Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
File: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft (raw, json)
Hash identifier: SRP2ELhKRnZnpcUKbXOWpeVAj4Lu+VgNqRSOWoUYrfk=
Subject key identifier: 0C:34:31:FA:77:C3:FC:13:9B:02:F9:85:02:F6:92:2B:6A:70:D1:FC
Authority key identifier: FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
Certificate issuer: /CN=fa3c481607619c835d09f2471d976d7cf74a0439
Certificate serial: 019A00DA1917E8A1DA9420C73305BF4B8DF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
Manifest number: 0A14
Signing time: Mon 20 Oct 2025 09:01:24 +0000
Manifest this update: Mon 20 Oct 2025 09:01:24 +0000
Manifest next update: Tue 21 Oct 2025 09:01:24 +0000
Files and hashes: 1: 1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl (hash: kbHfT1hTJubX1D41SFCd8E93S9U+xkpj/rGLQO5tD+0=)
2: Sm1L2uD9xe6VKth3NCE80Tv0dS4.roa (hash: 4pEKUYq0mI20y4yprrQN9bkk++T0cMvg0WwPL7Akx3E=)
3: wE4iXQHrpihOXjgvME7qpP1G1M8.roa (hash: 5SJHRAX4MIESmj0+ywOG6OpEbcFrbWg8slbXKt2TqRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:19:17:e8:a1:da:94:20:c7:33:05:bf:4b:8d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3c481607619c835d09f2471d976d7cf74a0439
Validity
Not Before: Oct 20 09:01:24 2025 GMT
Not After : Oct 21 09:01:24 2025 GMT
Subject: CN=0c3431fa77c3fc139b02f98502f6922b6a70d1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8b:6d:17:1f:f9:e6:18:e4:db:32:d1:69:44:
8e:63:d8:5e:74:8e:55:28:5d:79:6d:8c:e6:0b:c8:
1a:69:19:08:d9:6d:fd:47:37:0e:e3:cc:68:06:4b:
33:f2:5e:cc:4b:6a:7d:2a:b4:b6:2b:14:57:9b:e4:
0c:08:86:f3:67:28:95:e4:e3:66:7f:b8:30:27:f2:
6e:09:f3:ab:8a:a8:a0:91:45:dd:44:db:f5:44:a8:
9a:bc:23:21:4c:67:67:ac:25:18:0b:ad:92:e4:eb:
3f:92:c3:f6:13:c9:e0:52:7a:2d:38:26:77:45:44:
b0:e0:78:e5:d9:80:55:5b:72:09:90:cc:94:e0:da:
31:5a:a6:28:20:7d:a8:5a:0e:d0:1c:d3:76:43:00:
ce:2d:82:17:9b:02:20:56:de:2e:41:9b:86:5d:14:
6c:16:63:fd:15:8c:fe:74:26:23:33:85:19:8b:f5:
bd:78:b2:ba:0d:22:cb:85:59:c5:0a:88:17:52:cf:
10:19:00:9a:61:f7:9a:10:18:4b:61:8e:98:dc:b3:
d2:fd:1c:ff:7c:3e:dc:18:d0:1d:48:c5:e6:90:d9:
11:f7:53:19:f9:bd:e0:98:b3:9b:c0:5e:d0:22:c4:
c7:8a:33:01:14:08:37:0e:41:66:ab:0c:5d:67:a8:
fa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:31:FA:77:C3:FC:13:9B:02:F9:85:02:F6:92:2B:6A:70:D1:FC
X509v3 Authority Key Identifier:
keyid:FA:3C:48:16:07:61:9C:83:5D:09:F2:47:1D:97:6D:7C:F7:4A:04:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jxIFgdhnINdCfJHHZdtfPdKBDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/99848b-c4f8-46ab-8923-1304454bf29d/1/1-jxIFgdhnINdCfJHHZdtfPdKBDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:a8:e4:20:24:04:b8:1f:4d:e7:73:5f:f0:bd:69:99:f1:b5:
0f:d3:32:30:c5:97:34:b2:cb:01:33:17:65:cb:d4:b1:b6:22:
48:99:25:cc:89:48:81:11:14:e2:e1:7d:f4:9e:16:93:b0:73:
46:6e:af:c2:6b:da:12:84:c3:3e:3a:8c:52:9f:99:69:e1:00:
f9:db:6e:f4:a9:af:6e:6a:0c:d0:77:5b:f6:7f:05:e1:29:c7:
0e:8e:20:32:3c:13:9a:07:28:68:44:3d:a6:a9:68:6f:82:c1:
90:3c:26:e9:18:bc:38:79:b6:32:c6:1a:32:a4:56:52:67:3d:
7b:7c:9f:eb:1b:04:ce:c1:f6:72:1d:fa:99:14:c1:16:7a:e7:
77:08:97:98:05:fe:bc:06:bc:57:3b:be:06:b1:2a:b6:ef:d5:
2c:76:95:96:1b:d9:33:be:7e:06:7b:df:6b:3e:e1:7c:2a:51:
64:50:74:10:10:9a:41:5e:9e:70:fc:7a:c0:67:c7:35:c5:51:
51:ba:9b:40:af:e5:dd:86:11:e1:2e:22:68:48:44:2f:26:2b:
b2:d1:c5:4b:b9:58:4f:80:97:34:00:1d:fa:a3:61:b8:e5:89:
3b:04:ec:b8:50:29:53:27:1e:03:ea:25:35:6f:76:38:0d:36:
c8:ed:bd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:59:42 2025 by rpki-client