Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
File: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft (raw, json)
Hash identifier: C9oF7N/yOZZ01uotmHWIWKEAUfiIfT4tkmR1aA9gakw=
Subject key identifier: E9:B0:02:5F:92:22:53:6C:86:11:DE:A6:C7:D8:60:59:C9:81:2E:62
Authority key identifier: FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
Certificate issuer: /CN=fa307821230e7ba81a4d471a591e78ea759c6934
Certificate serial: 0199FD33E858871DE4C738C2A69A6D2943EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
Manifest number: 120A
Signing time: Sun 19 Oct 2025 16:01:01 +0000
Manifest this update: Sun 19 Oct 2025 16:01:01 +0000
Manifest next update: Mon 20 Oct 2025 16:01:01 +0000
Files and hashes: 1: 1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl (hash: XJsfeIrAyk+L8Z5PaU0meBAwyWz2HXK+q5sGfvT3/mQ=)
2: zwZQF0vycCjVTXKGPdvngCC8DiM.roa (hash: 3IwNNQnob+DFL0Pb8HdxIF5jocGgq3KKZc4IEORySTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:e8:58:87:1d:e4:c7:38:c2:a6:9a:6d:29:43:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa307821230e7ba81a4d471a591e78ea759c6934
Validity
Not Before: Oct 19 16:01:01 2025 GMT
Not After : Oct 20 16:01:01 2025 GMT
Subject: CN=e9b0025f9222536c8611dea6c7d86059c9812e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:75:d0:05:d5:ce:91:9c:4f:59:e0:e2:e2:27:
4a:21:74:bf:f1:80:30:86:80:f1:54:ac:ea:a5:72:
07:2b:78:ee:83:e8:d4:42:e2:29:6f:2a:bc:4e:8f:
d1:75:e3:b5:e0:95:14:74:6c:5b:d7:c9:61:9a:b1:
a5:1a:c4:85:f8:4e:33:ac:8c:c4:ee:f0:02:ec:67:
2c:9e:7e:8b:e9:a3:d2:09:cc:5d:14:59:a3:e4:2e:
42:80:b6:ff:85:1c:17:18:e6:7f:5d:f3:be:78:64:
c1:ef:28:47:7e:fc:ee:2f:2a:7b:e4:99:55:f5:4c:
1a:cc:f6:42:c5:85:46:31:62:c5:39:72:ea:5f:d4:
fe:05:47:de:c6:ba:7f:be:19:de:78:ee:8f:fe:ff:
b9:22:99:ad:a4:71:21:ba:21:58:51:1e:ae:9d:6c:
fa:4a:8b:dd:8b:33:e1:15:49:64:ed:84:97:17:06:
f5:05:15:99:a5:ad:d1:4f:23:83:63:fe:5b:47:a1:
9a:ea:fa:c2:cf:07:a4:70:a7:15:64:c8:e5:85:4c:
cf:f3:81:cb:43:97:bf:79:d4:de:cf:a9:8a:cd:e2:
a3:87:5f:aa:77:38:d6:aa:11:3d:b4:c4:9e:28:e2:
5e:81:63:f9:b3:7c:27:69:ec:6b:67:71:c5:70:10:
54:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B0:02:5F:92:22:53:6C:86:11:DE:A6:C7:D8:60:59:C9:81:2E:62
X509v3 Authority Key Identifier:
keyid:FA:30:78:21:23:0E:7B:A8:1A:4D:47:1A:59:1E:78:EA:75:9C:69:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jB4ISMOe6gaTUcaWR546nWcaTQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/910f67-1ffc-41c4-a2ea-f1e65f97c89a/1/1-jB4ISMOe6gaTUcaWR546nWcaTQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ba:d3:54:b6:3a:13:0f:79:16:55:d9:f9:f9:42:af:07:be:
b6:ab:f8:b6:62:f0:06:62:1d:9d:aa:50:4e:5e:61:dc:c4:05:
2b:6c:f1:e0:ec:51:7b:10:c2:41:c7:06:40:00:23:17:7f:09:
8a:98:e0:b7:2c:28:3c:f3:99:92:5e:59:99:6f:97:45:26:06:
a5:64:06:00:20:7b:95:c2:44:03:fe:27:0d:a8:69:88:82:9e:
04:f3:b8:93:ee:ec:5d:46:ac:3f:1e:92:2d:2b:f2:22:4e:55:
2d:7c:e2:a6:4e:f5:21:6b:77:f8:03:9b:12:0c:df:d4:a6:f7:
97:9b:35:0e:fd:e8:33:a9:0d:77:6a:7c:7e:3d:15:45:a2:37:
41:64:9d:b2:a6:7c:33:03:90:40:0b:21:eb:88:34:b9:5e:1a:
7d:20:66:a5:eb:8c:d0:25:ca:57:24:82:68:ca:e9:da:f3:3a:
f3:b9:f3:d0:17:c8:2f:6e:4f:3f:17:38:5a:bc:d4:d7:fb:e6:
85:a5:2c:14:e0:1c:02:49:2d:17:10:6a:8d:04:42:f4:4c:3d:
1f:4f:fb:9f:56:02:41:f2:9d:56:c8:38:82:7a:bf:c2:37:9f:
46:cd:63:16:69:87:da:a3:59:27:62:7d:91:84:3b:1e:d7:23:
b7:61:6b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:07:32 2025 by rpki-client