Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
File: 1P3VliZ9VvfOVuv67IajJwj-3gA.mft (raw, json)
Hash identifier: zqvS6CbOrz/+hix6/c5rayj1Mgoi3Db9pPpQyJoZoSE=
Subject key identifier: CC:06:2D:D3:E5:42:A3:07:DF:04:65:AB:B8:81:24:CB:EB:F3:CD:5C
Authority key identifier: D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
Certificate issuer: /CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Certificate serial: 019A71B7B51F5861044CE2E81BBACAF66DE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
Manifest number: 1725
Signing time: Tue 11 Nov 2025 07:00:56 +0000
Manifest this update: Tue 11 Nov 2025 07:00:56 +0000
Manifest next update: Wed 12 Nov 2025 07:00:56 +0000
Files and hashes: 1: 1P3VliZ9VvfOVuv67IajJwj-3gA.crl (hash: LL3lS2v0wuRjOdhdWpw9D781mslyHJGdNgdud7fZNOQ=)
2: kXAoycjFnk5ToJYqqTkBxzOraGU.roa (hash: +7rp8yWmgsLGmzgq1w+1h/kN+7iJKvOfloIbj12Qykg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:b5:1f:58:61:04:4c:e2:e8:1b:ba:ca:f6:6d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fdd596267d56f7ce56ebfaec86a32708fede00
Validity
Not Before: Nov 11 07:00:56 2025 GMT
Not After : Nov 12 07:00:56 2025 GMT
Subject: CN=cc062dd3e542a307df0465abb88124cbebf3cd5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:6f:e2:c5:76:e8:69:ec:8c:b0:ee:6b:bd:
2a:a2:a5:d0:1f:b8:82:62:53:01:c3:82:69:96:23:
b3:94:e7:29:5b:d6:a7:30:f8:f2:a7:6f:32:fb:85:
77:45:19:8a:f1:52:ab:0f:cb:15:2d:bc:dc:0d:2a:
d7:d1:65:94:6f:ee:b9:30:db:af:ab:a2:99:df:2c:
bf:f5:a1:68:17:1d:74:56:19:b9:b5:a0:06:47:d5:
e7:49:30:61:15:2e:b4:59:fc:70:7e:a9:e4:7f:92:
5c:ae:02:c8:4f:4b:a7:33:49:42:55:51:95:b9:d0:
79:5a:3d:64:1d:5d:eb:91:0a:34:15:71:35:b3:23:
f8:18:56:fe:cc:52:2c:b5:d4:91:ed:24:e9:0d:0d:
1c:37:a1:3b:36:5d:5d:f7:35:29:14:a4:66:fc:0f:
0f:b9:ff:7c:be:5b:eb:4f:5d:c1:1b:ae:b7:aa:7d:
f2:e3:d0:ce:d9:43:15:a4:f5:56:72:ba:4c:97:39:
a6:51:74:28:90:75:bf:b2:71:b9:cb:ff:23:89:8b:
f7:bd:94:b7:72:bc:7e:71:5c:aa:25:22:d7:fc:b4:
ee:49:ea:69:8f:95:28:8d:70:81:3f:a3:4f:35:04:
d3:53:83:c1:aa:3f:68:60:53:c0:f8:f3:ef:c0:42:
12:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:06:2D:D3:E5:42:A3:07:DF:04:65:AB:B8:81:24:CB:EB:F3:CD:5C
X509v3 Authority Key Identifier:
keyid:D4:FD:D5:96:26:7D:56:F7:CE:56:EB:FA:EC:86:A3:27:08:FE:DE:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1P3VliZ9VvfOVuv67IajJwj-3gA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/cd4af6-b742-4cdc-b3a0-67a87d8a3b9b/1/1P3VliZ9VvfOVuv67IajJwj-3gA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:11:14:fc:3c:b8:de:90:48:de:96:cf:2b:f9:f5:18:93:ae:
da:f9:74:95:87:d4:62:20:9f:ad:6d:3b:0a:93:12:fb:86:0b:
11:7e:f9:d4:ed:9b:b8:70:b6:6c:d1:27:ec:77:e7:15:3a:38:
b7:1b:d9:5e:2b:7f:29:31:e7:5e:cc:d6:0d:27:74:00:d6:d8:
e8:5e:2d:9e:1e:91:a6:c7:85:17:6e:0b:98:f6:70:6b:dc:81:
9c:94:22:4c:20:90:c4:f1:05:96:11:70:b4:27:c8:7e:27:6b:
d7:d6:c8:70:5a:2f:96:70:51:e8:8e:7c:17:46:08:6c:41:5c:
41:7d:16:e0:8c:eb:6b:da:2e:bd:5a:01:69:06:7d:21:e9:57:
01:84:2f:4a:85:9f:89:2a:39:aa:cc:82:4a:a1:a8:10:5a:5b:
db:b5:60:8f:25:29:b4:b3:22:fa:8d:4d:68:ad:e3:65:08:ce:
d5:be:e0:51:40:f1:45:4a:f7:0e:51:30:c5:bb:58:83:5a:56:
ac:20:59:ab:53:f7:ed:e9:31:3b:69:76:33:7a:24:eb:93:e3:
27:4e:10:ff:a0:53:d8:1e:0f:e0:99:64:19:6f:b2:67:4a:cd:
2c:ee:89:06:c5:06:85:b7:9c:b6:bf:4e:dd:0c:e1:4b:c6:a0:
94:9a:a8:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:09 2025 by rpki-client