Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: avV6CtRDn72qV/4LLkxO70lIOQAiqZEeh6SHnwmzbL4=
Subject key identifier: B5:A7:74:7C:73:8B:83:D9:61:35:E3:CE:35:3E:59:DB:4B:3E:6E:2A
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 0199FCC68F97E02B4174D8F7D6984615C50D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 03F7
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: mYPwRXMn0PxOLu8dhWw0czMgs8Ojvu9Rhl+iWCrxNQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:8f:97:e0:2b:41:74:d8:f7:d6:98:46:15:c5:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=b5a7747c738b83d96135e3ce353e59db4b3e6e2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c5:78:b6:4e:c0:54:14:cb:b3:69:02:4c:7a:
48:54:be:8c:a1:92:af:a2:e3:9d:15:1b:05:b1:e3:
34:7c:5f:07:b8:95:a7:05:d1:ab:81:31:aa:8b:86:
bc:f1:8b:d9:9c:5e:ee:10:76:e3:12:9e:ac:e9:47:
87:ba:87:d5:d0:24:c8:6d:a4:6c:3f:ec:86:ca:2a:
40:93:36:86:2a:46:2d:eb:17:6d:7a:29:fa:c8:9b:
4a:5b:f2:82:8c:74:6d:c3:85:0c:4e:9b:79:89:1d:
a4:d5:36:2c:a4:ae:f5:41:e5:07:6e:45:9b:9a:df:
92:3f:eb:5a:ad:d1:ea:27:29:5c:8e:07:e6:c7:9f:
e2:22:ff:ee:56:ee:53:79:60:b2:cb:37:b5:c6:35:
44:68:c2:aa:b8:f0:90:ba:32:d7:f4:18:91:1c:02:
65:09:41:0c:9b:84:be:a0:89:ba:5a:d3:4e:8e:1a:
88:cd:f7:99:80:6b:cf:f7:55:07:58:71:b6:4e:dd:
e7:3a:60:5d:50:12:1f:7f:5a:78:2e:36:bc:62:d9:
e6:b5:4a:56:2a:e3:0a:17:cb:9e:2d:d4:18:07:f6:
a7:8f:ca:79:4a:25:b0:bb:7b:eb:76:f2:00:8d:83:
cc:ad:0c:4d:db:12:c9:13:24:57:d9:cd:0b:61:ca:
a0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:A7:74:7C:73:8B:83:D9:61:35:E3:CE:35:3E:59:DB:4B:3E:6E:2A
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:a0:25:60:9f:7e:6c:7a:17:33:9e:19:2e:e9:f1:12:33:46:
74:14:e8:ac:9e:72:2d:d5:27:91:ef:04:9e:28:6c:e5:65:94:
73:66:80:07:39:dc:15:e4:3e:6f:04:ac:32:70:3b:d8:76:91:
fe:86:55:d3:97:bf:eb:10:40:0c:b0:36:e8:f4:d8:12:cb:61:
0d:51:3f:e0:e9:e8:f4:1f:7f:4c:91:a0:b6:72:15:12:b5:f7:
34:e6:1b:77:b9:ed:59:da:e0:c8:16:e0:d0:4d:27:06:3e:0d:
2f:fe:39:ba:21:2c:9c:1a:6b:cf:3a:bc:27:54:d0:e9:7a:d7:
fe:21:2b:33:41:ab:89:a1:e8:b1:9c:c9:f0:30:6c:d7:d5:6e:
93:9a:79:81:b7:ce:b0:61:6e:da:49:a5:e7:72:05:33:30:a8:
81:9b:fc:70:d6:ec:7a:77:ff:79:33:0c:1f:a1:2a:e1:c4:50:
d1:e2:d9:1f:e9:36:9f:f3:7f:0e:68:0d:ce:27:c6:fb:14:4a:
78:7c:4a:9a:fe:11:39:03:68:02:b5:53:38:38:ff:e7:ce:44:
1e:8d:1c:8a:7f:67:49:a0:43:e5:9f:bd:68:92:9c:a8:18:1a:
0f:d9:9c:fb:42:59:32:73:7a:92:1b:84:5b:d6:b6:c6:90:33:
46:7e:9e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:25 2025 by rpki-client