Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: 6V1XwKuVjJXCPZOOF4XvUdcB+pb7+CQ6Z1YHoRrPL/A=
Subject key identifier: 9E:22:C3:6C:31:29:2D:13:64:ED:CA:F9:5C:A8:FA:29:D8:D7:EF:96
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 0199FD33EC22C8DFEC22387D10EE541FE899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 147A
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: zfqnmWmvmBOLmpB+X6i8ljsysi8urU9JpTV7htYPQgc=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ec:22:c8:df:ec:22:38:7d:10:ee:54:1f:e8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=9e22c36c31292d1364edcaf95ca8fa29d8d7ef96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:88:b3:c0:b3:5b:01:4c:a1:2e:c0:f1:e3:9c:
06:0a:c4:dd:4e:5c:cf:b4:90:d9:ef:1a:43:04:9b:
94:55:ec:11:2f:ba:60:98:02:3f:67:e0:09:eb:29:
ef:19:75:67:fc:1e:95:f7:b4:bf:4b:4f:ab:7f:7d:
3d:f4:47:94:a1:be:bd:b1:6d:dd:da:f7:00:87:ee:
0f:85:cd:e6:73:c9:6c:81:bb:46:9c:1f:f2:8e:b6:
23:c5:a4:29:0e:20:32:64:51:91:33:9e:c2:e8:8f:
b5:35:71:a0:08:a4:ba:37:57:10:68:41:f2:64:90:
38:2c:bd:0f:f8:9c:63:7b:3c:44:f0:db:48:91:2f:
63:8e:4b:c4:2d:76:bf:17:04:3b:51:01:48:f2:57:
78:1d:e2:89:c5:e5:41:2a:59:e3:b9:92:cb:04:5b:
42:59:18:0a:d7:01:b5:8e:92:e9:81:54:8a:46:69:
92:08:d5:6f:4f:05:c8:96:3a:cd:81:aa:4f:d1:61:
8d:a8:e8:b9:6d:87:15:49:a2:94:25:bd:cd:72:12:
25:36:cb:4c:64:fa:b6:31:c2:9f:35:ff:34:50:86:
a9:b1:ac:ea:a7:16:66:96:79:ab:a2:b8:51:4e:02:
8c:09:6e:86:d2:4f:be:c0:5e:c5:f3:09:b5:59:c9:
8a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:22:C3:6C:31:29:2D:13:64:ED:CA:F9:5C:A8:FA:29:D8:D7:EF:96
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:47:2e:66:99:b5:07:2c:d3:ee:f9:4b:fc:e0:2f:3f:ae:78:
04:09:f9:39:4a:08:d7:df:b3:87:9f:88:e5:bd:fd:94:f4:09:
0f:3f:e7:ce:74:19:7d:81:f0:46:0d:6c:5c:90:5d:56:e4:ef:
d9:a4:58:bd:d8:1a:5b:5b:c4:d7:e0:e1:fe:fe:b8:d6:ce:5b:
b1:10:07:11:7c:16:3f:76:6b:14:1a:0c:fd:68:82:4f:95:16:
7b:64:16:88:83:5b:bb:54:03:6c:eb:59:ea:bc:78:70:49:1a:
2e:58:9b:4b:ee:24:bf:50:6b:eb:51:97:5d:86:8c:01:6e:f4:
2d:ca:51:cb:ad:a2:4f:90:54:fc:e1:2c:95:e2:ce:15:c8:92:
4c:7f:33:89:08:a3:d4:6b:49:72:74:45:79:4b:8c:aa:5a:e7:
e7:45:a4:8a:93:be:c0:ff:2d:20:72:96:b7:ac:4e:c6:58:5c:
b2:e2:c0:af:4c:2c:c5:cd:98:3d:e2:82:ac:7a:53:a5:96:ab:
e9:6f:aa:3e:e4:f4:36:61:e6:42:aa:f6:4b:d1:1a:2a:37:71:
dd:77:8f:7f:f2:5c:f1:93:1a:1a:41:45:c4:8a:a9:5f:b3:6f:
12:f7:e0:67:76:7b:5c:72:33:8c:7b:d6:c8:66:06:c0:f5:69:
94:af:6e:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:24 2025 by rpki-client