Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
File: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft (raw, json)
Hash identifier: KbA1reFDl7zW6sX5wy0Uy0MphQM+VYugQ5RhGQISe08=
Subject key identifier: 1C:B3:01:B1:7A:FB:92:25:52:A1:E5:F9:E5:BE:A5:52:E2:E4:13:E7
Authority key identifier: D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
Certificate issuer: /CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Certificate serial: 019A7112B8093C11F417A1A8AE133B5A4CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
Manifest number: 0204
Signing time: Tue 11 Nov 2025 04:00:43 +0000
Manifest this update: Tue 11 Nov 2025 04:00:43 +0000
Manifest next update: Wed 12 Nov 2025 04:00:43 +0000
Files and hashes: 1: 1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl (hash: Dqhn9nNlc7bdPB22+q7kZAoZFW9N1SsMWi2QSlAO+ic=)
2: NXwlVXiim_zGBDcqjx0eFIuUGWk.roa (hash: mei7vYH+6OQG8yo3aepSsguWF4MAUBo4s0J/dbzC4gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:b8:09:3c:11:f4:17:a1:a8:ae:13:3b:5a:4c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d681fa66be2cea34b5883c21c6f83f3464e2eee1
Validity
Not Before: Nov 11 04:00:43 2025 GMT
Not After : Nov 12 04:00:43 2025 GMT
Subject: CN=1cb301b17afb922552a1e5f9e5bea552e2e413e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a8:83:c0:db:2e:85:c0:74:4c:a3:b3:44:79:
40:a8:e5:2b:25:4a:f7:93:28:d5:aa:ce:b3:f8:a1:
4d:19:fa:ed:eb:bb:fd:e3:9b:de:ba:cd:41:79:b3:
06:0a:4d:8d:36:c8:47:9e:14:53:ae:33:10:15:04:
a7:16:be:ea:7e:23:7b:80:46:86:86:a0:e8:38:3f:
0e:94:88:2c:44:56:8b:fa:1b:c0:32:63:ad:52:e6:
ee:70:9c:3c:79:9c:ed:15:13:fd:e1:23:33:e2:26:
66:a7:dc:f0:8d:54:92:91:30:dd:e3:83:b9:03:16:
c2:91:e7:5f:a8:aa:40:2f:ee:fa:eb:e6:15:83:d3:
bc:66:17:44:94:2d:87:d7:35:82:1f:02:47:01:89:
2e:a0:2c:66:2b:18:2b:00:2a:a8:19:ff:08:1f:aa:
9a:5f:83:f3:08:d2:5f:b6:20:88:e4:c7:cf:98:24:
fd:4b:26:38:7c:5d:bd:28:70:38:26:4d:51:74:75:
57:85:69:3b:0b:86:f6:be:28:90:2b:9a:ab:6e:2b:
4b:1d:33:6b:42:6f:5a:88:3e:a8:94:05:c2:df:61:
8e:78:4c:83:36:8f:c0:95:7a:fd:59:52:9b:3a:30:
d9:00:cd:eb:ba:0a:8e:1d:e5:c4:4a:08:9c:cd:74:
a0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B3:01:B1:7A:FB:92:25:52:A1:E5:F9:E5:BE:A5:52:E2:E4:13:E7
X509v3 Authority Key Identifier:
keyid:D6:81:FA:66:BE:2C:EA:34:B5:88:3C:21:C6:F8:3F:34:64:E2:EE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/240165-d974-429b-a1c1-a3ef0a4a3119/1/1oH6Zr4s6jS1iDwhxvg_NGTi7uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:36:d9:59:e8:b2:dd:14:3a:0d:23:78:95:75:0f:37:cd:c3:
ed:2c:b5:00:9c:1b:4e:f0:a3:01:cc:54:27:ee:fa:14:77:cd:
f0:e3:04:36:e2:c3:7b:c7:c7:52:f1:4e:ae:6f:c3:23:53:a8:
90:61:40:5e:c5:84:4d:a8:7b:73:06:4f:1d:9d:11:cc:dd:f5:
ef:be:0f:6e:7f:d9:c8:a1:0b:e0:cc:d4:c9:f0:bc:f2:f6:9a:
e6:9b:69:f5:e7:34:e2:e9:9b:e4:af:84:b6:6e:81:42:50:fa:
57:10:2e:23:bd:94:c0:1a:3c:35:5c:20:dd:ea:72:7f:a1:00:
0f:f4:e7:d5:c2:d4:19:82:32:e8:a1:96:f5:95:f9:8f:38:44:
57:69:2f:96:2c:80:88:6e:8e:af:04:4e:bd:81:09:1d:a9:45:
88:ba:c8:55:fa:23:2c:d5:43:94:b0:dd:18:a7:7d:d3:85:e0:
80:2b:bc:70:28:f6:e5:56:ec:6c:d4:8b:6b:05:c3:ce:27:03:
21:71:ad:c1:b9:5d:d0:42:38:91:64:97:37:70:65:be:e3:77:
4f:c1:d6:e5:27:63:fb:7d:af:64:de:5e:27:78:fc:da:d7:18:
e8:a0:2c:37:56:14:94:9d:61:4b:7f:bb:30:93:b4:14:8d:88:
f1:8c:2f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:36 2025 by rpki-client