Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: 0u5tUjOQsgvwOc2pBsKyWhIBpKdKx6VU/5ea3U/xELg=
Subject key identifier: CB:0E:25:59:F8:A9:9E:C0:39:9A:78:1D:46:D1:41:99:50:BB:66:F2
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 019A7293737828FC33BF576B4D500FB030A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:00:57 +0000
Manifest this update: Tue 11 Nov 2025 11:00:57 +0000
Manifest next update: Wed 12 Nov 2025 11:00:57 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: 4T/SsOoxLdJzVsBvq3kYR+4w6zsugATGdHkpeDof0wo=)
2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:73:78:28:fc:33:bf:57:6b:4d:50:0f:b0:30:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Nov 11 11:00:57 2025 GMT
Not After : Nov 12 11:00:57 2025 GMT
Subject: CN=cb0e2559f8a99ec0399a781d46d1419950bb66f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ac:28:e9:2e:1c:62:82:c1:ad:b4:08:63:95:
9d:81:b9:1a:8c:95:e6:ad:4f:ce:1e:3c:6b:20:00:
68:3c:7e:64:71:d5:43:b2:d1:7b:b8:65:c1:5a:9c:
95:30:53:4f:6f:dd:e8:45:69:88:46:40:24:ef:e8:
75:c6:c3:45:4e:19:ca:7b:55:f5:c1:31:14:85:16:
bb:37:52:1e:8f:9a:52:02:31:a2:f6:c4:6b:53:9d:
a9:ca:cc:38:8e:e9:47:19:c7:e3:3e:59:05:de:c7:
15:c3:49:e5:f0:69:72:ca:73:da:d1:a0:df:fe:f4:
e6:83:c0:b8:8e:53:a5:e1:2c:32:f6:fe:7a:bd:72:
38:6a:e7:15:7c:9d:1b:57:22:d9:c4:b2:d3:6e:29:
0f:42:4f:16:e2:70:bf:10:68:d1:e0:31:01:36:47:
69:e4:2d:1d:96:2b:8c:26:96:db:4a:96:9a:3b:e2:
fc:9d:d6:90:0c:97:07:a4:ac:2a:d5:10:d6:d1:f6:
f6:c4:64:4a:58:52:07:65:20:c9:e5:1a:31:3d:f8:
84:d7:ff:a9:47:3d:53:94:2e:49:40:3a:9c:10:bd:
a2:7c:4d:c0:47:82:e3:20:c9:22:dd:cb:4f:8c:96:
c7:eb:20:d4:d9:2f:be:ac:60:48:35:89:86:e7:e7:
c6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:0E:25:59:F8:A9:9E:C0:39:9A:78:1D:46:D1:41:99:50:BB:66:F2
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8b:13:cb:0a:a0:6c:31:4b:2a:f5:52:88:47:eb:c5:2c:d8:
3b:01:22:7a:67:5e:32:cc:bb:f5:39:5e:fe:97:0b:16:d0:57:
81:78:46:e0:0a:71:7e:1c:41:7f:ee:36:3c:3e:86:3e:53:91:
85:ae:5f:6b:d8:89:83:f0:b6:34:ed:b7:b4:72:a5:31:d8:5f:
ff:cc:6c:1b:52:c4:e8:fb:92:7b:49:cb:55:3a:5c:65:0d:44:
44:80:6c:bf:4d:79:ab:81:86:ed:5e:76:94:3a:17:54:58:79:
5f:c4:68:1b:97:94:60:3a:81:8c:e5:8a:d5:28:9f:ed:d7:0c:
24:15:79:61:ee:4a:1b:af:fe:5a:71:bc:fb:24:fa:d3:a2:83:
1b:13:8b:4d:eb:16:7f:e0:07:45:c7:b5:45:83:e7:ff:0f:75:
7e:73:bf:d5:3b:50:79:2b:f2:09:6b:60:76:cc:2e:8b:9d:ce:
41:0b:71:dd:d0:06:47:22:c9:31:f7:af:b5:64:f3:ae:f1:4c:
58:c3:28:53:da:01:9d:4a:17:9c:33:73:4d:24:4a:13:2f:fa:
0b:20:ac:93:46:15:49:b5:0a:cf:64:ef:a7:eb:15:04:c6:58:
d1:b2:e9:3e:25:c0:fe:84:6e:3d:f5:25:83:cd:89:6e:fe:ff:
76:03:c7:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:15 2025 by rpki-client