Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File: 1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier: bBdP8zAazufNcGWVokf5/Hs1l0hxh2QytrNGC+wVdIo=
Subject key identifier: DB:A6:A0:FC:CE:60:7E:0D:C5:1A:AF:F5:49:A8:5B:0F:73:F7:83:F9
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer: /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial: 019A71B8AB70B563B3D2397A41E41CE1E5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 07:01:59 +0000
Manifest this update: Tue 11 Nov 2025 07:01:59 +0000
Manifest next update: Wed 12 Nov 2025 07:01:59 +0000
Files and hashes: 1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: IG9nPMpw0l/+Xe8jliIMwL/pmhOkE+R4KwSXMXwzfIk=)
2: _mz1bO9qw-mR0ZWQodW0gDxX-XU.roa (hash: EIXfCvhzf7KTxjdRcM1VzT/2S7P1xIG9PsfWTukoty4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:ab:70:b5:63:b3:d2:39:7a:41:e4:1c:e1:e5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Validity
Not Before: Nov 11 07:01:59 2025 GMT
Not After : Nov 12 07:01:59 2025 GMT
Subject: CN=dba6a0fcce607e0dc51aaff549a85b0f73f783f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:79:4f:e0:c6:b0:9b:da:41:f5:64:2b:c3:
ea:c8:d9:17:97:4f:28:00:6b:61:6e:bb:4d:21:99:
42:a8:56:98:f0:28:a1:e8:ab:01:8e:f6:6d:4d:83:
98:89:24:0c:f0:7c:50:c9:3a:51:2c:46:48:4d:45:
91:2d:10:64:ec:e6:6b:a5:2e:90:68:c3:39:c1:71:
88:e6:01:0d:e0:65:df:4f:f1:6d:fa:b8:2d:08:f5:
e8:8d:f8:b1:01:92:ca:75:28:4e:2f:d5:a1:0c:a6:
e1:72:68:4f:83:e2:56:6c:6f:1a:4c:77:d6:4f:af:
f7:2e:e2:5c:2b:ba:a6:c7:57:df:d9:07:9c:9b:9b:
24:89:a7:13:fa:fe:d1:eb:b2:28:e2:4a:71:10:16:
da:ce:c0:34:c9:37:ca:f2:61:39:65:55:01:47:9b:
d2:6d:a1:ac:e9:e1:a7:82:8f:ce:7b:b0:1e:16:7b:
ca:2f:b8:3e:8e:60:50:87:a0:58:ee:8d:40:24:ab:
f5:9f:f4:83:1a:32:54:cb:c4:b2:98:72:d1:23:0f:
2d:67:e7:cd:fd:8d:26:e2:77:bc:42:cd:fe:fe:3c:
c4:9e:e5:de:41:99:4f:01:93:c7:21:35:d7:79:36:
b5:b4:07:9f:0d:4e:79:1a:00:2b:7a:cb:82:15:30:
7b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:A6:A0:FC:CE:60:7E:0D:C5:1A:AF:F5:49:A8:5B:0F:73:F7:83:F9
X509v3 Authority Key Identifier:
keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:a5:2c:db:2c:aa:c4:74:9d:4d:86:04:95:6c:c9:a4:40:b4:
cf:0c:4f:62:4a:4a:be:a5:ef:9f:53:91:19:4a:4d:cf:1d:2e:
93:95:4b:33:81:5b:63:bb:89:fc:e3:57:b1:60:7f:27:60:89:
42:ab:e2:35:87:07:4b:74:dd:40:0e:5b:7a:f5:0f:98:48:08:
49:0e:79:89:d1:c8:53:d1:60:d2:b9:a8:0a:9f:0a:b0:81:f3:
09:09:f9:f5:e8:a5:b3:f8:a6:ee:e1:44:83:71:bc:a2:44:b6:
2d:5a:82:ac:6f:8c:93:80:60:43:55:f8:18:79:cc:32:d8:98:
c9:02:db:cc:f1:25:ba:2b:39:ce:6e:8a:e2:2d:bf:ea:eb:fc:
be:e8:3c:f4:7f:c1:5a:0b:cd:5c:cd:42:7b:8c:11:90:b0:a5:
8b:32:36:3b:b3:59:7f:bf:d2:03:51:92:09:d4:7a:ea:73:ff:
78:4d:40:b9:0c:48:61:bb:2e:a6:5e:21:57:1c:41:20:62:a3:
60:06:a5:3d:c6:80:8b:b9:cd:9b:7d:a9:e8:da:89:e2:a3:3e:
df:a3:4a:f5:35:00:70:77:75:0f:1d:ea:35:0c:1d:f7:49:d0:
21:1f:6c:79:2b:e6:47:51:d9:f4:6d:4d:3d:4b:86:27:4d:ef:
7f:64:b9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:39:41 2025 by rpki-client