Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
File: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft (raw, json)
Hash identifier: mRVweA2EvLTtT3OwsPEzsTbwHr0JQ8mNgvXUvtu18iU=
Subject key identifier: A0:06:D4:8B:9D:6B:54:2C:4E:7A:E5:85:39:24:EC:1E:29:BC:B8:7D
Authority key identifier: FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
Certificate issuer: /CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Certificate serial: 0199FF5951678B441EB3ABF04B7A20B61623
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
Manifest number: 0C1C
Signing time: Mon 20 Oct 2025 02:01:07 +0000
Manifest this update: Mon 20 Oct 2025 02:01:07 +0000
Manifest next update: Tue 21 Oct 2025 02:01:07 +0000
Files and hashes: 1: 1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl (hash: gq2e/PhsMcSB+ba38CVBGRyoUVkgquVhO3y3lbsdJ6A=)
2: 17Ijw7DnA-ky4M-qBTdOY4I7ec4.roa (hash: iu+mQ1jbZcSsyxSnbAMCeHovGJfrloyLqIxmClTwTuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:51:67:8b:44:1e:b3:ab:f0:4b:7a:20:b6:16:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb723706d0e83758ba52138e9db4207b5a5c189c
Validity
Not Before: Oct 20 02:01:07 2025 GMT
Not After : Oct 21 02:01:07 2025 GMT
Subject: CN=a006d48b9d6b542c4e7ae5853924ec1e29bcb87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3d:f8:b8:8c:73:45:9c:de:0a:45:2e:e9:24:
7c:03:03:b0:0c:aa:be:8a:3b:3a:72:ce:78:e8:bf:
07:37:04:55:91:55:51:a0:f0:d4:a2:14:c1:79:b8:
a1:80:b4:4f:43:68:80:97:5c:f3:70:3d:ea:82:70:
35:64:38:44:31:19:e9:c9:78:51:79:c4:7d:4e:f3:
46:3a:d5:a3:ca:d3:4d:67:fa:ae:14:de:b5:12:86:
31:bd:86:0a:66:0d:97:ba:72:06:5c:5e:d3:c0:ac:
1f:f6:1b:e3:9b:70:fa:b1:79:04:d0:a8:dd:bc:0e:
cd:c9:3d:88:8e:c2:aa:9c:e0:ff:b5:c1:7b:d1:a0:
cb:93:4f:53:73:2c:e7:ea:88:cc:8a:d1:e2:a5:fc:
e9:bf:9f:d4:3d:2e:46:9b:5b:1a:ae:ce:2a:bf:4c:
4c:f7:fb:14:f4:13:95:44:97:04:10:84:5e:bb:1d:
ea:e5:6c:b1:79:1a:20:63:2e:78:94:28:46:1a:5a:
71:9a:3b:92:77:76:00:37:7e:fe:e6:4f:47:9e:74:
fe:f5:9e:5c:7f:bb:34:d4:d4:58:f0:2d:63:81:31:
9c:9e:ee:f9:52:46:14:27:0c:e2:56:5e:ec:e1:84:
fc:41:ac:3b:55:1f:4f:76:d4:66:cd:78:51:0d:6a:
88:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:06:D4:8B:9D:6B:54:2C:4E:7A:E5:85:39:24:EC:1E:29:BC:B8:7D
X509v3 Authority Key Identifier:
keyid:FB:72:37:06:D0:E8:37:58:BA:52:13:8E:9D:B4:20:7B:5A:5C:18:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3I3BtDoN1i6UhOOnbQge1pcGJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/cfac31-8356-432d-a34d-b614361196fd/1/1-3I3BtDoN1i6UhOOnbQge1pcGJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:94:b8:bc:96:64:c7:93:27:5d:bc:fa:92:73:ff:60:03:49:
5b:40:8b:0f:b9:9f:21:b1:92:bf:75:33:44:9e:f1:ac:d8:02:
09:4c:16:7f:be:61:b4:f1:c7:b0:7d:0f:c2:4e:4a:98:63:b4:
1a:31:1d:28:f1:3c:5f:40:80:13:9e:26:90:71:62:ae:38:ab:
ba:95:fe:91:85:54:e2:5f:af:8f:b4:07:94:d5:ed:46:65:86:
1c:65:bd:f2:69:44:73:9e:33:01:a3:5a:11:23:f7:f4:74:08:
9b:c4:15:44:5b:84:75:b5:bc:aa:68:2d:a0:fe:32:0f:cd:58:
9e:4d:fc:2d:c7:7d:8e:9c:e5:a9:59:51:00:80:19:71:2d:01:
07:58:42:8b:73:cc:31:31:ad:1b:18:cb:8b:7a:ec:7f:d5:f5:
ef:3f:d0:35:6f:60:f6:88:8c:06:6a:77:2f:5a:1e:37:99:78:
6e:b2:cd:a7:37:15:5e:d9:7e:0e:57:0f:4d:1f:09:bf:13:e1:
41:ae:05:b0:7f:73:ce:45:3b:95:c1:bc:77:3f:a8:c9:77:3b:
66:ff:e4:ae:70:f7:e6:51:be:f9:ed:02:9d:60:0e:29:2d:5a:
ac:0e:ea:6f:81:26:8b:b4:04:9c:c8:65:d0:48:d9:74:63:46:
30:d1:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:37:58 2025 by rpki-client