Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
File: 1-uSR_yiWEnzojsukTOx0xj--GrU.mft (raw, json)
Hash identifier: 0SyEXPFLzX/TUWdlsyqCTrKbM6pNkb/5yto559Kl+fA=
Subject key identifier: 11:9A:8C:40:99:58:EA:90:64:7C:3B:39:44:E6:D5:44:E6:FC:C5:D4
Authority key identifier: FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
Certificate issuer: /CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Certificate serial: 019A2C686E5BA0BFDAD7B1F85409FB25FFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
Manifest number: 086C
Signing time: Tue 28 Oct 2025 20:00:32 +0000
Manifest this update: Tue 28 Oct 2025 20:00:32 +0000
Manifest next update: Wed 29 Oct 2025 20:00:32 +0000
Files and hashes: 1: 1-uSR_yiWEnzojsukTOx0xj--GrU.crl (hash: z0IjPCVYD3uHbqopR/a1pD0guETAAKHo2C8y9ezAI4s=)
2: UrDlMe0qpvsS_4c6z9IjME9U_ys.roa (hash: /PhhJk4agPsHh1xc3D32x5yCUJu5RdhwQAjI1byTCj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 20:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:6e:5b:a0:bf:da:d7:b1:f8:54:09:fb:25:ff:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae491ff2896127ce88ecba44cec74c63fbe1ab5
Validity
Not Before: Oct 28 20:00:32 2025 GMT
Not After : Oct 29 20:00:32 2025 GMT
Subject: CN=119a8c409958ea90647c3b3944e6d544e6fcc5d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:8d:50:21:e5:e2:0a:e9:29:cb:4f:1d:4f:
cb:5c:c8:99:69:65:80:4b:d0:93:d3:72:c4:cd:f2:
74:ce:34:59:7c:cb:a8:ba:f6:f3:65:e0:14:86:9a:
85:28:46:56:f0:57:a9:fa:3e:d7:8c:d6:0c:e9:62:
91:83:5d:33:63:a3:fc:c0:9a:9b:78:06:b6:bc:fa:
94:6b:39:d3:5e:0c:06:5e:ba:3a:8a:ba:f0:7b:6c:
80:2a:e1:b2:d1:ec:43:ef:c0:39:a2:53:23:18:3a:
6b:01:25:43:31:ca:0f:e2:a4:39:8d:d2:0b:da:85:
29:99:aa:1e:bc:13:be:f0:d9:49:fe:68:e0:77:d7:
bd:34:0d:82:8a:f4:35:20:74:ce:85:07:7d:6c:73:
e0:ed:fd:d1:38:14:78:e7:68:4f:f9:62:c6:74:ec:
c1:2d:d1:15:9d:6b:e5:ad:4f:fc:df:6e:24:fc:d2:
20:8b:29:f1:c3:c3:5c:2d:79:68:09:22:a7:b9:73:
7a:92:d7:2c:fc:75:53:82:56:c4:4e:a1:09:db:3e:
fc:f6:41:e4:23:b1:ad:31:f6:bb:f3:54:42:8a:29:
86:8f:7f:af:ba:4c:85:1a:19:aa:ca:61:82:dc:7f:
5b:5e:9b:16:d4:97:38:6f:dc:1b:43:49:ed:43:39:
a0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:8C:40:99:58:EA:90:64:7C:3B:39:44:E6:D5:44:E6:FC:C5:D4
X509v3 Authority Key Identifier:
keyid:FA:E4:91:FF:28:96:12:7C:E8:8E:CB:A4:4C:EC:74:C6:3F:BE:1A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uSR_yiWEnzojsukTOx0xj--GrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c47ce0-e291-42fe-b3f8-cec16333d7f2/1/1-uSR_yiWEnzojsukTOx0xj--GrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bd:6e:3a:93:c5:e8:1f:1f:fa:ad:26:f7:54:4b:43:b0:63:
4e:a4:c0:1a:7a:95:00:96:8f:7f:1f:35:81:bc:0c:f2:91:b1:
95:bb:77:77:7d:ee:54:9b:ba:f2:77:59:7f:cf:fe:a2:ec:c9:
23:4c:78:5d:13:5f:c3:4e:4c:e3:82:73:46:e2:fd:63:24:f8:
0b:bc:01:2f:ff:e5:1d:72:5e:54:2a:1a:4c:91:9e:23:73:7d:
98:e7:05:ad:93:d4:10:e6:c3:1f:4c:b3:18:2c:46:42:f6:7e:
fe:de:df:18:81:bd:a2:76:61:05:f1:44:ee:1e:92:25:c0:dd:
29:2c:1a:bf:50:74:e3:0a:97:66:3b:ad:95:c1:fc:6f:7d:05:
94:fb:02:21:74:99:49:64:b2:29:48:74:e8:88:52:f9:5c:27:
e0:32:0e:22:0f:ff:cd:4d:7e:58:f1:27:ea:47:0a:a8:7d:c5:
d1:16:55:3f:cb:0b:ed:ed:71:fa:00:24:1a:5c:27:55:e2:99:
72:17:0d:98:7e:45:a3:3f:59:4d:f6:6b:45:9c:f3:fc:8f:8b:
81:23:de:a5:ec:de:ec:18:8e:ee:58:17:ed:20:f3:b7:83:41:
e5:14:2c:78:7e:8a:9b:34:53:f8:54:fb:a3:08:ce:08:4e:a0:
e6:90:f5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 05:57:58 2025 by rpki-client