Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
File: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft (raw, json)
Hash identifier: gFRl3nw2qAdN74L4kEZ/7Ea6qopBHJLWYc9spIjt25I=
Subject key identifier: AC:A2:9C:D0:2B:B6:D7:2C:E6:18:2F:B0:34:CA:65:48:B2:43:C6:F5
Authority key identifier: FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
Certificate issuer: /CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Certificate serial: 0199FBEC03E3FD8921C15EB1BC73C63695F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
Manifest number: 03C2
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: 1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl (hash: qfGh8yckgCub3ZplNYbQSRu4OezDEjJQ5MWnxDAOPj4=)
2: 4WhaxzqjOWgHeud8E6-UL9ZN_hY.roa (hash: TZDAudwyFjbRw0tzJmebPVsMRYwl0zqHqWQ1Gp1GXPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:e3:fd:89:21:c1:5e:b1:bc:73:c6:36:95:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0896cf1823c74bfcb7d623e2c438787b9f167b
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=aca29cd02bb6d72ce6182fb034ca6548b243c6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:74:12:8d:b2:0c:da:26:53:06:6a:7c:d5:79:
35:89:47:9a:33:ae:2c:ff:fa:c5:2e:c3:86:51:8c:
f5:97:5d:50:32:c1:0c:9b:7a:33:65:f8:87:ad:96:
19:60:a8:93:92:a2:a4:db:8b:9d:a0:f5:b1:91:b6:
42:77:c1:78:d1:cb:4b:ae:e9:55:2b:cd:83:97:6d:
39:25:6c:3d:3f:60:34:0f:f0:19:a5:f5:47:66:0c:
31:a3:e5:f4:0e:95:bc:7a:aa:e9:cb:1a:89:1d:0c:
5d:72:48:65:3d:08:e1:6c:38:c4:ed:d9:8c:a5:d2:
63:b6:dc:c1:c6:34:2a:e9:57:3f:98:21:64:8a:f8:
03:85:27:11:80:6d:64:06:f6:1b:07:d1:63:f2:b3:
da:ed:49:7f:ec:59:c7:b0:9d:9e:f9:d6:da:54:8e:
68:91:d8:2a:9d:41:75:50:8e:52:67:3b:83:f5:52:
cb:e0:94:ec:05:56:94:8b:8f:a4:4e:a7:10:4c:47:
64:c4:e4:47:93:06:d2:9d:67:22:b7:74:4c:2b:98:
16:bc:2a:dd:a2:32:49:ee:80:c4:31:19:f3:36:1e:
c8:25:91:ac:27:7b:63:a5:a1:d3:c1:6c:46:86:9d:
7f:b3:06:ca:6c:5c:b8:09:90:f8:54:78:a9:20:7e:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A2:9C:D0:2B:B6:D7:2C:E6:18:2F:B0:34:CA:65:48:B2:43:C6:F5
X509v3 Authority Key Identifier:
keyid:FA:08:96:CF:18:23:C7:4B:FC:B7:D6:23:E2:C4:38:78:7B:9F:16:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-giWzxgjx0v8t9Yj4sQ4eHufFns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a27620-d32d-4e98-aec4-bf6a97a56f10/1/1-giWzxgjx0v8t9Yj4sQ4eHufFns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5b:af:d6:a9:b8:bf:36:7b:a1:ad:1b:ef:5f:34:d4:b9:2a:
b5:36:db:9c:50:50:29:0b:63:05:b9:bb:cf:07:99:16:f7:a2:
1f:db:ad:b5:63:ce:81:ee:26:36:f2:bf:48:e4:2a:01:e9:ec:
9f:54:d4:b6:9f:89:2d:d1:a2:c5:49:bf:e8:b4:30:4c:6b:66:
ae:8a:dd:d6:39:56:f3:7f:54:ac:43:5a:de:4c:dd:d8:5d:dc:
2d:b6:a0:25:2e:92:fa:63:54:b8:ee:26:d5:0c:75:d9:ae:cc:
c4:e3:f6:29:9c:03:fe:da:d7:2a:55:26:6c:30:91:c3:f9:52:
4c:8f:69:83:7c:fc:33:39:ed:c4:a4:ef:cb:7a:c1:62:95:49:
2f:1e:93:8b:1e:6a:01:c7:b0:3d:e3:a9:25:b5:b1:f4:8f:79:
df:21:ff:5f:b2:d4:84:a0:1d:00:0c:b6:85:22:52:b4:3a:d8:
a6:6c:29:98:14:52:56:6a:b0:f7:9c:f8:e9:29:ef:c1:e3:ca:
7d:84:84:ce:42:38:a4:3e:42:e3:03:6f:5a:34:92:4e:55:50:
01:02:c5:58:a9:14:20:a3:af:3b:60:34:47:46:53:67:8b:d5:
a3:33:b7:5a:d2:d6:be:81:61:25:7d:37:1d:9e:31:35:fd:46:
2b:2a:3f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:32 2025 by rpki-client