Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
File: 1-3grePIKbktwZDBSvRpArxWlYzg.mft (raw, json)
Hash identifier: olgibbkV7M3DdPe5Fdn1wrVWpccvi2EBmJbzp7wUXoo=
Subject key identifier: B2:E3:70:3A:97:44:C7:4F:4C:5B:6C:DA:DA:60:68:C1:02:3F:44:1B
Authority key identifier: FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
Certificate issuer: /CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Certificate serial: 0199FC8F7DB1E1799882A5DD5DB6B609CC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
Manifest number: 1589
Signing time: Sun 19 Oct 2025 13:01:26 +0000
Manifest this update: Sun 19 Oct 2025 13:01:26 +0000
Manifest next update: Mon 20 Oct 2025 13:01:26 +0000
Files and hashes: 1: 1-3grePIKbktwZDBSvRpArxWlYzg.crl (hash: KyF/JFhsYRocQzNiFMfnKFtiZeUy1CjrhNzWip4YDjY=)
2: B1dTi0f_of0kmb1xPgeCM0wY_So.roa (hash: AUmVPkVAQPCmSbSqHlAfz6SLH5DutLJ3OBZdx5Ql8g8=)
3: g4GI57zRcwc78atAcKzvcX8O_Jg.roa (hash: I42VDUXmjO3wztnHcn35mdQWvB1AtZN/AkJrcxSWDOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:7d:b1:e1:79:98:82:a5:dd:5d:b6:b6:09:cc:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb782b78f20a6e4b70643052bd1a40af15a56338
Validity
Not Before: Oct 19 13:01:26 2025 GMT
Not After : Oct 20 13:01:26 2025 GMT
Subject: CN=b2e3703a9744c74f4c5b6cdada6068c1023f441b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:75:d5:d8:97:3d:c6:02:0a:04:31:ae:64:
08:d8:27:b9:9c:19:48:be:80:8e:3d:0c:42:04:78:
d1:59:40:95:fa:28:3f:de:f0:26:a8:9d:61:4b:e1:
e5:4e:45:b5:0f:2a:ce:51:9b:31:3b:b0:c7:f7:f6:
4b:27:37:f9:42:e3:74:28:fe:05:75:23:9d:ab:5d:
83:b2:34:25:38:43:0e:44:53:95:f4:87:00:37:16:
75:2e:de:1a:33:1c:30:6e:1e:5b:e6:2d:42:2d:f7:
77:ab:ab:80:e5:8f:d2:39:b2:f8:ca:8d:53:78:3d:
0b:df:4c:e0:a7:70:68:80:ff:53:4f:8e:de:da:a4:
6c:b7:fd:57:9a:55:c0:da:66:04:5f:bf:6d:26:ff:
e1:d5:31:fa:d1:56:b7:5e:50:f7:73:bc:0d:98:38:
9b:1a:97:b4:59:24:b6:50:95:bd:ee:ee:63:85:58:
3a:8f:9b:af:25:29:21:79:25:ca:23:64:01:be:b2:
40:81:c3:ca:2a:06:00:fc:17:0a:40:2c:f1:89:5f:
28:95:c8:8e:84:5e:5d:da:f9:0f:fb:8c:8b:38:0b:
60:05:02:ef:66:68:21:9f:0f:59:55:08:bb:18:b3:
93:18:a3:3a:cd:d9:df:60:d7:98:01:2b:0a:db:64:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E3:70:3A:97:44:C7:4F:4C:5B:6C:DA:DA:60:68:C1:02:3F:44:1B
X509v3 Authority Key Identifier:
keyid:FB:78:2B:78:F2:0A:6E:4B:70:64:30:52:BD:1A:40:AF:15:A5:63:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3grePIKbktwZDBSvRpArxWlYzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9dc933-5c0d-4461-a45d-8f7d5691c1be/1/1-3grePIKbktwZDBSvRpArxWlYzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:05:2a:a6:46:37:06:88:a3:f3:e9:b8:1b:eb:14:ff:72:e7:
3a:21:c9:82:98:c8:fc:25:1c:c3:d4:fb:75:2e:43:37:43:23:
d1:f1:84:56:3e:91:31:62:00:b9:73:cd:08:66:17:d0:72:46:
0e:34:7b:a4:d0:19:a8:19:4d:ae:aa:f8:14:54:2c:69:8f:35:
e4:cb:2a:73:4c:3b:db:db:2f:b3:b6:06:8c:45:4d:f1:12:46:
82:32:c0:26:14:1a:63:53:9e:48:34:81:ca:d7:0f:6e:f4:8f:
1d:fb:b7:a8:0d:f9:a0:61:4f:d8:58:1a:57:45:98:a7:40:da:
0f:ad:db:44:cd:f5:f7:52:2f:c0:8d:fa:5a:31:64:6d:e5:27:
5d:bf:09:54:ec:f1:75:df:a0:36:df:81:6f:38:a3:6f:88:c3:
20:81:4f:25:88:c5:71:8c:d4:42:de:64:9f:3d:29:9e:2d:3b:
b8:89:1b:11:ce:9a:bb:fe:12:19:f8:47:30:7f:65:5c:9c:77:
4d:58:85:47:0e:81:5d:22:d7:16:45:d3:bb:76:1c:59:47:0f:
c8:7c:43:02:b2:1c:01:4b:2b:58:78:14:66:92:09:08:c5:b7:
96:fe:f3:8a:ea:8b:97:8a:29:ad:ac:1a:c1:86:fc:5c:90:83:
0c:5d:9c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:45 2025 by rpki-client