Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
File: 1NHzJb-K5pShnyj9QHzVu1AOGz4.mft (raw, json)
Hash identifier: K/0p9ZsJ1ZxeNScksow674e+T085mu4d7Nl8x/xhikE=
Subject key identifier: 05:5F:41:3D:92:FD:C1:36:8F:72:22:4C:E0:D1:DD:A9:E9:07:80:06
Authority key identifier: D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
Certificate issuer: /CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Certificate serial: 019A71B865D79C5AF0BFC8AFEF0CB54D47BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
Manifest number: 13BE
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 1NHzJb-K5pShnyj9QHzVu1AOGz4.crl (hash: 07dSxdtAEpT0E9h0rN0rBqftej4hzQZ/MAo34eSKfWc=)
2: FJfX864pvFwf4qPxQ1uqI0bIaXg.roa (hash: oKD/fS/LmM/Bugiaw6RKm+DzVLCUCTYs+LRezp4BQso=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:d7:9c:5a:f0:bf:c8:af:ef:0c:b5:4d:47:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4d1f325bf8ae694a19f28fd407cd5bb500e1b3e
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=055f413d92fdc1368f72224ce0d1dda9e9078006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:54:1a:70:fe:32:ed:73:56:36:ed:0c:b9:80:
c4:60:64:f8:9f:ca:70:c3:e9:79:5a:9e:95:8c:7e:
7b:0e:0d:ea:a7:4f:0c:28:1f:14:d9:ae:6e:f6:c0:
fc:e3:e0:02:5f:31:13:8e:f0:b6:a1:41:82:3a:4d:
65:99:2e:91:a2:7a:1f:ca:1c:64:03:56:80:37:8e:
af:6b:fe:11:9b:8c:62:df:39:fb:f9:21:7a:68:ba:
16:69:25:c7:09:35:d9:39:4b:18:c6:b0:17:8f:7f:
c6:a0:18:c5:33:be:ba:3f:65:21:4c:11:e9:64:de:
59:ab:c2:e0:85:f1:7f:60:f7:5f:2a:5d:91:f3:38:
af:f3:85:bd:0d:87:fa:35:ae:40:dc:e7:42:90:05:
23:c0:8c:09:29:c5:f9:6d:1b:b5:a8:b5:cd:e9:57:
4a:9b:f6:7d:80:28:62:08:32:42:a7:fa:69:ec:7a:
cc:98:aa:0f:fa:04:a2:38:28:b4:bb:21:05:41:01:
3e:14:0d:43:dd:58:27:3a:6f:1c:e3:62:2f:14:ad:
d3:f2:d3:d5:85:32:e2:e6:e1:4d:94:7a:de:d5:0c:
94:ac:f8:7a:83:29:34:18:41:3e:f5:9a:b7:4b:44:
89:10:44:76:b7:f4:77:c8:9f:bc:5e:74:c3:cb:23:
76:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:5F:41:3D:92:FD:C1:36:8F:72:22:4C:E0:D1:DD:A9:E9:07:80:06
X509v3 Authority Key Identifier:
keyid:D4:D1:F3:25:BF:8A:E6:94:A1:9F:28:FD:40:7C:D5:BB:50:0E:1B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1NHzJb-K5pShnyj9QHzVu1AOGz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/9770a1-59bd-415a-bade-b282dd674823/1/1NHzJb-K5pShnyj9QHzVu1AOGz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ea:45:a5:34:df:ed:cf:9a:38:5d:10:e0:67:a5:ca:a3:84:
47:ea:d4:78:98:93:73:9c:42:d2:e0:4b:60:de:90:4d:f6:dd:
74:5d:f7:63:e5:96:1d:39:a2:00:b5:60:fe:b9:c3:95:3f:c3:
73:c9:2f:35:64:bd:28:9f:a9:a6:66:0e:13:45:65:33:ce:b0:
b5:75:77:7b:b8:4e:ff:f4:35:87:17:58:20:04:7b:3a:57:29:
ac:33:97:a2:32:5b:e2:83:dd:fb:6c:e2:9e:23:6c:24:4d:88:
18:e2:5c:e8:f7:b7:33:86:b2:c5:7f:b8:7b:8c:f3:51:5a:67:
63:4e:d2:97:a1:fc:82:ac:44:3a:74:7f:c7:f8:46:03:06:58:
08:e2:48:b2:da:6d:d7:2e:e7:1a:0b:f1:fa:50:b0:de:36:64:
69:75:60:bd:f0:a5:e7:90:1a:77:ce:06:d8:82:d7:f2:0c:05:
93:aa:ac:59:ba:af:45:15:f7:be:00:24:c1:89:f7:75:c7:01:
04:48:65:bf:b3:a2:ef:b4:91:38:9a:62:81:02:29:f8:96:cb:
77:4c:06:38:85:db:e3:e8:85:b1:f2:35:65:ff:63:d1:c0:bf:
55:c3:f3:b9:d6:20:90:e3:cd:25:67:c8:62:1b:25:9c:14:4c:
bf:29:9e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:18:34 2025 by rpki-client