Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: DDH5jjZj9SAEjEppM3J2NTQfZTOCqSsyQcKbe3TPvEU=
Subject key identifier: 0E:13:E5:51:1E:EC:64:16:EF:02:DD:F3:FB:BE:C4:72:E8:2E:32:89
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019A1C5070DD90E33228162348906A968247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 015B
Signing time: Sat 25 Oct 2025 17:00:24 +0000
Manifest this update: Sat 25 Oct 2025 17:00:24 +0000
Manifest next update: Sun 26 Oct 2025 17:00:24 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: 6iyVR5O/P96OoMDOJZmZMpRwzRbNrJxTk+AVy4jMaOU=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1c:50:70:dd:90:e3:32:28:16:23:48:90:6a:96:82:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Oct 25 17:00:24 2025 GMT
Not After : Oct 26 17:00:24 2025 GMT
Subject: CN=0e13e5511eec6416ef02ddf3fbbec472e82e3289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:29:fa:b0:5b:14:1d:a3:16:ed:cf:bd:d4:7b:
3a:1d:6a:d0:83:e0:7d:5c:73:75:f3:10:42:1c:d0:
af:9e:53:7f:0b:23:42:37:42:3f:1a:4e:82:18:e0:
d1:e3:81:d0:b7:df:ef:a3:42:82:ca:13:9b:3e:ce:
75:d5:db:b4:dc:92:1c:99:1d:c6:f4:6a:7e:82:cf:
ad:6e:37:9b:37:89:ae:b3:b0:5c:a3:23:a3:33:01:
98:e5:d8:62:87:8f:65:71:84:50:a0:af:1f:e1:e4:
a6:6b:0b:c7:d4:01:65:59:4c:3d:45:7b:83:15:cc:
69:2e:da:07:e4:3d:77:ad:d9:10:d4:33:7b:27:2a:
43:f8:52:80:58:d6:83:3d:64:08:b4:8c:78:0a:48:
fa:1d:7b:b9:d7:7c:95:60:37:96:3a:cb:1c:72:50:
31:f0:bd:9b:64:4a:38:34:de:80:d5:e5:f1:6a:be:
f3:f9:8b:35:d1:7d:ad:79:40:c3:e7:47:0d:fd:4f:
68:e8:c9:66:41:cc:aa:cc:28:2a:56:5c:dc:a0:46:
06:74:6d:53:08:f4:17:00:aa:54:a8:ab:be:fe:65:
d7:2f:7b:2f:91:2e:6a:ab:97:e0:e2:66:8b:dc:80:
3b:61:6e:d2:4f:b3:61:cc:23:51:d4:f4:cb:21:68:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:13:E5:51:1E:EC:64:16:EF:02:DD:F3:FB:BE:C4:72:E8:2E:32:89
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:07:6a:88:13:5e:6d:a1:bf:dd:b1:d6:20:49:ea:1c:34:0e:
5d:fc:60:8f:cf:22:31:b2:01:0e:ef:ed:d8:49:ca:55:37:25:
86:23:da:2f:1b:56:36:8b:96:d9:be:8a:df:f5:0c:8b:21:39:
ec:e1:22:d4:f9:ca:e3:cd:aa:d2:ec:48:a3:da:51:5e:81:cb:
7c:64:d9:97:12:dd:4a:b6:9d:69:16:ca:17:bb:c8:0a:72:61:
2c:09:9b:0f:22:30:be:6b:27:83:ae:43:f5:f3:b5:b0:77:80:
31:b0:6d:dd:80:0d:08:cb:dc:0c:ce:35:e1:b9:e1:a8:6f:71:
cb:69:7c:d2:b7:9a:48:11:29:90:58:b8:31:72:f7:a1:c8:38:
47:55:27:cc:27:19:24:0c:5b:6d:b3:ae:e4:14:e2:00:bb:ae:
21:17:27:08:c8:c7:f0:a9:04:7a:bc:85:8e:05:98:48:98:4d:
d1:69:c5:60:5d:b4:09:21:e5:d1:cf:a7:ba:0c:f0:fc:6c:8d:
f2:b7:6a:c1:b3:06:63:41:2e:bc:de:99:35:32:39:59:54:48:
c2:a8:db:a9:47:2a:76:3b:df:33:57:b6:68:42:1b:1e:50:8e:
64:d7:76:a8:3f:09:b4:b0:04:c6:ea:1d:df:99:55:5e:08:ce:
d6:60:8d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 23:08:23 2025 by rpki-client