Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
File: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft (raw, json)
Hash identifier: RdGXhgr9s1HQXqfum7SBbx1vvWqzAY/9gIqXU4sHhqM=
Subject key identifier: 7F:B6:9B:6F:E5:12:AD:76:6D:8D:B3:F5:08:6C:3C:A7:36:B7:80:8D
Authority key identifier: D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
Certificate issuer: /CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Certificate serial: 0199FC21BEEF5F9061835E23755FF0C8AB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
Manifest number: 0747
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl (hash: B8m5N6V2+fKfhvb+W1EdOZZNOblkBstXQrTWupsNp9E=)
2: VggHyCGAaBqT1YS8rDtl_KIKf0g.roa (hash: ViUcKTn2EWx6jkDRARIAQEFwd2YhU52ckTDp4ZosIG0=)
3: p_i4xl5EipcKtC3SPVXhIuYprDw.roa (hash: JFa6mX6HD50RoNNNUoDQdjnuPBe7vWX9ha3WyuSEprs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:be:ef:5f:90:61:83:5e:23:75:5f:f0:c8:ab:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d721fd9d278b6458e9bf1cceba2c31a19fb96cfd
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=7fb69b6fe512ad766d8db3f5086c3ca736b7808d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:12:13:64:cd:4c:74:24:94:27:ae:77:9a:
58:aa:19:ba:27:17:4e:d7:bb:0b:61:d2:55:49:cb:
35:5e:c2:10:4e:38:29:e9:b7:ca:40:07:ab:6f:06:
76:7e:b7:94:d4:db:82:6f:0c:a6:72:a4:db:62:f1:
4f:6a:85:62:8d:cb:96:0b:19:9a:55:22:e2:26:e9:
ea:0c:c0:e6:25:1e:5e:72:0c:c6:5e:cd:b3:e0:68:
88:7e:de:85:14:70:1c:59:1a:18:83:15:5c:4b:aa:
22:c9:ba:36:ac:00:19:c8:b1:3b:8b:8e:13:50:a9:
08:4d:ee:78:17:fd:fd:e5:a4:66:fa:45:5d:7c:1e:
f7:cb:6c:22:d9:e1:d1:a6:cc:2b:b0:78:f3:ea:31:
15:17:e2:28:82:48:27:a0:69:e8:c0:8b:60:72:ab:
1c:f0:fc:e1:cb:0f:ad:7a:49:69:5d:64:b0:f4:ff:
11:55:b3:0c:4f:1c:8b:94:83:b5:3a:69:2c:77:a6:
d4:66:ce:63:1e:61:b9:0c:1f:49:52:1f:64:7a:da:
55:d3:0a:e3:f0:6b:1b:9d:6b:48:69:5f:28:e3:81:
dc:8a:85:01:f9:07:f9:a6:78:0f:16:ff:23:d2:f6:
6a:45:cf:d9:a5:58:98:e2:43:cf:bd:06:41:1d:d7:
65:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B6:9B:6F:E5:12:AD:76:6D:8D:B3:F5:08:6C:3C:A7:36:B7:80:8D
X509v3 Authority Key Identifier:
keyid:D7:21:FD:9D:27:8B:64:58:E9:BF:1C:CE:BA:2C:31:A1:9F:B9:6C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/6d752a-59c5-47a0-b3cd-8f979b69943f/1/1yH9nSeLZFjpvxzOuiwxoZ-5bP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:40:ae:c4:57:2e:a3:e3:ff:43:18:63:9e:25:4b:77:0b:
83:0a:d4:8c:0b:b3:9d:d3:a5:98:c8:73:b1:b2:2c:12:72:b8:
45:7a:aa:a0:93:1a:ad:eb:21:33:9c:8a:46:79:5e:e9:48:26:
f0:bb:84:ef:07:7a:70:08:23:a9:c4:3f:d9:31:6c:88:90:37:
d1:56:e8:d6:d4:52:2c:35:20:bd:ed:cf:3a:c7:04:8e:6e:80:
ce:9a:16:77:92:33:32:fe:93:c0:cc:6f:95:c3:7a:13:2d:e7:
05:80:79:81:20:fa:47:0a:b6:2c:84:dd:bc:9d:a3:59:a7:6a:
ad:d8:03:c3:d8:e5:1f:01:4f:10:66:f9:8c:94:ae:40:ea:1e:
6d:e2:64:9c:8d:53:10:89:c0:ae:78:bf:2e:3b:27:40:93:71:
af:c4:03:37:a6:99:a1:20:61:6f:3b:ee:44:43:2f:dc:25:ba:
eb:57:1d:48:52:a2:6e:2e:97:25:30:2e:25:7a:9d:81:5e:a2:
1d:2a:ff:1e:8b:54:3c:5f:4e:26:b5:d6:90:2b:35:17:9f:8e:
79:e9:5c:cd:9e:65:b0:dd:c3:de:37:6c:f1:3c:c3:51:7f:be:
b1:d9:4d:9d:c8:6f:38:db:ae:95:c8:95:0c:ee:d0:52:84:0a:
82:24:92:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:06:20 2025 by rpki-client