Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
File: 1gKgc6GrxkQ1el-XOO62dqSpPcY.mft (raw, json)
Hash identifier: 9A+fzebVFV1Obre+1VLlEwzN1jnf9FnyfTMdzgYqiwo=
Subject key identifier: 1E:61:9F:98:A2:B1:D9:20:37:EC:8D:3B:7F:B3:EE:58:23:93:E4:42
Authority key identifier: D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
Certificate issuer: /CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Certificate serial: 019A714A328871FD29AC7338C187F92B3111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
Manifest number: BF
Signing time: Tue 11 Nov 2025 05:01:19 +0000
Manifest this update: Tue 11 Nov 2025 05:01:19 +0000
Manifest next update: Wed 12 Nov 2025 05:01:19 +0000
Files and hashes: 1: 1gKgc6GrxkQ1el-XOO62dqSpPcY.crl (hash: UZZcgeUG37XYNDGWpC9XleNOuWBKi4lQhliieeOdnug=)
2: 7dyKoqU_uGFj2QfjYZs5zvdLxIY.roa (hash: 0WWTmxFxwFqsreBzZrF6paaxfc63rbHSArefR/ThQ8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:32:88:71:fd:29:ac:73:38:c1:87:f9:2b:31:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d602a073a1abc644357a5f9738eeb676a4a93dc6
Validity
Not Before: Nov 11 05:01:19 2025 GMT
Not After : Nov 12 05:01:19 2025 GMT
Subject: CN=1e619f98a2b1d92037ec8d3b7fb3ee582393e442
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:32:f5:96:7f:4a:19:3b:95:ba:fa:92:b4:10:
a9:8d:3e:84:b3:8f:4a:ea:76:be:cd:db:2f:6b:64:
44:3d:f6:5f:33:d0:0c:00:ce:29:88:0b:74:91:54:
5a:84:e7:1f:d8:63:00:d9:6d:22:bc:35:d7:74:33:
44:89:e1:01:ea:48:91:36:2b:c2:cd:f4:a0:3f:8c:
96:e4:a7:34:60:00:f5:ba:77:5e:f5:3f:92:72:44:
e0:f4:42:16:cb:7c:de:66:4b:a5:5e:59:54:b8:57:
90:0b:53:99:35:d4:f0:f7:1a:73:47:9c:3d:c0:bf:
12:b9:c2:58:0b:d3:6f:1e:8f:be:6b:ba:87:2d:ef:
9d:26:ed:c4:39:7e:c1:45:f7:94:59:fe:f7:4a:c4:
ff:96:86:82:f1:1c:da:58:cd:59:17:b8:d8:01:5d:
58:74:26:90:e2:e5:25:c2:f2:29:35:55:5e:c8:42:
00:8c:80:c7:66:3e:3b:6a:d3:b5:7e:d6:6c:50:73:
92:1c:1c:d7:de:6b:90:cd:58:08:1b:a0:b2:37:0c:
0d:52:bc:d1:c7:a3:c0:14:90:1e:f8:db:ef:14:e8:
22:c7:7e:08:85:b7:25:87:f5:98:c4:65:bc:53:a9:
92:72:8d:9a:93:5e:d4:f1:36:60:f0:a4:50:c8:30:
fe:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:9F:98:A2:B1:D9:20:37:EC:8D:3B:7F:B3:EE:58:23:93:E4:42
X509v3 Authority Key Identifier:
keyid:D6:02:A0:73:A1:AB:C6:44:35:7A:5F:97:38:EE:B6:76:A4:A9:3D:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gKgc6GrxkQ1el-XOO62dqSpPcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/72bd88-a0b4-4de4-a656-28a15404453e/1/1gKgc6GrxkQ1el-XOO62dqSpPcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:02:d6:91:a4:2a:1c:27:d7:62:d8:d1:97:52:79:8b:52:e4:
82:8a:76:26:b6:7f:d5:d2:fc:82:6d:53:70:4f:59:03:62:ba:
c5:5d:20:66:fa:ef:64:ff:14:14:59:1e:40:3d:9e:f0:73:79:
a2:b1:de:9b:f1:9e:dc:c7:57:1b:5c:22:98:7e:99:3f:b1:66:
ca:b1:92:e1:90:7e:40:5c:de:f1:4c:d1:a2:c8:88:83:0f:9c:
db:89:13:fe:1f:bb:8b:a8:ea:ad:0a:c0:f7:bd:e6:c2:9b:1e:
91:48:fa:57:1b:aa:e6:6e:8c:dd:d0:e8:2d:99:fd:96:d4:d5:
5b:55:9b:51:06:2e:56:c9:99:fc:e0:d7:08:21:74:86:90:5c:
23:ff:61:bc:69:94:08:0e:93:9b:a2:05:b7:67:49:fd:66:4a:
fb:55:d2:2d:a0:ee:79:5f:c1:7d:fd:49:90:38:f3:4e:dc:e4:
75:63:0d:19:9c:2b:39:33:93:26:e0:53:8f:5a:d8:1a:ec:8a:
ec:6f:82:d0:56:dd:40:0e:bb:a3:05:11:48:71:d7:0d:dd:58:
b9:2f:31:0f:33:5e:36:5b:3b:99:6d:de:fc:c4:de:07:89:f1:
de:9d:b4:a8:03:ec:21:b1:0b:2a:5b:f6:2d:f1:ac:89:c9:6b:
86:de:5d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:26 2025 by rpki-client