Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json)
Hash identifier: lpjZ0u+5vH7Mt8toDlhA+PjsIUuVVb3y13d/19EWtDo=
Subject key identifier: BB:44:CB:0E:96:AA:73:5B:3C:61:38:4F:00:38:34:92:5B:61:B7:E0
Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Certificate serial: 0199FBEAB327D3B3E97419A33D54D996978D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
Manifest number: 103B
Signing time: Sun 19 Oct 2025 10:01:26 +0000
Manifest this update: Sun 19 Oct 2025 10:01:26 +0000
Manifest next update: Mon 20 Oct 2025 10:01:26 +0000
Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: pDV5+Ku3dTIF8/1/PdVfXIoLnR54X5TmMr4UZHd2uNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:b3:27:d3:b3:e9:74:19:a3:3d:54:d9:96:97:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23
Validity
Not Before: Oct 19 10:01:26 2025 GMT
Not After : Oct 20 10:01:26 2025 GMT
Subject: CN=bb44cb0e96aa735b3c61384f003834925b61b7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:63:f2:00:d2:fc:29:29:71:7d:ea:91:61:f1:
27:67:78:21:8b:78:dc:50:24:46:0d:37:05:eb:2a:
9f:c7:0b:a7:75:8a:d9:14:07:57:cc:81:f8:0e:e1:
d4:2b:34:70:7e:d8:48:4b:78:77:a2:68:6a:86:53:
91:85:55:31:db:5c:75:4c:da:27:20:81:58:f9:e6:
60:66:bf:af:92:06:fd:9d:84:b3:52:7f:99:80:6d:
0b:0e:8e:74:1c:af:20:92:7e:3f:66:74:23:88:0e:
85:f9:91:e7:69:a2:eb:70:96:59:36:89:fa:03:29:
1d:bc:a5:5f:04:c8:2d:b8:27:72:b8:4b:1e:e7:75:
54:07:c5:e1:07:66:05:3f:d0:36:16:9b:1d:d5:94:
c3:88:c0:4c:ac:cf:9f:1e:a8:3f:12:f7:9f:68:a4:
7f:df:6b:8c:01:ec:db:51:ed:9f:95:60:00:ec:ae:
b0:e6:70:cb:54:36:d6:3a:1d:56:e7:61:2e:c5:a5:
25:f3:b2:05:39:cb:57:5a:c3:ff:57:0f:e2:91:bd:
ad:06:ba:d2:f5:66:42:8e:4c:ff:4e:54:2a:f3:4d:
18:d7:4f:7b:06:ec:57:28:1f:aa:ae:96:88:5e:f3:
9e:b4:e6:e7:1a:9e:20:02:1b:7b:fc:66:f2:a1:db:
32:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:44:CB:0E:96:AA:73:5B:3C:61:38:4F:00:38:34:92:5B:61:B7:E0
X509v3 Authority Key Identifier:
keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9d:9b:cf:fe:0a:f4:1e:ec:40:d9:49:49:3d:19:10:a2:6a:
a7:d3:2d:6b:24:6b:d8:b2:9c:1c:17:0c:7d:14:b8:fc:9f:bf:
29:46:c3:47:c5:d1:ec:9c:29:3c:e0:34:74:71:af:8b:1e:a4:
13:21:ae:9a:b3:8c:50:a4:64:9e:09:c5:21:45:19:d0:98:dd:
2f:83:f8:a2:2b:b9:45:c1:8b:e4:da:55:0e:61:53:13:54:d5:
b3:27:e2:30:cb:a9:f9:12:bc:93:11:bb:4b:31:39:f2:19:99:
77:bb:2a:31:b4:dd:ef:86:0f:16:8c:cd:d4:6f:c0:ec:b3:18:
ff:bd:14:cf:72:5a:dd:ea:15:9c:04:4a:39:c4:64:2e:39:5c:
ec:4d:b2:55:d4:4c:05:75:e1:ac:c9:7b:6e:c2:cb:4d:3e:65:
e3:af:95:cc:c2:be:6e:b9:1d:f0:b4:8d:95:c3:f7:a9:b5:90:
a6:7b:2d:fc:4f:11:4d:fc:06:30:0b:97:e4:c4:93:bf:5a:d4:
3b:4b:da:5c:44:6b:ff:75:1a:ae:52:5d:ed:e9:60:08:04:4b:
0d:4e:5e:aa:1b:11:a0:53:5d:97:c9:e7:c8:78:ec:43:bf:20:
ce:a3:5d:64:a6:79:d6:a8:fe:86:10:d7:75:48:ec:c1:68:c5:
ed:c6:47:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:30 2025 by rpki-client