Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: IYlk9wpud7i8P1rEeknSv5DeteyooWX4Cl8WzGTMjU8=
Subject key identifier: 1E:CF:9F:12:59:46:FC:2D:0F:1C:CC:FD:3D:07:8D:05:3F:27:5F:F8
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 0199FC8F3BA6F34F77B23F76234235E98534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0368
Signing time: Sun 19 Oct 2025 13:01:09 +0000
Manifest this update: Sun 19 Oct 2025 13:01:09 +0000
Manifest next update: Mon 20 Oct 2025 13:01:09 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: lHjg0sm17Bv5DqwVNg1G1roUNuWu1VIjRJ5oYikIq58=)
2: olYC3vt3bTWX5B6Daul0GiCdzRk.roa (hash: EU31+YZYAX7zRrR/hWxXMjIPU9jCSCk9p7wSptbJIM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:3b:a6:f3:4f:77:b2:3f:76:23:42:35:e9:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Oct 19 13:01:09 2025 GMT
Not After : Oct 20 13:01:09 2025 GMT
Subject: CN=1ecf9f125946fc2d0f1cccfd3d078d053f275ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:5d:f3:bd:a6:62:7a:f7:6a:60:25:6f:64:2f:
dc:b5:2c:51:45:6f:ac:aa:7a:e2:49:d0:82:d5:a4:
0b:56:ba:83:1a:a7:98:82:db:ac:10:17:53:61:76:
5b:63:01:ab:66:d2:30:7d:da:fb:d2:6e:fc:67:f5:
2b:f3:47:18:97:2d:a3:31:2b:23:fb:a6:db:a9:53:
3b:c7:84:8b:d5:b4:c6:f3:10:3d:07:df:48:83:2a:
db:91:a0:b5:2b:23:0c:ec:9a:08:11:fa:e8:b9:0c:
e9:65:bf:89:dd:a0:38:d8:4f:f3:db:70:23:62:5d:
5f:e7:97:79:fb:fa:fe:29:12:ce:d6:00:fd:5e:b5:
8f:f7:94:2e:02:39:c8:2d:f3:ff:e3:fc:e7:9e:cc:
ee:50:94:66:35:a8:79:15:a3:ac:81:f2:34:78:66:
df:43:ba:60:37:a4:29:18:07:5b:ca:67:91:8d:ad:
f3:31:12:53:99:77:0b:75:6e:0b:4d:05:c3:33:8e:
e7:00:09:45:13:73:cd:1b:3e:42:f0:47:18:0b:42:
0f:c5:d7:02:77:1f:52:08:0e:88:a8:50:15:0b:c0:
1a:91:76:ee:9c:96:ca:6b:0a:37:ab:11:16:33:e0:
f2:a0:75:ec:72:19:e0:8d:e9:15:48:79:fe:bb:f2:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CF:9F:12:59:46:FC:2D:0F:1C:CC:FD:3D:07:8D:05:3F:27:5F:F8
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4d:4c:0f:2d:86:a1:4d:38:ba:61:fc:bf:51:2c:e3:ba:b8:
ab:9e:a9:e5:62:af:01:7e:ed:9d:c2:6e:df:22:19:63:e5:02:
f4:e4:4c:7d:59:ea:31:2f:3f:46:a6:75:06:fd:f6:c8:f8:2a:
c5:6f:c6:4e:34:6a:2b:6c:68:77:2a:f7:62:5b:b9:87:bb:b9:
6e:b8:1e:7c:0e:c7:dc:74:ca:78:86:29:2c:30:3c:ab:55:ce:
69:17:4a:e3:e8:52:38:f5:35:ea:34:14:78:2a:5a:a9:b8:4d:
4d:d2:17:45:82:7c:b2:5a:d9:c6:d4:3a:c1:06:33:3e:8f:a5:
97:f4:12:64:2b:c5:c9:f6:ce:4d:d8:de:fa:d2:31:11:0e:5d:
63:7a:43:cd:b7:b8:5d:67:bc:82:8c:34:49:b7:bf:f5:1b:a1:
cd:a0:5f:40:97:29:cc:43:de:ad:76:49:2f:c2:c0:7d:87:c2:
57:e2:f0:bf:84:0c:5c:49:22:10:87:11:b9:86:d9:df:b3:fa:
fb:56:b4:45:44:9b:4a:0d:96:cb:22:a9:fb:51:ff:bf:f4:47:
27:73:e0:0a:bb:12:bb:32:4e:89:5d:f4:16:91:f8:33:3d:b5:
62:0c:ce:ca:6d:1b:e7:87:37:64:37:e7:9a:d8:42:db:2b:e4:
ed:4b:21:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:20:22 2025 by rpki-client