94:57:fd:
53:a5:3b:b4:97:5d:e1:b5:1f:5c:45:84:10:bb:de:
ee:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FE:FF:D2:E1:3A:C8:D1:D9:88:67:54:A0:2F:09:0A:6D:C5:72:43
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:1f:f1:fa:12:cc:54:dc:a5:f4:d2:e7:27:ec:62:da:5d:66:
f2:c5:9c:ac:ab:4e:25:c8:61:8f:a1:7b:34:9f:17:57:04:c6:
83:02:73:c7:7b:42:ef:29:35:e6:80:8a:38:36:f1:b0:6d:1d:
41:11:8f:96:40:2d:77:83:71:a4:4e:d7:9c:30:4c:86:01:8c:
58:4d:25:c5:70:ff:3f:2a:46:c3:3b:c4:c3:07:fc:60:29:21:
19:0c:aa:d5:37:cb:a0:52:75:37:93:49:0d:73:32:d3:71:85:
5a:89:dd:91:d2:04:2c:61:9f:17:60:8c:13:0d:ea:d3:70:69:
e3:c3:a5:d2:ff:1a:47:9d:30:4d:72:12:5b:b8:34:e0:0d:c5:
6a:e4:2b:aa:18:0d:8d:a8:cc:89:1d:f3:76:64:81:ac:78:c0:
89:80:bd:38:49:c2:a3:d6:36:e9:ba:ff:8b:8d:44:78:04:61:
aa:21:02:4b:7a:ab:31:e9:bb:98:3f:3e:36:10:d2:de:1d:18:
f4:d0:8f:fc:63:80:50:3f:89:c3:cc:fb:b9:95:5e:7c:38:9a:
85:99:05:23:32:83:97:df:21:cd:1e:1d:83:69:4a:7c:ed:8f:
bb:45:5d:05:5e:cc:ed:5f:83:2d:44:1b:53:3d:32:03:89:3a:
e1:c4:c7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 10:00:10 2025 by rpki-client