Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
File: 1h61PLVnGN8NlHbNmEqsRDK5D2w.mft (raw, json)
Hash identifier: b8MqzJGjrlH15+9aBtCSZaY0dyta0aNYSGSDsoNdLBw=
Subject key identifier: 00:45:06:A3:CA:23:A8:76:2B:D9:37:9B:43:E8:F9:71:3A:A0:99:B0
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 019A72CAB8A3C93E3FAF5E5C0C2E3EE9A369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
Manifest number: 0DF8
Signing time: Tue 11 Nov 2025 12:01:19 +0000
Manifest this update: Tue 11 Nov 2025 12:01:19 +0000
Manifest next update: Wed 12 Nov 2025 12:01:19 +0000
Files and hashes: 1: 1h61PLVnGN8NlHbNmEqsRDK5D2w.crl (hash: mtsquVHtMJtLP7Vq72uJ5E360mokYDsQXMU664HDnPw=)
2: OrR8ArTb8w0zfL8vZIwz8tbKQ2c.roa (hash: DXI54xHOK1LCP4IfsOxKtDE/CK97CgmE5qjdIRspp1k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:b8:a3:c9:3e:3f:af:5e:5c:0c:2e:3e:e9:a3:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Nov 11 12:01:19 2025 GMT
Not After : Nov 12 12:01:19 2025 GMT
Subject: CN=004506a3ca23a8762bd9379b43e8f9713aa099b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:37:73:72:c8:05:12:df:53:17:94:23:1a:
75:95:1f:cb:29:b9:bf:c1:9c:69:2e:05:c0:1f:a2:
ce:80:d1:e1:34:09:b5:35:cb:d8:36:d5:c9:7d:c5:
d4:38:f1:81:f7:80:36:45:49:3e:28:53:3a:b9:f2:
71:47:7c:df:84:5b:47:18:17:a6:48:6b:f1:14:5a:
d8:b5:29:24:1d:34:13:98:a0:67:ff:4c:70:30:02:
8f:1b:06:21:d8:9f:3d:27:bf:66:3b:ba:1b:8f:46:
e8:79:f7:72:c0:a7:1c:2f:43:e7:fe:a1:d2:19:37:
cc:3c:cd:4c:bd:01:b5:70:b6:b4:25:11:99:b7:bc:
9b:0f:0c:17:2e:57:57:be:d6:2e:8a:c1:bc:a4:d7:
9d:6b:e9:51:3e:cf:d3:0c:c1:5c:31:7a:aa:30:32:
44:b3:ef:cd:8d:78:aa:9f:42:c9:85:5c:2f:b0:70:
1a:04:d7:bf:e9:2a:95:69:52:5b:e0:28:2e:9e:0d:
de:93:f5:20:e5:af:f2:40:59:ee:71:59:ec:b0:26:
2d:3c:51:35:a3:5a:9d:0c:67:bf:f1:19:32:f2:ae:
8c:c3:2a:b5:1a:9b:4b:f5:a3:4e:1a:43:df:51:ed:
0b:e6:9f:11:b0:b7:0d:31:36:c3:2b:7b:a9:36:29:
8b:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:06:A3:CA:23:A8:76:2B:D9:37:9B:43:E8:F9:71:3A:A0:99:B0
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:07:c0:13:13:e1:66:80:10:0b:9d:ec:18:39:8c:47:44:d2:
35:eb:1d:30:ad:a9:55:2f:03:1f:75:0b:f2:b0:63:46:6a:c1:
13:48:38:bf:6a:93:38:7e:45:a0:61:81:77:74:9b:50:d8:24:
c0:d7:b5:a5:da:a4:13:3e:ab:34:8a:b7:4c:bc:39:09:38:a3:
aa:1a:e8:58:4e:cf:cb:42:94:20:a8:83:a0:d9:f0:6b:67:65:
2b:07:e0:aa:c2:17:0e:6e:c6:0e:e4:a8:58:39:12:57:c1:d1:
d0:38:fc:c4:4d:a8:71:ca:df:16:17:80:d9:83:f3:8b:bc:59:
d0:75:8a:01:d4:28:87:84:04:f6:77:bb:01:c1:ba:77:c5:41:
4f:44:4e:81:da:04:30:8b:6f:2a:b4:69:2f:7e:59:7b:52:bf:
e4:dd:6e:c1:2c:fa:be:b3:eb:1b:a0:f1:9c:aa:bb:63:8a:06:
ff:01:7e:12:2a:54:e5:4d:0d:03:eb:b6:d5:6b:d7:38:cb:cf:
4a:ca:cd:21:45:5e:87:90:ad:9c:b2:1b:47:cc:d9:4f:7a:67:
99:24:e3:6c:d8:77:8b:08:66:a0:4c:62:4c:72:ac:19:50:5e:
52:5e:f7:ec:dd:e6:77:41:91:3c:65:f9:83:2a:b9:b4:62:ca:
b5:d7:f3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:37:53 2025 by rpki-client