Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
File: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft (raw, json)
Hash identifier: tyI6Ea/DFLXKxmqhFB9UHuJAIae0t61qLKfBSZyinbo=
Subject key identifier: 06:23:ED:67:AA:7F:C2:37:73:0E:F7:A7:D1:AC:1E:1D:7E:1F:A1:43
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 0199FC2183820002A463F914D8CF477F1B38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
Manifest number: 112E
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: 1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl (hash: QsJF3h2jsXuxfE1podpGe2kLKnKdmldPglVI1YxjFBY=)
2: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (hash: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:83:82:00:02:a4:63:f9:14:d8:cf:47:7f:1b:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=0623ed67aa7fc237730ef7a7d1ac1e1d7e1fa143
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:78:12:05:7b:a3:e0:e4:2d:fe:a2:cb:09:08:
84:44:ca:66:9b:63:e7:b9:18:17:47:d1:e2:ea:94:
94:a6:6e:69:0a:61:4a:16:be:43:a0:99:c3:af:ab:
b1:17:fd:c1:06:78:67:84:ac:95:ee:40:80:f5:bd:
20:42:3a:ae:a0:a7:89:84:0e:bc:d4:77:a8:ce:6d:
61:ce:f8:39:db:ba:24:37:97:5a:49:bc:9e:6c:31:
89:77:ec:6b:c9:bd:c3:6e:d0:51:a2:05:a9:fd:0c:
6b:4f:db:07:f7:a1:df:5e:35:42:76:d2:db:fc:5e:
b1:48:cf:ac:cd:5b:24:f4:cc:8f:cd:57:02:fe:40:
40:ca:83:75:b8:27:9c:c5:26:b0:84:e9:4a:10:f4:
01:a2:ed:f9:3a:d3:fb:9a:d6:02:94:62:56:ad:51:
be:24:4d:ae:46:cf:f9:5d:ae:f7:36:26:f2:90:f4:
51:5e:71:d2:ab:23:fa:2b:b0:cb:fe:46:01:b9:99:
f4:88:31:d0:3a:be:7f:bc:22:50:e8:ec:79:92:ca:
62:57:fd:3b:56:d7:49:4a:59:81:d1:e5:ff:d6:d9:
cb:25:29:f7:ca:9b:12:c1:a5:97:f3:b7:02:66:d8:
b2:e8:a4:95:a8:a7:39:d4:7a:15:08:ae:32:5a:42:
3e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:23:ED:67:AA:7F:C2:37:73:0E:F7:A7:D1:AC:1E:1D:7E:1F:A1:43
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:da:d0:80:1a:7c:65:f7:7b:5d:39:2c:f2:66:73:c3:8c:ed:
b1:5b:c7:b2:6d:27:c3:7a:68:1d:7e:12:58:bc:c7:9c:b3:3f:
bc:fa:eb:f8:b5:97:51:da:4e:34:04:4d:58:91:b1:a5:d6:d6:
df:03:73:5a:e5:c9:b1:36:59:72:13:74:58:ce:ad:fc:09:0f:
14:a2:5a:6c:3b:3d:a9:d7:8b:5f:09:db:8d:97:41:df:ef:f6:
5a:97:91:f4:df:2f:2d:ee:48:a4:1c:87:d2:83:47:57:b6:37:
07:42:38:7a:5a:64:e3:b5:55:ca:61:f6:df:f8:13:31:98:e9:
5b:86:ff:4e:81:ab:d5:f6:27:88:85:db:73:d9:42:a2:4c:f0:
63:13:d7:70:e1:50:85:a2:71:bf:f1:2c:0b:1f:03:43:ec:23:
46:cb:a6:9e:a6:87:00:57:bc:c3:e7:20:c1:f4:c1:9c:91:9d:
c0:6d:3f:4c:57:66:f2:01:34:a7:c7:14:2c:a7:85:c1:f6:6b:
c6:2c:0f:22:7b:e1:8b:9d:62:03:02:50:4d:af:96:86:3a:4e:
d7:ad:0a:68:d3:db:af:17:b9:49:fd:f8:d6:14:5c:2d:81:2f:
36:42:e6:39:c6:6c:ab:3b:b8:b9:2a:8c:bd:11:99:0c:2d:0e:
5e:d7:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:58 2025 by rpki-client