Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: Las/leybjnlX6dFXHgd/dRCfqXIoFH7NVGZmFOuvEso=
Subject key identifier: 37:80:A1:C9:41:E6:89:20:22:37:67:FB:AA:89:E3:7A:28:62:59:AC
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 019A3346474C26A68DCB5F872A1E441FC702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 0630
Signing time: Thu 30 Oct 2025 04:00:34 +0000
Manifest this update: Thu 30 Oct 2025 04:00:34 +0000
Manifest next update: Fri 31 Oct 2025 04:00:34 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: 3D+nGPQ9L5CTtJjug1XLGAUFYM/gvoOIZ3pt+0PtXPs=)
2: S2hU1G91sKiWUh8YeDBY-hdp4ZQ.roa (hash: vffsi4me5kbuxqBTjwviA+XxgoZKSQ7xUMSzQTNSOQs=)
3: vexU20eqD75GiV-RYHWmgxEH73I.roa (hash: nDoTWPqSH3IWThsKOgFZF4UZDo4G9OwYH0ta4b9ZP0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 Oct 2025 01:21:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:33:46:47:4c:26:a6:8d:cb:5f:87:2a:1e:44:1f:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Oct 30 04:00:34 2025 GMT
Not After : Oct 31 04:00:34 2025 GMT
Subject: CN=3780a1c941e68920223767fbaa89e37a286259ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4b:13:bd:63:1d:7e:f4:2f:0f:70:c5:62:9e:
4b:03:d4:de:1e:fc:7c:89:fb:07:4e:05:2f:42:2c:
de:28:81:d8:e0:52:24:fb:75:44:1d:c6:27:e5:a1:
9a:82:63:ba:4e:14:fd:8f:5a:b7:5c:0f:ba:c1:8d:
fb:67:4d:35:fd:01:70:17:c8:7f:eb:a6:18:33:56:
47:2f:2f:a9:91:9a:ab:22:67:c3:35:ef:e3:3f:f7:
74:14:58:8b:10:bd:6c:35:68:06:70:b6:b3:f4:21:
58:d3:4b:92:06:40:0b:1f:f0:6c:77:70:b0:09:c6:
98:a7:70:b3:7a:b7:76:95:63:11:ec:84:e5:da:87:
ae:81:90:9b:4b:a1:1d:ee:57:c2:ce:48:1a:4b:05:
ff:c0:f3:17:f6:f4:a0:b3:06:a0:f6:3a:ae:60:57:
c7:00:0e:ae:5f:30:77:8e:a4:5b:d9:c6:ab:99:60:
5d:78:b5:5c:dc:27:26:59:d4:f4:55:d1:71:30:32:
16:9d:44:79:7b:1a:f1:84:42:50:0f:31:a1:c2:c6:
c4:24:0c:b7:c9:c8:72:9e:69:9b:3a:84:dc:7a:75:
b8:bd:ea:f6:17:17:64:eb:4a:ea:ed:6b:83:3a:3f:
69:45:ed:97:da:ec:10:f9:0b:db:ff:a9:43:0f:47:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:80:A1:C9:41:E6:89:20:22:37:67:FB:AA:89:E3:7A:28:62:59:AC
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:01:4c:b0:c9:13:07:94:bd:33:7e:75:26:26:ee:96:35:3b:
98:c5:f8:d4:af:59:bd:cc:bf:c3:89:f0:d2:a9:03:31:da:5d:
c1:38:ec:0b:a2:ed:dc:75:c7:7e:d9:99:1c:76:3c:3d:c2:91:
40:f1:d6:53:e3:81:95:03:0f:8b:c9:5a:4e:33:1f:40:01:32:
5c:93:00:a9:7f:42:46:68:6d:62:b5:c4:25:69:76:14:95:2a:
a6:36:6b:fb:7f:8d:0b:bf:c8:f5:80:6b:81:1c:f3:b9:58:a1:
9a:2c:22:e0:ea:36:14:e9:b4:e3:b4:af:64:60:f1:da:0b:57:
df:ef:50:7d:08:14:ae:82:27:83:28:8e:fb:f4:6e:7c:7b:79:
cd:be:11:fd:aa:6f:16:d4:39:6a:f9:2e:18:96:c0:37:44:0b:
4e:83:86:4a:a5:e9:01:89:af:e1:57:f5:6d:bc:d4:9d:57:a5:
e3:6c:59:48:b7:aa:7d:3f:fa:8b:7c:de:40:96:53:ad:25:ee:
5d:45:30:9e:21:32:03:e9:f9:22:40:19:c3:5d:c5:6e:cd:fc:
1b:a1:3c:d1:b8:6c:0c:c5:08:6f:ce:6a:0c:71:dd:ee:65:3f:
f0:b9:72:64:80:6a:a3:46:17:cf:98:18:91:cb:d5:8c:44:fd:
68:27:1a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 30 07:53:33 2025 by rpki-client