Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
File: 1-zutfQaFmVztNRCLLhFSWnqrFBg.mft (raw, json)
Hash identifier: 5z84575fAxkbtXD5hiCRQ5SdVlYRITU7B5uR1UBGd64=
Subject key identifier: CE:2A:CC:8C:0D:12:29:D7:B0:43:62:69:06:1D:85:4B:60:8B:5E:B0
Authority key identifier: FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
Certificate issuer: /CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Certificate serial: 0199FFC723E8625CD4792286EFF8F18BF08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
Manifest number: 07DA
Signing time: Mon 20 Oct 2025 04:01:04 +0000
Manifest this update: Mon 20 Oct 2025 04:01:04 +0000
Manifest next update: Tue 21 Oct 2025 04:01:04 +0000
Files and hashes: 1: 1-zutfQaFmVztNRCLLhFSWnqrFBg.crl (hash: KqJU3qetBQHDFpTnf9OPpKDbybO0n5M3vEb1W3MCjLA=)
2: bS2AXyQj6T-v-BFQFVgN8omhTFI.roa (hash: Hlm2+aXt9COQOoJS5S5Wj7t+eBfLw0yjo9KgiG+EY2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:23:e8:62:5c:d4:79:22:86:ef:f8:f1:8b:f0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3bad7d0685995ced35108b2e11525a7aab1418
Validity
Not Before: Oct 20 04:01:04 2025 GMT
Not After : Oct 21 04:01:04 2025 GMT
Subject: CN=ce2acc8c0d1229d7b0436269061d854b608b5eb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:1f:ac:f4:cc:20:eb:92:4c:2b:23:16:b5:
ac:c8:51:af:b1:49:f7:14:51:c3:24:e0:52:ff:9c:
66:87:cb:e7:35:93:1d:42:42:70:15:68:2a:e9:99:
de:b0:b1:15:e2:a0:15:51:99:e3:42:c5:ad:21:98:
a6:75:fb:fd:df:81:6e:c9:a1:9e:19:c0:86:3c:d0:
4f:8b:f2:19:ac:fd:22:31:64:db:72:d9:f0:9f:f3:
3e:3a:2c:21:ae:ff:c5:81:e1:cd:48:5b:f0:bf:60:
95:04:cb:a5:1e:cc:f6:41:d3:49:4b:b6:15:b9:d8:
13:9d:f8:b8:63:aa:49:6d:41:1d:03:1a:65:1b:1d:
19:89:46:47:e1:ac:83:ea:33:64:79:6b:1c:03:79:
75:0c:01:91:cd:6c:a7:3a:75:01:cc:91:10:a6:2e:
01:8d:7c:86:36:d4:23:0e:f8:90:75:db:22:5c:29:
6d:22:60:c9:86:c5:54:38:db:d5:71:43:f7:3c:1b:
d2:a3:5e:a6:ac:9b:78:9e:fd:6b:4e:86:85:2a:c7:
e1:8a:29:da:69:c5:11:89:d5:d4:7c:d7:f3:fc:4b:
f7:1b:3a:88:1a:ac:f1:4d:73:b8:c4:5f:7c:1d:80:
04:3c:c3:ed:57:b8:5f:7b:72:fa:ef:9b:a3:cd:ca:
a1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:CC:8C:0D:12:29:D7:B0:43:62:69:06:1D:85:4B:60:8B:5E:B0
X509v3 Authority Key Identifier:
keyid:FB:3B:AD:7D:06:85:99:5C:ED:35:10:8B:2E:11:52:5A:7A:AB:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zutfQaFmVztNRCLLhFSWnqrFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/79d746-03f9-4c71-afc7-e5d0b76de5b8/1/1-zutfQaFmVztNRCLLhFSWnqrFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:20:c4:42:ed:2f:f8:5c:bf:bc:9d:1a:40:57:ce:9e:2b:48:
dc:b8:70:ff:d4:a6:85:1b:4c:da:d7:fd:3d:93:76:eb:fd:19:
f9:06:96:bb:da:52:94:ec:49:ca:a9:6c:bc:64:60:0b:ef:aa:
68:3c:db:21:f3:49:21:31:f8:59:33:04:9d:db:71:f2:04:9d:
b3:a4:24:9a:93:46:10:17:c0:dd:7a:54:34:32:1d:27:8a:58:
19:ba:84:83:8e:65:85:1b:86:a9:88:f8:9e:5e:da:7d:49:4e:
a0:48:cf:d9:15:df:90:e2:00:8d:10:f0:04:12:5f:02:47:57:
cd:43:00:61:fb:a6:73:36:f1:7d:a6:08:9a:e4:7d:8f:6f:a6:
21:fd:37:6b:35:a2:2b:b6:90:09:81:a3:56:c4:64:c2:b7:b6:
f2:14:66:69:bd:be:13:20:5d:d2:a8:d6:c0:d7:c3:57:77:68:
1f:89:be:b8:c3:d4:bc:9a:63:1a:26:f8:d5:99:31:cf:62:6e:
13:f2:81:07:3b:66:21:7d:af:7a:bf:69:14:2e:00:42:26:a7:
dd:20:15:45:6e:37:13:45:66:1f:b0:4a:6b:a1:4f:dd:45:66:
4f:ac:c6:38:79:26:67:ad:ab:83:0a:62:f5:80:cc:f7:1d:df:
d2:3a:9b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:06 2025 by rpki-client