Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: NRubTNztYk0PHmBdg/lTBvUWKZki2fLuykFan4sa6CA=
Subject key identifier: 6D:26:EF:B1:54:A7:17:5C:85:25:73:E5:C8:D0:6A:D6:1A:F3:36:E4
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 0199FC218EBFCABAF4127B2082EFF536B42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 040E
Signing time: Sun 19 Oct 2025 11:01:21 +0000
Manifest this update: Sun 19 Oct 2025 11:01:21 +0000
Manifest next update: Mon 20 Oct 2025 11:01:21 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: Ld4bEeBmZeHMAx4KlfTkoRFFBk5Szk50dla+CTXkV6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:8e:bf:ca:ba:f4:12:7b:20:82:ef:f5:36:b4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Oct 19 11:01:21 2025 GMT
Not After : Oct 20 11:01:21 2025 GMT
Subject: CN=6d26efb154a7175c852573e5c8d06ad61af336e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3b:68:ef:ca:b2:97:a0:47:9a:17:45:3d:e9:
75:1f:16:4e:04:60:3e:e2:a1:21:e3:88:89:fc:37:
69:30:30:47:70:46:54:e4:d4:21:44:f6:3a:e0:3c:
49:db:d2:db:73:f9:8f:50:df:77:51:15:45:ca:f9:
3d:07:a6:b8:9e:e2:14:52:d7:f7:8b:80:b9:49:81:
ce:71:7b:6b:f4:02:1c:73:65:42:76:79:2c:7a:5e:
fd:1d:16:a0:d2:da:92:7c:29:20:98:6a:a0:89:86:
a4:15:b0:fc:20:1e:4c:a0:59:b8:96:5a:8c:90:65:
49:b1:47:28:02:61:99:05:53:80:a1:b7:17:04:f9:
2b:41:b6:f8:fc:37:bd:7f:bd:93:48:5c:2a:90:c8:
e0:c2:ab:16:91:11:98:24:e4:6e:22:7a:e1:75:3e:
df:d2:2b:a1:bf:41:d9:24:42:c9:2e:06:14:bd:39:
18:3c:fe:01:9e:2a:83:e9:5a:b3:3b:06:1a:46:65:
ca:45:1b:65:c1:48:69:c1:07:cd:72:a3:ca:7c:60:
7d:e3:22:62:6b:51:de:90:5a:c9:da:2b:dc:be:de:
22:16:45:dc:4a:20:d9:e0:55:77:19:3e:c9:dc:19:
2a:c1:29:40:79:0c:a8:1b:5b:83:09:e6:35:c4:4e:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:26:EF:B1:54:A7:17:5C:85:25:73:E5:C8:D0:6A:D6:1A:F3:36:E4
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:9a:30:48:92:02:5d:54:00:4d:39:39:31:a9:f6:c0:72:
b3:0e:f5:c3:a5:d8:a4:30:bc:ab:57:c9:38:2c:a3:45:d5:3a:
72:8e:55:a7:54:02:7e:eb:15:b6:bb:e2:e3:a4:98:a1:8f:c3:
e9:77:0f:39:40:89:38:fc:6e:42:ca:be:b8:41:51:1d:f9:cc:
aa:64:0e:13:d3:6e:37:55:e9:19:47:6a:5d:b4:b9:53:ec:c3:
8b:ff:2f:10:3d:66:15:88:0d:c4:23:03:df:9a:38:c1:16:ef:
6e:60:b9:5d:d6:12:0d:44:66:a8:9a:2b:6f:82:34:37:2a:67:
39:42:a0:09:f7:eb:8b:fa:45:3f:82:ac:cc:e7:98:60:eb:6c:
c6:18:34:1b:5f:91:03:57:f2:0a:1d:4f:2c:c6:fc:fd:76:f8:
a3:20:f9:d2:62:ba:fd:34:d8:4b:f4:5a:e2:e4:19:83:ff:55:
60:7c:9a:d3:95:42:be:7c:06:97:b5:af:17:f5:a2:c8:14:56:
fb:2d:6c:99:ba:e2:69:e8:6e:cd:50:6f:aa:aa:d3:71:09:bf:
6e:c0:fa:f1:d0:e6:a5:df:01:02:46:ce:3e:f6:6b:68:98:ea:
5c:aa:55:0c:37:d9:40:74:66:62:a3:69:f1:89:78:95:98:aa:
75:68:5c:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:40 2025 by rpki-client