Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
File: 1-U3y-PWhPGRTaJFOPb5Coko22l0.mft (raw, json)
Hash identifier: yrCSvl5MskqEebsReJWlLQN/nUNzArXNgxSuR4fXPLI=
Subject key identifier: E5:AF:92:67:30:A4:E4:B4:EA:D6:4E:AD:69:7E:39:14:C8:DC:88:CE
Authority key identifier: F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
Certificate issuer: /CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Certificate serial: 0199FD348504428576C028AE0F31514645A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
Manifest number: 0931
Signing time: Sun 19 Oct 2025 16:01:41 +0000
Manifest this update: Sun 19 Oct 2025 16:01:41 +0000
Manifest next update: Mon 20 Oct 2025 16:01:41 +0000
Files and hashes: 1: 1-U3y-PWhPGRTaJFOPb5Coko22l0.crl (hash: dkULyA2G+heDOGRAn5E39rwjOj2qzmSBxDyQ7P3CAhA=)
2: 6ZlUqBOWy6SfY78F6eyD54lMPAY.roa (hash: SE9+hxx8Z232AXhES9ATqyXkhpq/sJNlQEl+ue1Fkso=)
3: bxOTocJnEMQaZpcfRu6SqZ9nVWk.roa (hash: 24LpjnsSFmDuGUExqtfPTVWojNEGWlT3a13WwNuUa60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:85:04:42:85:76:c0:28:ae:0f:31:51:46:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df2f8f5a13c645368914e3dbe42a24a36da5d
Validity
Not Before: Oct 19 16:01:41 2025 GMT
Not After : Oct 20 16:01:41 2025 GMT
Subject: CN=e5af926730a4e4b4ead64ead697e3914c8dc88ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5f:a4:d2:ba:7f:1f:6e:4d:72:fb:40:12:bc:
98:c9:63:ae:4f:e5:ec:64:06:37:9a:5d:26:d0:75:
03:96:de:1d:27:10:90:0b:be:62:60:c6:c7:77:be:
7c:6d:b3:cc:53:c3:70:29:aa:6e:e0:d6:90:d4:ea:
4e:b4:f9:6a:c9:99:2b:6e:e5:2f:76:01:ff:10:fa:
2f:5d:fe:1f:32:d1:f6:bf:a8:9e:8b:39:32:53:a4:
c3:75:8c:fa:30:8f:d5:61:44:ae:e1:00:a6:0e:d6:
ea:27:3c:3c:d8:97:51:8a:08:9b:4b:25:28:5c:78:
8b:49:a9:11:dc:f9:4c:0c:d0:8e:ee:21:32:d2:20:
7b:a9:33:0e:3d:9b:68:ed:17:cf:ef:ef:59:1f:db:
45:81:72:ab:8c:42:0f:d5:18:b3:51:72:cc:24:b2:
0a:90:c9:f4:93:69:aa:40:47:bc:a9:f2:4e:b4:d4:
ec:8c:51:23:66:83:79:3e:1c:ba:1d:44:68:45:5d:
d1:41:fb:c7:c8:8b:45:f4:8b:db:b4:2f:5f:ae:46:
34:51:a6:c5:07:5a:f5:33:e1:40:cc:e1:2a:ca:4c:
fb:31:94:a0:75:88:cd:1f:f7:07:61:1a:f8:7b:64:
dc:2a:67:8d:b0:15:2e:e3:d7:81:6f:d0:d8:fe:bf:
af:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:92:67:30:A4:E4:B4:EA:D6:4E:AD:69:7E:39:14:C8:DC:88:CE
X509v3 Authority Key Identifier:
keyid:F9:4D:F2:F8:F5:A1:3C:64:53:68:91:4E:3D:BE:42:A2:4A:36:DA:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3y-PWhPGRTaJFOPb5Coko22l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fd8074-223a-4b52-bedd-66bdffa8bdc1/1/1-U3y-PWhPGRTaJFOPb5Coko22l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:6e:d4:ee:3d:33:c8:7d:d9:7f:f4:a8:e3:9b:0c:e5:94:
15:2e:fe:19:28:d8:7c:3a:1f:22:34:96:57:bc:d7:2a:de:92:
96:01:e6:24:79:c6:be:94:24:4f:8f:2e:68:b5:2b:9b:62:0d:
60:08:fb:5a:4d:8f:58:e5:c6:d4:a2:73:57:0f:5b:04:69:42:
0a:f8:1d:0d:d8:a2:1f:38:b5:50:75:2a:29:a9:3e:87:70:b0:
02:a4:51:df:90:c0:2b:90:a2:52:65:ee:5a:b4:36:ad:dd:d8:
08:46:d4:18:f6:73:b4:f3:32:56:e4:4e:5f:f4:05:8c:d0:b5:
4c:53:cb:6b:d7:90:c2:0c:79:a6:d1:c8:6c:32:1f:99:15:68:
e2:75:51:05:7a:1a:cc:13:cd:ef:ac:5a:f9:bc:d6:55:8f:cb:
de:7b:36:3c:3f:3c:c5:3d:c1:79:ea:0f:c1:cb:08:21:4b:1d:
51:0b:a9:55:29:c2:32:6e:a2:74:66:79:ed:17:7c:99:82:1f:
71:33:4d:45:b5:d7:7e:16:d4:e9:ce:1e:13:ce:fc:3a:18:90:
cb:d6:21:1c:72:cd:c1:ab:1a:5f:c7:cc:99:c6:64:11:9d:1b:
05:27:3c:fa:3c:9d:7e:5d:79:59:08:fa:d1:80:1b:c1:7f:7f:
1b:68:94:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:03 2025 by rpki-client