Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: VvK7ppsoHzUzty7jxAq2opeUQQ4fhEL7pQFuapW0mBo=
Subject key identifier: 70:FD:22:E5:FA:2E:9C:24:4A:15:63:DC:98:80:80:DD:D8:C7:F1:FB
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019A725C8FA919EAFFDD8D6197B86A84AE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0DAF
Signing time: Tue 11 Nov 2025 10:00:59 +0000
Manifest this update: Tue 11 Nov 2025 10:00:59 +0000
Manifest next update: Wed 12 Nov 2025 10:00:59 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: 4ivV7y0qtfQmf7b/xHK1Eb2hkBFgqXU9x1yDCfhWQ/w=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:8f:a9:19:ea:ff:dd:8d:61:97:b8:6a:84:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Nov 11 10:00:59 2025 GMT
Not After : Nov 12 10:00:59 2025 GMT
Subject: CN=70fd22e5fa2e9c244a1563dc988080ddd8c7f1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:2c:23:61:57:ea:e3:e5:ed:cd:46:dc:69:
a3:9b:5c:14:91:6a:98:b9:53:2a:ac:00:ff:76:43:
b3:fc:77:af:da:cb:71:9a:cd:9e:bc:ce:2e:c5:06:
8d:cf:43:f8:0c:70:90:e8:29:27:09:80:5c:87:da:
a4:1d:e5:d4:1b:9e:c0:71:2d:fc:6d:eb:62:db:3e:
d2:3e:d8:51:bd:8d:cb:ab:de:21:f4:ff:13:a3:91:
ae:50:1f:c3:e9:7d:df:97:0b:67:77:53:b0:de:25:
04:57:e8:95:50:68:9c:71:d9:3f:8e:0b:80:06:81:
2f:b6:16:f3:92:22:e3:14:b3:ca:da:1b:0a:01:e1:
23:ec:99:ad:25:32:7e:6b:14:96:50:f1:ff:b1:a5:
a8:75:55:62:c3:3c:01:e7:48:de:13:21:32:bc:2c:
53:f3:06:52:2e:47:1b:9f:ec:b2:67:87:d4:31:d2:
9d:94:e0:7a:0a:b4:29:9c:ae:aa:94:3b:6c:ec:29:
99:d7:78:29:7a:b9:a0:ce:35:5f:7b:03:0f:fd:ba:
48:29:ea:a0:ca:d5:2a:b8:55:1a:01:cf:c0:89:38:
4a:dc:e2:9f:26:bb:6c:d1:5e:94:05:70:e9:b1:37:
39:97:a8:39:1a:43:74:79:71:55:00:fb:9c:1d:f1:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:FD:22:E5:FA:2E:9C:24:4A:15:63:DC:98:80:80:DD:D8:C7:F1:FB
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:fe:8f:f5:5e:66:3b:d6:7b:ee:76:ae:90:d1:9d:a5:4c:20:
e8:0a:47:a4:d4:3e:07:e4:5f:3d:67:4d:87:9d:bf:23:e1:5f:
30:ba:24:5d:ef:ac:a2:0f:a6:88:c8:01:4c:32:e9:52:0e:06:
e8:d9:eb:ab:1d:bc:be:00:98:60:d5:21:f8:4c:96:7f:11:10:
b2:74:89:ee:f1:d6:c1:3d:79:3d:7f:f6:6f:19:9f:85:1d:14:
53:44:86:1f:d8:da:2c:b2:03:e4:b2:e8:99:8b:d7:c8:7c:ed:
2c:ad:9e:59:34:6e:41:e3:4b:a1:cf:90:d5:88:ca:80:94:21:
50:cf:1e:0f:c5:c6:83:e7:fa:2e:16:df:7f:ce:e3:47:15:b7:
71:47:1b:38:f4:de:e1:12:c6:3f:bf:c5:3b:b3:19:c3:c6:bb:
82:36:de:93:24:e6:e4:9d:b9:c5:62:78:f0:c7:8e:3e:5b:58:
d1:a0:d3:bd:82:2a:c4:0f:38:84:6f:34:08:25:2b:47:ba:a5:
4b:6d:a9:e6:74:e1:e8:fe:03:57:e9:5a:c9:61:f9:3f:f8:ba:
69:e3:28:3f:06:65:94:be:1d:bb:cf:2d:4c:66:3b:d7:5f:ad:
ac:6b:7c:c7:fb:a3:da:32:e8:47:80:be:2f:51:11:5e:b4:a2:
60:6c:bb:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:13 2025 by rpki-client