Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: TZbEcEuzPzM2kIN5I+QTJHPR30Zlw3YaV8vHvOLyd+E=
Subject key identifier: 11:75:C8:21:6A:63:FF:7C:3D:21:23:8E:00:8E:D7:B1:12:98:95:93
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 0199FE46B36675881C7C176097A2EE312C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 02E3
Signing time: Sun 19 Oct 2025 21:01:10 +0000
Manifest this update: Sun 19 Oct 2025 21:01:10 +0000
Manifest next update: Mon 20 Oct 2025 21:01:10 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: T6hDdVJ+9uYU2LjoniCrIgKnXOSJ37aIfSdL71vw7hU=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:b3:66:75:88:1c:7c:17:60:97:a2:ee:31:2c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Oct 19 21:01:10 2025 GMT
Not After : Oct 20 21:01:10 2025 GMT
Subject: CN=1175c8216a63ff7c3d21238e008ed7b112989593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:2f:85:44:fa:8d:80:76:1b:99:b1:fa:a5:
a0:fc:f8:6d:6f:c0:f2:70:33:13:0d:3e:4c:ac:c4:
a1:3e:57:22:04:ed:9d:24:01:8e:35:3d:37:70:e3:
2a:8a:d2:da:a5:a0:a2:57:55:47:26:50:60:6c:94:
24:bb:89:c2:1b:f4:29:7c:c8:17:b3:b8:08:e7:94:
a4:be:ca:36:42:5b:b9:c1:94:a0:63:0e:f2:72:5f:
4a:02:a7:05:73:2a:ee:ed:c9:42:dd:94:29:4b:72:
28:cf:18:3c:96:50:68:2d:01:fa:12:64:60:9f:a7:
8b:26:44:00:4e:d2:08:7f:65:31:cd:46:0c:a8:f9:
aa:01:43:70:cb:af:1d:87:fd:46:34:90:5b:2c:1c:
75:44:60:43:65:d7:b0:f1:ee:9b:a9:c8:de:c7:6e:
c6:0a:e7:0d:93:46:d2:c0:1e:18:13:03:51:84:b9:
c1:28:5a:5a:fe:89:d1:92:b3:7c:34:65:d2:a5:cd:
4d:91:0a:46:fb:5d:ce:20:b4:c6:f5:6f:a2:cb:45:
e7:c8:64:97:b2:a3:fe:f3:2d:9e:da:13:c7:a1:81:
7d:d1:b6:9b:71:bf:ae:df:1d:48:f7:e4:58:35:16:
c7:e2:38:12:c8:d2:dd:40:27:46:b1:a3:2d:00:38:
70:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:75:C8:21:6A:63:FF:7C:3D:21:23:8E:00:8E:D7:B1:12:98:95:93
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:94:df:33:36:22:da:be:bd:ed:c6:c6:a2:cb:f8:61:62:32:
0d:ff:7d:5c:30:a2:7b:5f:5a:10:bf:e2:08:65:18:89:d5:e6:
49:a5:b4:8c:f9:f0:6a:c7:96:d5:ec:7b:33:0c:95:88:80:c8:
69:f8:5e:88:11:79:cf:cb:c7:f0:6f:70:da:1d:eb:c6:74:b4:
ad:b3:0e:9d:bd:3b:f5:e8:4b:bc:8b:51:ea:2e:68:d8:5a:2f:
e0:b2:18:80:10:c0:a4:13:94:b7:87:ff:f8:6c:67:41:96:1a:
ac:81:01:cc:26:99:a9:0f:3e:10:84:bc:ac:d0:89:ce:5e:d5:
d1:28:9d:ef:4d:75:d3:ed:88:b7:4d:eb:49:4e:23:42:48:9b:
59:05:e4:04:ff:a0:77:12:f4:42:6b:ed:f6:5b:91:cc:80:eb:
f5:92:89:22:0d:b6:4d:13:a8:4d:75:6c:c7:a2:18:bd:05:5d:
22:8d:69:14:e1:f9:9c:19:ea:e1:d6:02:b8:8e:14:ba:35:5e:
3d:54:f6:ca:8b:ba:55:e8:a3:d4:09:bd:5a:67:96:07:f9:fb:
95:a0:b8:f1:0d:b8:81:46:8a:d0:fc:c1:a9:d6:29:a2:58:e9:
e5:b9:14:46:68:49:3e:a1:00:62:05:1c:4d:8c:54:85:0d:45:
68:02:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:32:12 2025 by rpki-client