Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
File: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft (raw, json)
Hash identifier: e+TgmT8SRXLGvuNZUBqlzRnPcmWBWtXyvr30D9GT+3E=
Subject key identifier: 1E:F9:46:6A:A2:BB:5A:3D:28:3C:CE:B1:27:8C:90:E0:92:EA:D1:8F
Authority key identifier: D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
Certificate issuer: /CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Certificate serial: 019A28F9B36245415BFBFDFCFA28E2F8DFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
Manifest number: 0C3F
Signing time: Tue 28 Oct 2025 04:00:44 +0000
Manifest this update: Tue 28 Oct 2025 04:00:44 +0000
Manifest next update: Wed 29 Oct 2025 04:00:44 +0000
Files and hashes: 1: 1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl (hash: GKoCgUWAfuXubzCdR90xn4z1MBc+LDSPP1V0kYDz4Ao=)
2: mhdzxHyga_rpAnhJvnJWGrarNFw.roa (hash: l1WjIafW1o8IpUq72+h/DmsurJ/Xd4bFO/qecSh/CbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:f9:b3:62:45:41:5b:fb:fd:fc:fa:28:e2:f8:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d0bf1ad7fc369d8fbf43e62de97a4facfef6b5
Validity
Not Before: Oct 28 04:00:44 2025 GMT
Not After : Oct 29 04:00:44 2025 GMT
Subject: CN=1ef9466aa2bb5a3d283cceb1278c90e092ead18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:9f:ce:a8:0e:b4:56:64:0e:c7:82:96:5e:
4c:12:c9:ff:a4:2e:9e:09:a5:2d:94:44:a3:44:99:
62:59:37:a4:1c:52:de:79:cb:07:8a:c4:aa:ae:8c:
d3:ac:a1:7f:72:d5:2b:86:36:6c:be:0e:9e:f6:3d:
f7:e9:1c:37:25:a9:40:62:59:a3:aa:3b:7c:58:01:
bb:ba:7f:e7:d5:29:fd:db:14:2c:29:05:ad:b7:1c:
54:fb:4f:e3:c6:a7:bb:e2:66:b2:b2:81:c3:86:7f:
48:73:c5:92:58:e3:bd:85:83:53:50:37:b2:95:ba:
a2:40:8c:10:20:d2:d3:71:88:9e:60:9f:bc:47:5e:
86:23:95:5b:c5:a3:e5:47:36:90:68:62:d9:de:37:
10:69:4b:65:70:ff:af:05:10:76:45:cd:9f:25:1c:
69:c2:68:dc:3b:74:4a:08:50:10:3b:79:b9:68:dc:
98:50:de:ae:5f:98:b7:d9:21:d7:24:f3:82:7f:b9:
cd:b6:3f:a4:34:8e:66:4c:a9:ca:e9:a6:8b:3e:9a:
aa:15:29:9b:57:54:e0:f4:19:12:27:8b:64:ae:71:
b0:eb:34:d5:79:19:a1:56:86:aa:84:16:5c:b0:f8:
81:3f:8d:88:b1:e2:ad:4c:e7:bb:52:2b:ec:57:1d:
7c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F9:46:6A:A2:BB:5A:3D:28:3C:CE:B1:27:8C:90:E0:92:EA:D1:8F
X509v3 Authority Key Identifier:
keyid:D5:D0:BF:1A:D7:FC:36:9D:8F:BF:43:E6:2D:E9:7A:4F:AC:FE:F6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/5539e4-d10d-49c5-bdce-eb7e9c0d3747/1/1dC_Gtf8Np2Pv0PmLel6T6z-9rU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:a9:44:a6:b1:75:28:7c:62:ee:b8:b2:0f:20:9c:42:8b:8f:
5a:7d:bd:f1:1a:88:35:27:22:61:01:3c:86:d2:f3:94:49:32:
bb:df:ef:35:f7:72:5b:1d:0a:d0:d5:a7:0a:41:f0:9e:eb:40:
b1:47:91:6f:51:ea:0f:fe:3d:e2:44:d7:0c:77:f0:ac:70:c8:
93:24:cc:75:49:e6:86:a6:b6:4d:48:14:f4:bb:28:65:4d:21:
ac:85:f7:da:9b:e5:28:31:77:ef:2d:61:0b:e3:f9:42:32:cd:
eb:d5:30:2a:04:df:f3:40:51:59:3f:67:f2:aa:fc:0b:c5:6c:
44:df:46:ff:da:69:6c:3a:e5:44:06:81:be:83:d7:2d:12:81:
b0:f4:53:66:12:59:86:30:2e:1b:1b:64:94:c9:88:96:c3:f3:
cd:36:47:5e:c1:8c:97:29:73:30:61:50:82:8c:08:c6:40:a8:
69:9e:bf:b3:40:d4:2d:1d:21:d1:21:5f:cd:1c:d3:75:c5:33:
ea:a3:00:a8:fc:29:c7:4f:ea:b0:05:29:22:0a:c6:67:f1:bb:
e8:95:30:39:10:ae:49:18:b3:ff:43:04:82:97:69:12:8b:fa:
5f:cf:27:ad:fa:c0:db:02:de:96:2d:9b:02:f2:de:c0:ee:7c:
5e:85:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 12:31:58 2025 by rpki-client