Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: brH3Qg+45mD4H4fxrPboIhkViIchq7K3+zrWpwHjzhU=
Subject key identifier: 6C:1A:4C:8D:2A:A9:25:10:2B:09:B9:0A:20:C4:48:DB:A8:EE:4E:AC
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0199C6B3B2D2EBD41705E6C3EB782537AE08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0EA8
Signing time: Thu 09 Oct 2025 02:01:29 +0000
Manifest this update: Thu 09 Oct 2025 02:01:29 +0000
Manifest next update: Fri 10 Oct 2025 02:01:29 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: DyHdt9lDTZXc5A0T+tC95LEBCYsknh2tnlKp7Bc9/dg=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c6:b3:b2:d2:eb:d4:17:05:e6:c3:eb:78:25:37:ae:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Oct 9 02:01:29 2025 GMT
Not After : Oct 10 02:01:29 2025 GMT
Subject: CN=6c1a4c8d2aa925102b09b90a20c448dba8ee4eac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:a7:f2:01:bf:d9:50:d2:21:38:dc:7c:41:
77:67:c9:79:5f:1e:c3:73:d0:c2:60:e2:21:1c:31:
76:4d:5c:60:c6:a4:cb:6a:6e:74:1f:55:e5:27:f7:
26:3a:8f:28:45:8e:63:d5:4e:5d:0d:10:65:56:d3:
0a:e0:54:34:bb:2b:54:e8:5e:b3:9c:6c:f8:ff:cf:
65:bb:2f:bc:1c:0a:fe:3f:a2:8c:d5:db:11:5c:30:
fe:e5:5d:ca:09:1a:38:b6:ba:c2:98:28:04:a0:54:
d0:56:f5:ba:20:ba:47:2b:46:a6:2c:48:43:42:d5:
2c:eb:a6:92:9c:ae:52:c7:f3:e1:05:aa:ef:ab:92:
68:80:d9:c6:55:7e:7e:c4:f1:bb:35:34:ec:7c:db:
aa:75:7d:3d:68:83:48:49:bb:af:5e:9d:1d:2a:72:
c8:c1:fc:71:d1:9a:96:97:ed:b1:2e:ca:b7:90:5f:
69:e6:a8:e0:cb:9a:45:99:65:74:d7:e9:94:56:ce:
50:73:2c:76:1b:36:50:d6:01:39:eb:2c:4b:05:d8:
a8:33:4e:ab:4d:44:3c:01:87:b9:84:c5:f8:d9:51:
da:fb:bc:d7:e8:5f:c9:85:6d:76:9f:f0:04:61:a7:
5f:98:2b:6f:a7:38:56:73:1c:00:32:df:9c:20:c7:
57:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1A:4C:8D:2A:A9:25:10:2B:09:B9:0A:20:C4:48:DB:A8:EE:4E:AC
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:91:c7:a8:b1:fb:0f:86:40:8c:5b:14:e7:3c:8e:d2:0b:39:
5c:72:98:63:49:e6:a4:d3:11:b4:5f:f2:7e:61:06:c7:7d:90:
59:3f:b6:44:57:ed:7d:15:b2:66:3f:18:21:51:ef:51:27:12:
ce:94:42:f5:71:91:b4:ed:88:06:29:e5:20:81:5b:9f:87:89:
02:eb:9d:09:ba:48:89:2d:a5:22:ba:49:72:cb:6a:7b:22:52:
64:8d:47:75:d6:cb:40:25:4d:5d:bc:4c:21:b0:e1:f8:e1:3b:
1e:67:da:5c:a6:d9:42:67:95:36:7b:53:8f:02:ca:50:48:38:
05:13:51:07:93:99:4d:01:d7:1f:da:e9:77:3c:f7:b7:72:83:
e5:94:ab:a1:3e:69:c0:83:3e:df:92:02:82:67:00:e5:f5:e1:
fe:09:fe:0f:a8:a9:d6:f8:13:09:4a:f8:c3:44:fc:f7:3d:e5:
bf:db:ce:a6:25:4f:2d:d3:b7:3c:70:a7:52:d7:52:79:1d:c2:
15:d5:bb:fb:01:af:b8:24:84:a6:e4:81:c4:63:65:8b:3c:ac:
86:6e:23:82:ae:e2:fc:cb:0a:df:d1:52:db:85:9e:53:37:0b:
2c:a7:24:22:45:3a:56:e8:ab:50:ee:b7:a2:a2:e4:a6:cc:cc:
52:79:2b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:51:17 2025 by rpki-client