Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: waH9xcCSKT/oOiMiVb/QcA29ZOjD5mPUcBWq+VLsEUk=
Subject key identifier: 41:F4:16:91:B8:76:9D:E5:C6:AB:52:DB:6B:5C:45:D9:89:39:DF:29
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019A725CDB36BC80E4E0E23D71AF33236AA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: ZwwGEMsqeIRviVD3FyH4YKaDDUS2/Sc/Q1Di3Q7Ex6M=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:db:36:bc:80:e4:e0:e2:3d:71:af:33:23:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=41f41691b8769de5c6ab52db6b5c45d98939df29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ad:e2:13:fb:2b:00:fb:cd:85:f9:d1:f9:4e:
e3:0a:9e:c3:18:fe:4c:eb:99:80:1b:e8:d8:f6:ee:
25:28:10:fe:cc:2a:72:2d:50:01:1b:4f:e4:6d:9c:
ed:96:61:9e:d7:8e:52:1c:d9:80:95:0d:b5:c8:42:
7c:c8:33:8a:fe:cb:c6:2f:95:64:08:b8:5a:96:8a:
34:08:7a:44:ed:79:1b:21:b4:f0:7a:66:aa:6b:d3:
9c:91:67:ef:67:70:3d:5b:dd:b7:d2:23:03:3d:8a:
b5:72:c6:50:11:79:bc:73:23:f2:d6:97:4f:a3:40:
0a:68:b1:1a:66:f9:b4:e7:35:c3:dc:96:8d:ff:7d:
8f:19:24:29:4a:ed:a4:2e:6e:e8:2f:12:a5:18:81:
08:38:2b:e5:b2:91:84:a8:a6:a6:08:90:e9:c7:25:
dd:48:72:8d:48:97:18:1d:61:33:ac:ed:64:d8:ed:
ce:e7:40:58:c1:fd:45:b1:8a:59:8b:b7:ef:20:8f:
0a:3c:06:99:bb:c1:ef:fa:90:3f:a7:47:55:63:d5:
5e:6a:b5:e7:6e:c2:13:77:fd:21:a2:eb:3f:8b:1e:
13:88:85:a6:99:c0:b2:77:f5:29:8c:21:77:37:1f:
f5:57:39:ad:3a:f2:b4:45:2e:ac:d0:b6:b6:80:c4:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:16:91:B8:76:9D:E5:C6:AB:52:DB:6B:5C:45:D9:89:39:DF:29
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:99:87:a4:ba:a9:9e:3a:98:1e:85:ff:d9:05:f9:82:91:00:
df:d0:fc:51:f5:ea:4a:9e:5e:2f:43:63:55:a7:d4:b0:86:82:
e2:f1:33:88:1c:8d:9a:48:ab:96:6e:c7:d2:47:f0:ca:bb:88:
0d:1a:6f:fa:2e:2f:71:65:77:bf:e7:26:2b:fb:8b:73:bb:d4:
e7:db:e3:cb:42:b1:ba:e8:bb:b5:44:3f:33:27:6c:e0:7e:15:
6d:00:e5:88:5e:13:6b:e5:76:f8:6b:d1:a3:f5:a7:e1:2f:df:
d2:51:54:6b:0b:b7:08:49:f3:f9:fe:0d:56:25:e2:90:e0:60:
2d:65:97:12:d7:dd:22:f1:bb:99:8d:e5:f7:ee:89:3f:03:05:
5a:24:6f:d9:de:61:e7:f0:cf:61:c1:83:d7:47:75:e6:6f:8f:
e4:c7:74:82:53:29:d2:20:43:01:b3:e8:d6:57:2c:7c:4b:b5:
30:c5:29:a5:11:6e:b3:36:b2:84:4e:d5:bd:5a:99:34:25:78:
c0:29:0a:a9:92:1d:e8:4d:23:3b:7c:ac:99:f0:00:dd:52:d9:
91:25:7d:97:31:73:ab:6b:fa:86:e5:6c:21:ef:09:83:f6:99:
fe:cf:66:13:e8:e9:cb:d2:63:ed:a5:68:4d:9d:0c:2a:7e:a0:
37:ba:1e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:54 2025 by rpki-client