Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: oOCHHkvQodNS2ZpOyQsvgyOFkfI87GS70A49u2u8kew=
Subject key identifier: C6:A2:F9:CA:19:28:F5:AB:EA:77:08:78:FB:AA:A2:CF:6F:1F:B8:FC
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019A7149D477FEFBE325065824178632C41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:55 +0000
Manifest this update: Tue 11 Nov 2025 05:00:55 +0000
Manifest next update: Wed 12 Nov 2025 05:00:55 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: QUPfKJh/dG1kUetNEtl374TdobJ+mRTkPOs3PbkqAYU=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:d4:77:fe:fb:e3:25:06:58:24:17:86:32:c4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Nov 11 05:00:55 2025 GMT
Not After : Nov 12 05:00:55 2025 GMT
Subject: CN=c6a2f9ca1928f5abea770878fbaaa2cf6f1fb8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:66:fa:45:c1:01:03:13:55:75:86:a7:48:45:
6e:92:e5:74:40:9d:6f:9b:df:ee:7e:46:de:56:dd:
27:a9:4f:f0:d0:2f:03:f1:42:18:7c:f3:05:82:aa:
af:97:f6:9d:55:a0:65:8f:21:dd:04:a8:9a:87:a8:
cb:f8:21:b2:88:9a:78:af:15:38:34:95:e2:40:b1:
5e:7a:c2:38:26:80:c9:cb:83:40:e9:67:b7:5d:8c:
e5:09:05:c1:8e:49:bc:d8:40:e7:eb:d3:e5:f4:6b:
71:5c:78:3d:2b:62:3c:18:3b:dd:46:36:41:03:bc:
2a:59:61:a3:d9:5d:c0:3c:d9:19:89:27:9a:3e:03:
3d:ff:53:85:78:14:11:a7:75:e0:2e:9b:f4:af:98:
bf:8d:76:3b:8a:aa:29:98:24:97:7e:6a:6e:1a:a5:
06:80:ab:a6:45:a7:a4:1b:0f:14:1c:ab:4d:51:f3:
a8:75:e7:67:65:23:54:6f:c8:5f:0b:c1:46:00:f6:
dc:7e:09:2d:ae:51:05:5d:a4:4b:63:6a:43:33:26:
42:29:82:fe:39:3d:71:98:3a:97:1e:e7:59:40:20:
dc:33:d4:29:8c:d6:28:8b:ff:e6:b1:ba:45:f6:27:
dd:ac:ee:41:64:10:b2:53:f6:cf:51:52:6e:3a:69:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A2:F9:CA:19:28:F5:AB:EA:77:08:78:FB:AA:A2:CF:6F:1F:B8:FC
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b5:db:8e:9f:35:de:f7:69:8d:68:71:68:b1:c8:1c:13:79:
78:2a:1f:ec:3b:53:ec:3e:97:50:0b:07:28:5f:3d:c3:f0:00:
8b:18:1f:58:54:0c:fc:a9:69:97:b3:67:b0:39:19:f5:1e:6b:
1b:f9:00:87:25:cf:55:60:d9:0d:fa:d0:7e:ae:c7:49:24:94:
dd:7b:49:fe:ed:4e:7b:33:53:20:33:b3:63:8f:03:df:5c:f2:
1a:75:52:50:90:f9:88:cb:91:1e:13:e6:8e:a2:cb:a2:b5:63:
1d:a1:ac:5c:00:d6:45:86:d2:40:97:94:62:f7:59:df:c9:89:
a0:b7:05:27:d2:87:08:27:2f:1e:63:fe:20:d3:1b:f3:fa:7e:
9b:69:8c:b0:d8:e3:af:7f:2b:65:73:d5:ba:00:10:76:f4:ec:
5c:37:1c:2d:b1:02:5f:f8:6c:dd:a6:17:f8:a4:2a:c4:bb:99:
31:25:d8:a0:86:e6:ca:63:16:fc:3d:d3:f5:f4:0f:fc:2c:f7:
0c:f3:a6:13:27:f6:84:14:a9:1d:00:8b:12:85:e4:b7:43:49:
bc:60:bc:aa:2e:52:dd:d4:cf:ba:41:99:b8:82:c5:2e:95:1b:
44:36:52:68:8b:2f:29:f8:ff:7c:6a:69:06:84:3c:66:67:aa:
fb:86:74:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:47 2025 by rpki-client