Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: Hz8tdHc9e4J4Orfrg20xCh7qpSto0wMvWmRbpsymgJg=
Subject key identifier: B6:F2:53:08:D3:9C:F4:54:C6:49:6F:01:90:04:65:C1:D0:5F:12:CE
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019A71B9575B38598C2780958D8EEF77DAB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 11D0
Signing time: Tue 11 Nov 2025 07:02:43 +0000
Manifest this update: Tue 11 Nov 2025 07:02:43 +0000
Manifest next update: Wed 12 Nov 2025 07:02:43 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: hvzizk4Z2xX5U4ghfh+N0cISQYZGuoPr2igI560YTt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:57:5b:38:59:8c:27:80:95:8d:8e:ef:77:da:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Nov 11 07:02:43 2025 GMT
Not After : Nov 12 07:02:43 2025 GMT
Subject: CN=b6f25308d39cf454c6496f01900465c1d05f12ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:67:41:36:97:9e:8d:6f:60:ba:79:fb:10:53:
15:f8:3f:7e:d3:47:e7:e1:c2:a4:c1:08:56:d0:c8:
af:f8:f1:b7:28:bf:f0:d7:41:c7:13:fe:86:eb:d7:
fa:e0:c7:6c:09:e4:43:d7:84:71:62:b4:56:de:6d:
de:d5:d0:ad:9d:97:21:73:a4:0c:94:ad:27:44:49:
21:6c:d4:0e:54:d1:93:ff:ba:8e:23:95:5f:51:97:
8e:14:76:19:f5:9e:d3:73:b1:18:29:39:d7:e6:1e:
cc:3d:a7:0e:15:36:5d:82:68:8e:d9:7b:c6:21:b0:
ea:b2:ac:b8:92:15:cd:72:af:0f:fb:77:c8:9a:82:
a3:7e:b8:ff:e3:ef:a9:e8:98:eb:b0:02:fa:e6:62:
c4:ee:81:3b:fb:fb:bc:24:ee:6b:22:f0:80:78:0a:
8b:15:07:d4:21:52:01:ab:b3:ec:52:92:70:36:b5:
c1:46:95:87:29:4f:a0:41:ef:a0:93:e3:14:e2:c5:
e2:3a:b3:89:3a:89:2c:94:0c:46:f4:ea:78:01:c8:
6c:78:4e:35:7b:49:5d:4b:97:09:22:c6:82:2f:6b:
94:1a:fe:30:fe:57:d7:15:e7:26:b4:26:d6:7f:5f:
42:2f:8b:8c:01:9e:27:8e:fe:dd:bb:b3:20:cf:cb:
cb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F2:53:08:D3:9C:F4:54:C6:49:6F:01:90:04:65:C1:D0:5F:12:CE
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bb:9c:18:ef:5b:77:8a:d2:a5:91:8a:d4:21:6f:bf:71:9c:
2b:8d:9d:17:67:2a:aa:cc:ea:3e:50:20:f0:05:73:79:6d:c7:
2a:9a:9b:d4:21:4e:6c:ec:2e:ae:ea:5d:2c:3e:7e:de:8d:04:
3f:6a:4b:25:42:a7:b5:4f:88:bf:ff:b1:70:de:ee:ed:34:e0:
72:bf:f7:83:d2:70:93:3e:98:07:53:f2:af:99:4c:35:9b:19:
9e:f3:f6:df:32:bd:ec:be:78:bf:15:7d:9d:e3:0d:2e:0b:42:
a0:16:fd:a0:5f:dc:a3:ff:1b:11:2b:4d:cc:c7:5e:4b:95:72:
30:d4:b5:db:f2:fb:90:40:68:88:83:ee:b2:a4:da:d6:7d:05:
b9:42:6f:58:56:a3:d6:11:d3:52:b4:01:7e:4e:9b:52:f0:8a:
eb:54:1e:99:ac:0e:a2:08:27:94:5b:40:49:1e:e9:f4:74:b2:
d5:87:19:12:b2:45:4c:72:62:1c:56:4c:9c:74:26:80:f7:f6:
d0:c0:77:6f:67:4a:c0:a1:e2:19:fa:95:ad:de:a9:1a:d4:bf:
53:15:f9:c3:f9:89:6e:6e:14:f0:03:1d:1d:4c:c8:6f:ca:a4:
7b:42:8c:d5:86:04:f2:74:11:86:a9:fc:51:60:f1:91:85:53:
17:29:f9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:47:33 2025 by rpki-client