Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
File: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft (raw, json)
Hash identifier: rvKf87KGYzy6fZP57n6qdO70sVnay4OVFixlpi4A9XI=
Subject key identifier: C0:2A:27:31:44:BD:17:F3:41:8A:B5:88:E9:6A:6C:A0:E8:05:33:E5
Authority key identifier: FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
Certificate issuer: /CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Certificate serial: 0199FB45E2276CBFC9665C3356238C3D430F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
Manifest number: 1339
Signing time: Sun 19 Oct 2025 07:01:25 +0000
Manifest this update: Sun 19 Oct 2025 07:01:25 +0000
Manifest next update: Mon 20 Oct 2025 07:01:25 +0000
Files and hashes: 1: 1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl (hash: HMoC/covS2u6trCU7gzlIbRrz4YBb8NxUf+t0VlOqI0=)
2: igBGcaK6I-04bslxB8dvdsYLHhw.roa (hash: FBSMg/oDiupeLPZD+Uq2Nknq3gqPFPRMj+3j0Pt7jOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e2:27:6c:bf:c9:66:5c:33:56:23:8c:3d:43:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02bac7b79a3109e9be3dfe4f06d585bb9f9051
Validity
Not Before: Oct 19 07:01:25 2025 GMT
Not After : Oct 20 07:01:25 2025 GMT
Subject: CN=c02a273144bd17f3418ab588e96a6ca0e80533e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c6:1b:af:cd:b5:b8:07:21:b6:c1:98:c8:44:
f6:ad:ec:e0:aa:77:ed:5c:3c:69:40:1f:1b:f4:59:
91:7b:e6:ef:5f:42:84:fc:66:1f:d4:5f:39:45:8e:
77:4b:33:b3:b5:5f:16:97:ed:cc:cc:ec:10:e1:92:
05:74:b8:8d:e8:70:59:a2:4a:6b:25:5d:51:11:d6:
44:33:10:5d:4f:53:df:b7:2b:0b:82:a7:e2:ff:7b:
d0:f9:85:20:1e:f9:98:31:68:5a:3f:cc:f9:78:c0:
cf:da:ca:39:da:18:38:81:d9:c4:8e:fc:12:39:dc:
88:76:3c:71:6a:68:99:93:b9:58:4d:af:13:45:b3:
cf:9e:c9:5e:c3:a4:bb:18:1b:7b:40:1b:7a:5f:75:
66:78:6a:4d:fa:46:83:5c:f6:ad:2b:0b:34:06:8c:
24:25:c9:2d:f6:29:88:18:09:ac:4d:b2:84:11:82:
fd:ec:ef:fe:77:fc:36:96:21:05:97:e5:e3:f7:99:
03:5f:0a:f4:40:03:5f:ba:fc:4c:24:f6:e8:91:94:
44:cd:ed:86:27:79:20:df:ed:f8:74:65:67:6f:f9:
0b:ad:76:6b:fe:af:73:14:02:67:40:33:40:7a:9d:
77:25:a7:8d:bb:95:15:3a:62:68:b5:9e:f6:2e:18:
f9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:2A:27:31:44:BD:17:F3:41:8A:B5:88:E9:6A:6C:A0:E8:05:33:E5
X509v3 Authority Key Identifier:
keyid:FB:02:BA:C7:B7:9A:31:09:E9:BE:3D:FE:4F:06:D5:85:BB:9F:90:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wK6x7eaMQnpvj3-TwbVhbufkFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/200e2b-d3a4-4557-9735-4950f86cbb5b/1/1-wK6x7eaMQnpvj3-TwbVhbufkFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a8:88:e7:8d:26:b0:63:cb:be:1f:3e:be:ad:00:db:11:89:
aa:2f:ff:c4:59:52:1d:ee:c5:fc:92:03:64:e2:a9:48:5a:f5:
d1:e1:ad:75:ef:46:b9:c7:22:3c:b1:7e:4d:90:d0:93:11:dd:
2a:3a:b5:35:05:7d:0d:31:8d:26:ff:34:4a:cc:f1:0a:31:73:
e2:47:df:2b:15:64:e2:f9:1d:8b:ba:82:dd:b0:c4:f7:18:f6:
6d:e9:93:8b:1e:6e:b6:56:37:af:20:7d:f6:47:41:9a:e0:bc:
ee:99:0f:10:2b:cf:76:75:78:ce:73:3b:5f:74:04:c8:10:47:
70:9a:53:21:d4:6b:6e:ce:e4:f6:2f:01:e2:82:b1:ed:80:49:
ad:78:8e:b5:33:ac:59:fc:0f:44:11:b5:8a:9a:fa:b5:29:dd:
1e:df:4a:84:71:52:07:2f:f1:74:a9:bd:c1:be:ef:3f:cd:81:
76:db:f1:87:eb:98:dc:99:7d:45:2f:7f:42:4d:2a:d1:14:6c:
2c:a0:19:8f:56:c5:96:f5:07:1c:d2:2c:c9:29:71:de:a0:d8:
25:22:cb:1e:96:aa:4d:04:d2:63:cd:8d:ce:d7:1e:52:59:1f:
4d:b7:a1:34:a5:54:1e:ef:4e:0d:68:5d:48:5f:4f:8a:3d:35:
5e:6e:7d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:10 2025 by rpki-client