Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: DP21h5ikZhaQKhQjBc8Vwq1EETvcgNuVnPjWBpfCD7E=
Subject key identifier: 1B:1C:57:0C:49:2B:3F:4F:82:5B:AD:60:DE:B6:EF:D8:55:00:26:6B
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 019A71B833CA7155AC55DDCBDADDE50828A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 16B2
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: rNsO5uxlhHsUR9QYASdlyWEDeZONbueizg+31krLcvY=)
2: s1SLHtKOtkgq5r5rHF__j6OHoGY.roa (hash: KY4xp5ySp/G6GnIfRT4waP6fnoRJIDEZEgF7zNS/QEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:33:ca:71:55:ac:55:dd:cb:da:dd:e5:08:28:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=1b1c570c492b3f4f825bad60deb6efd85500266b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:83:2e:b9:7c:c2:35:3c:18:10:0d:b9:d0:71:
40:cb:aa:00:90:b2:c3:5d:36:ce:7f:f2:c1:68:55:
12:a5:d8:95:2e:17:28:00:f3:bd:4a:a9:17:cd:7c:
55:75:32:d4:99:88:53:4f:a3:c8:95:e9:10:bf:99:
c1:67:b3:00:96:be:3e:ee:d0:d6:78:ca:23:fb:60:
92:60:db:81:6a:92:7b:28:52:d2:47:89:e7:c4:6e:
8d:d6:ea:b1:3e:63:29:73:08:75:2f:36:33:36:26:
63:50:44:37:6a:e4:32:f3:16:43:7a:c0:30:aa:e0:
8b:b4:97:7a:d9:b6:05:49:8d:e0:92:83:1c:ba:20:
33:ca:6d:7b:87:71:cb:92:fe:9a:eb:35:0f:48:51:
96:a6:04:51:76:89:67:b6:b8:34:31:9f:f3:dd:3d:
a6:01:a7:57:6a:5c:25:6f:5d:0f:44:c0:eb:7f:dd:
3d:85:78:10:93:05:14:22:79:42:9f:cd:29:ed:f8:
11:1f:b0:67:ef:69:09:16:35:97:30:8e:7e:18:5c:
28:b5:b1:88:ce:15:f3:2a:16:2c:7e:f7:c0:24:c4:
a7:e4:ea:ff:ef:a5:1e:a3:95:60:7c:6d:ae:37:fb:
04:9e:28:d9:d6:89:76:76:18:08:19:03:da:07:a9:
62:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:1C:57:0C:49:2B:3F:4F:82:5B:AD:60:DE:B6:EF:D8:55:00:26:6B
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:54:95:e4:32:80:0c:f0:f7:78:d6:45:2d:82:4a:ec:e4:
85:ac:f3:40:9c:2a:41:2f:1d:54:8b:7e:83:47:a9:3d:01:62:
6b:63:51:0a:67:7d:e7:33:01:3c:57:f6:a0:32:a0:29:80:7d:
91:9a:8c:f4:67:47:82:3a:10:d8:09:6b:84:dc:83:74:7c:c4:
76:24:d1:2b:00:b1:22:2d:c8:87:37:41:5f:0d:70:ba:3d:a9:
7f:e5:a2:58:e5:67:bd:86:54:3e:2e:dc:7a:da:99:62:23:86:
34:12:0f:8b:bc:89:67:5c:fc:08:0e:0b:82:8a:81:44:e6:05:
2e:28:5b:f6:aa:1e:b7:98:59:93:9e:35:f6:42:0e:7c:99:2b:
f1:02:11:cb:94:7c:96:40:d5:5e:fe:4e:0d:4b:8d:2f:fd:dc:
92:aa:52:4d:8f:d5:ca:93:e4:6e:08:56:d2:ae:f7:46:18:e2:
4a:44:16:5a:59:36:2a:aa:5a:a9:8a:d1:d6:8d:3a:4d:55:6b:
af:f7:92:4e:57:9b:e1:ef:ee:c1:31:e1:c0:73:f9:dd:7d:1e:
d6:e4:d6:df:79:d5:c5:b1:de:02:02:a3:4e:35:d1:ec:78:ad:
cc:14:36:68:8c:98:33:72:e9:de:f7:62:87:27:c2:31:5d:9f:
1a:46:27:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client