Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: IYtMmi4marYR52Mj4BwCEtpCnnm3TwnD92GjkyRCRaA=
Subject key identifier: 11:CC:3B:B8:C9:1A:FD:2B:F6:79:A2:97:E3:88:03:E9:A2:7A:42:65
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 0199FB0F2E87A6E90BFE0DE83F2004DFA413
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 32
Signing time: Sun 19 Oct 2025 06:01:40 +0000
Manifest this update: Sun 19 Oct 2025 06:01:40 +0000
Manifest next update: Mon 20 Oct 2025 06:01:40 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: VoP4AwRwDxOGgFp5bucX531xp/gpK1Xki4Y8j58imAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:2e:87:a6:e9:0b:fe:0d:e8:3f:20:04:df:a4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Oct 19 06:01:40 2025 GMT
Not After : Oct 20 06:01:40 2025 GMT
Subject: CN=11cc3bb8c91afd2bf679a297e38803e9a27a4265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c3:5b:71:e8:42:94:a2:6b:b7:b7:6d:0c:ff:
11:d4:76:86:88:d8:68:68:6d:da:2d:ba:93:e9:2b:
c8:b8:3d:ff:97:a8:28:4c:3a:5a:61:5a:22:77:a1:
96:87:9d:b4:52:dc:b2:6b:56:85:6a:ac:ed:d9:31:
f4:b5:c6:79:7e:a0:5f:39:49:1a:ef:46:b1:ad:3a:
a2:b2:19:48:0c:f6:47:dc:a5:8b:c6:83:ee:97:2c:
bf:22:bd:0e:7c:de:1b:cd:d1:f7:17:92:98:50:3a:
f7:16:86:fc:00:14:a6:61:ef:4f:f8:28:fd:83:e2:
93:61:b7:f2:1f:5f:e8:19:82:49:ce:f1:57:a9:6b:
dc:b7:e4:8c:8c:9b:cd:0d:4d:94:65:78:3b:c6:3f:
b5:bc:16:67:84:90:f5:cb:26:9a:58:7a:27:87:41:
41:d3:b6:de:04:69:8e:04:99:3d:6a:a9:20:ce:67:
37:58:6c:5d:38:a3:0c:d8:51:16:39:2d:eb:c0:32:
80:c8:c9:f6:13:f8:ae:3c:cd:2d:13:07:a0:85:5d:
bb:52:39:a5:e6:7d:3f:c8:5c:fc:e5:64:97:73:ac:
98:2d:53:b9:2f:a4:e4:b1:9d:f2:07:b7:a6:4f:5e:
d1:c2:e4:34:3b:fd:a5:29:2c:50:8b:ca:da:d3:63:
0c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CC:3B:B8:C9:1A:FD:2B:F6:79:A2:97:E3:88:03:E9:A2:7A:42:65
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:27:1f:98:23:ae:9d:cc:d9:7c:44:9b:a7:64:11:aa:57:
3f:ad:d7:26:b2:52:de:bb:a8:fe:4f:d7:2e:d8:8b:48:a9:64:
8a:93:ea:1a:a1:11:0a:77:e7:79:dd:3a:3b:fc:7a:7e:a9:b0:
16:07:12:74:8a:88:5f:d9:f5:fa:7d:fd:4a:0e:8e:43:2c:21:
fa:f9:16:7f:18:e8:3f:37:1f:45:d1:de:47:21:d8:60:fa:4f:
96:fb:c1:ab:eb:da:8d:ee:26:74:76:41:66:87:b5:a9:43:b1:
6b:15:09:9f:33:02:6e:db:63:93:8b:0e:62:2b:30:3c:71:24:
3a:5b:8c:e7:de:e6:bd:20:9f:0b:57:c5:76:b6:1a:6e:8e:77:
58:0a:32:0e:8d:e5:78:11:69:d5:7e:2b:66:fa:95:c5:6d:33:
15:95:54:9a:79:4f:5d:8e:53:e2:6a:2e:01:59:66:b4:f0:29:
0c:4c:0f:0d:27:ef:4f:3f:98:c4:d4:79:45:85:3f:c1:31:d9:
7e:8e:38:44:28:9a:a2:21:8c:73:ee:18:34:37:a7:94:1c:b2:
ea:c8:8f:20:c0:f2:b0:e8:ae:c7:c5:ad:bb:58:e5:ad:35:0e:
fe:c6:db:e9:17:fc:1e:f3:4e:00:58:ce:f9:a2:30:63:fb:52:
5a:13:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:49 2025 by rpki-client