Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
File: 1-6DtkuyUMh3LIZ03842QfhgyRL0.mft (raw, json)
Hash identifier: sFAjFJMULJzqnBD3qPJLS441bJshEiEzlHaPPMZBRqY=
Subject key identifier: F9:9F:3D:4B:6F:18:9C:7A:95:B8:48:83:32:07:9D:A0:5C:64:AC:43
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0199FA6A87BF154FAE2720492247498CF5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
Manifest number: 0AA1
Signing time: Sun 19 Oct 2025 03:01:49 +0000
Manifest this update: Sun 19 Oct 2025 03:01:49 +0000
Manifest next update: Mon 20 Oct 2025 03:01:49 +0000
Files and hashes: 1: 1-6DtkuyUMh3LIZ03842QfhgyRL0.crl (hash: lFB1jhwgks4R0GnaueSUl6MGEG28ulKoLsYbfAy2UTA=)
2: 1s70h6r87L-IulVsz6h8zyFXb_Q.roa (hash: 5H/5j8LaoLq/mqGaGFCi4+VAwjIOpu8grnJTKJtYod4=)
3: sEXfZ_frVlYD_mxkBMmTSShT4Aw.roa (hash: q9q1zeZ/+pc1h+hiJuULLx4217R4jnkBQRFKylMHrZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:87:bf:15:4f:ae:27:20:49:22:47:49:8c:f5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Oct 19 03:01:49 2025 GMT
Not After : Oct 20 03:01:49 2025 GMT
Subject: CN=f99f3d4b6f189c7a95b8488332079da05c64ac43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:db:45:59:c4:1a:a0:90:c2:3b:93:09:0b:6c:
36:95:7f:3a:88:97:e9:9e:96:06:48:43:b2:75:76:
cd:22:5b:ba:f2:d9:7d:61:41:15:96:5f:54:ab:3b:
6b:b9:30:ca:10:5e:9b:d2:f1:3d:84:62:af:5c:95:
c5:ca:2b:60:1c:1b:41:80:4a:66:3a:71:8f:e3:a8:
d4:12:41:c0:81:6b:75:4f:84:43:08:1f:38:97:0d:
8e:d8:af:ed:e6:df:42:d0:5a:3f:60:48:36:a5:aa:
b0:5e:e7:30:8f:50:8c:c5:04:56:31:4e:21:fa:35:
87:f4:08:50:fe:55:35:08:44:bd:e6:cb:6d:60:d9:
ed:72:d8:41:52:37:68:6c:0b:aa:46:11:9c:8f:f9:
7a:55:c0:e6:51:6d:08:ad:77:f8:9f:cd:1a:a8:53:
d4:44:b0:3c:85:83:18:e2:db:91:14:90:5c:9b:6e:
65:5f:a4:24:16:c6:68:4d:d8:7f:78:71:8b:08:6a:
40:c3:0d:ea:f6:2d:6c:e1:1a:e3:83:eb:95:5f:77:
cb:0f:8a:c4:a8:f1:f3:04:a9:c1:63:15:68:43:f7:
79:9e:93:74:86:1c:6f:1c:fb:68:30:b7:76:2d:b4:
d6:e8:e9:f5:b2:ca:22:ff:33:f6:83:7d:36:14:7e:
59:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:9F:3D:4B:6F:18:9C:7A:95:B8:48:83:32:07:9D:A0:5C:64:AC:43
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:00:90:cf:af:69:4f:83:d1:69:0b:e8:e8:ef:c5:73:91:
d6:55:43:2c:1d:e8:17:cb:62:8d:60:e9:6a:35:6e:15:6b:9a:
a1:60:7d:6a:7c:c1:bc:26:a9:f5:ea:32:38:0b:07:bd:95:98:
55:48:42:2f:0d:03:14:35:38:72:76:26:5e:27:bb:1b:b5:6a:
4a:af:6b:ea:3e:a8:a7:61:5f:af:3d:5d:d5:24:99:c4:e0:44:
89:6f:56:2b:7a:52:05:0e:bb:44:08:28:28:a7:16:9a:27:d4:
50:ca:fb:ca:40:31:ff:52:ec:15:e4:f4:de:10:9d:e3:f7:50:
54:41:64:87:d8:78:4d:b0:c7:32:98:81:76:51:72:8b:8a:54:
ed:ff:9b:95:03:0b:d9:db:5d:ff:9d:f4:ca:0d:6a:26:26:11:
49:b5:5e:80:19:9b:95:93:1b:25:a6:ed:0a:4e:32:a7:f8:a7:
f5:ba:06:a4:32:c9:db:59:c2:5e:f2:7d:f1:3e:c2:2c:84:fb:
b6:e5:38:b8:94:74:ad:97:85:54:39:82:6b:44:b0:45:b9:52:
56:e8:c4:5f:ed:cb:13:6e:6b:72:71:d7:46:cf:cc:e6:6b:f9:
39:de:94:a0:a0:b0:d0:fe:78:9b:4b:79:be:00:05:9d:f0:cf:
1e:4e:2a:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client