Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: k1JOYsPaLV7Av8pR5+3UmkpkoqH9EW6TYy+tOI21V/c=
Subject key identifier: 9D:FC:CA:78:19:CA:AA:19:53:DA:A9:9D:F9:93:20:A0:86:99:7A:0B
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 019A71B884F5962BE76A7632F63042E5E450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 06A2
Signing time: Tue 11 Nov 2025 07:01:49 +0000
Manifest this update: Tue 11 Nov 2025 07:01:49 +0000
Manifest next update: Wed 12 Nov 2025 07:01:49 +0000
Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: eeXw+gQ/pT/NUyKI9h6SxQ8e+7TQAf//cYfSat9T0O0=)
2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:84:f5:96:2b:e7:6a:76:32:f6:30:42:e5:e4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Nov 11 07:01:49 2025 GMT
Not After : Nov 12 07:01:49 2025 GMT
Subject: CN=9dfcca7819caaa1953daa99df99320a086997a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:6c:ee:8c:f6:76:16:38:cf:a7:92:41:9c:
03:78:c3:bf:40:8c:81:7c:89:cb:31:f5:f5:c8:db:
9e:9a:d6:57:f6:63:4c:f6:72:31:79:1a:fa:20:67:
28:2b:a7:ba:9e:77:ff:a4:bb:e3:95:89:8d:9e:81:
fd:3f:21:02:c0:c7:e3:59:82:a2:ab:f5:00:5d:b7:
e4:ab:84:92:05:56:ec:d3:b0:60:65:28:9a:a0:d0:
09:06:c2:1f:44:a0:a8:cc:30:75:6d:d9:45:88:8b:
86:2a:66:b4:0d:f1:33:a8:71:7d:95:c9:e9:00:02:
2c:9d:ae:6a:36:8f:8e:47:7c:34:c2:4d:b3:c5:2a:
71:31:39:67:9b:41:7e:b4:58:e0:37:97:19:b9:81:
5e:65:c9:ac:1e:50:d4:84:c6:71:66:a7:35:e9:89:
44:c9:f6:ad:ca:8f:09:cc:37:ef:d3:6f:dd:66:6d:
8a:9b:95:87:5c:eb:92:f6:6c:b5:87:d1:69:f0:85:
17:5c:b8:1a:a4:47:cd:7c:15:8d:8b:09:7a:f5:b6:
e7:ee:e5:0c:1e:e8:f4:9a:bb:97:4c:b9:12:4b:99:
96:1e:5c:31:d0:3b:3c:ab:4a:6b:51:40:88:75:5d:
48:d2:43:82:d5:3b:f7:77:20:6f:12:0c:02:28:55:
39:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FC:CA:78:19:CA:AA:19:53:DA:A9:9D:F9:93:20:A0:86:99:7A:0B
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7e:89:a1:51:37:68:71:fa:d7:fb:70:9c:ae:64:f9:f9:ea:
07:98:80:78:4d:38:ad:95:64:68:73:23:05:cb:88:af:a4:01:
84:60:93:2f:28:e5:ee:32:c8:4e:17:c3:b7:5e:1c:6f:e3:18:
8d:45:bd:8d:78:68:ed:01:3f:19:e3:1b:13:d7:93:e7:56:90:
5d:3e:8f:f5:51:b4:fe:65:20:9f:25:34:17:5d:09:d6:53:2e:
42:58:53:e6:78:ef:41:e8:23:d1:5f:57:7c:ce:42:46:e2:c3:
00:c5:6e:05:72:bd:6d:dd:ab:79:a7:19:5f:3f:24:2c:17:4b:
9f:eb:6d:ea:fc:85:04:9d:2c:c4:67:38:11:4a:c8:de:b5:f3:
30:f5:22:08:77:53:88:52:c9:c3:d8:b3:c3:89:37:c3:ca:2b:
d5:08:47:48:22:33:d6:cf:f5:6d:69:e6:e4:80:7c:c3:12:74:
27:f4:c1:e8:ce:9e:ce:e3:a8:ee:d5:ac:97:3a:04:b0:10:5c:
0a:76:1d:b5:90:3e:fe:7c:72:08:4f:e2:fa:a9:f4:3e:1e:40:
45:ac:8f:db:63:ff:c6:9e:59:c2:67:08:d9:b7:ae:98:17:c8:
eb:c9:05:75:8f:7c:a0:60:28:5b:04:ff:ce:44:c5:d8:46:c8:
fd:43:32:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:14 2025 by rpki-client