Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
File: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft (raw, json)
Hash identifier: RRXfWNvVtVB618BLAiwogweoQhUPe/X1y1MlDhZIMp4=
Subject key identifier: CE:A4:EA:3B:65:C4:02:90:6C:07:FD:4E:24:96:2E:91:CB:2C:B3:58
Authority key identifier: F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
Certificate issuer: /CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Certificate serial: 019A714A2D8F69005CA49AB3FC6440262A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: 1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl (hash: +YNHL6uyzQqPYs3u0kp3kW72f9mV9cR2oscfVXrSNZw=)
2: Pgq22PofDYngFneIOCYn3YcILuE.roa (hash: gLgiBxrwAEPz9zi62TVewjSLhEPnaaAHEiKYcUhQX+c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2d:8f:69:00:5c:a4:9a:b3:fc:64:40:26:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9587c5b0d415516d72f5914f5f5fb528a32a12c
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=cea4ea3b65c402906c07fd4e24962e91cb2cb358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:45:d3:c7:ac:d8:37:c3:09:6f:35:5c:10:53:
2b:1b:54:40:a2:bb:cd:b9:ea:da:66:42:df:4a:f2:
91:9d:36:bc:41:d6:d3:4d:5e:72:ae:4d:47:e9:0d:
fc:19:83:a7:d5:05:83:10:6b:06:55:0f:34:8a:35:
b2:61:48:e3:7d:9c:4c:e4:9a:fd:c5:54:b6:ef:e5:
c6:c1:a4:40:d7:24:38:63:57:5c:2e:46:76:a2:cb:
58:32:63:5b:ee:2c:1b:0e:9f:46:e8:e3:70:4d:08:
51:e0:f0:38:7f:8a:52:27:3b:f2:23:ee:eb:ac:bd:
2c:1e:48:e3:85:bd:cc:fc:e2:24:5f:34:6a:8c:37:
17:8b:b1:e1:f5:03:24:ee:bc:13:d5:a5:ff:7c:fd:
ae:5c:1b:14:71:0f:f4:cb:97:85:d3:bc:d1:92:5a:
63:5d:d6:74:eb:1a:a3:6f:88:1b:a4:38:7a:20:c0:
d0:ff:06:d3:2d:89:e0:f8:6a:22:3f:65:53:5a:e5:
61:18:72:a2:5b:2d:dc:77:9a:2c:1b:bd:0c:23:e1:
ad:f9:df:75:74:bc:9c:cd:b8:fc:6d:69:2d:6a:8b:
9d:b2:18:97:a2:62:fd:8f:37:0f:b1:ad:03:17:42:
cd:1c:f9:ef:69:5b:60:e5:25:2b:90:c3:5b:b8:eb:
43:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:EA:3B:65:C4:02:90:6C:07:FD:4E:24:96:2E:91:CB:2C:B3:58
X509v3 Authority Key Identifier:
keyid:F9:58:7C:5B:0D:41:55:16:D7:2F:59:14:F5:F5:FB:52:8A:32:A1:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/f7d070-3281-47b7-85c8-8fb624394e7a/1/1-Vh8Ww1BVRbXL1kU9fX7UooyoSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:da:3b:9c:ba:63:16:19:f7:72:3d:65:89:c3:5b:5b:84:08:
f9:9c:ea:da:5c:72:62:ce:fc:7a:d5:c0:86:60:97:3b:83:3a:
8f:32:e6:87:60:f1:68:ce:f3:f8:a1:43:46:c5:ef:b9:9e:15:
6f:a6:56:28:6b:0e:77:41:74:11:54:db:e0:f0:86:c9:43:09:
35:27:b5:e9:fb:0c:b7:7b:c5:1d:68:88:b9:fa:2c:2c:69:a6:
58:8d:4b:c4:98:34:7b:03:12:10:a2:01:38:1a:14:63:a8:7d:
60:fb:aa:b0:f0:b4:81:9a:39:8c:01:58:a8:af:2f:45:4a:9d:
2f:1c:f6:03:18:f1:24:e3:03:29:e8:fe:6c:aa:13:99:4d:34:
26:73:54:80:45:35:a6:8a:0e:90:7b:ee:3b:d7:df:8f:5f:5e:
9e:8a:33:77:c0:11:c8:1e:8f:5f:ee:15:4f:42:14:6a:32:e5:
db:99:27:a1:ae:8b:97:ec:88:da:86:fa:c9:a3:59:9a:58:6d:
01:60:ec:bf:ad:4c:a0:cb:6a:da:8c:7c:d8:a9:2e:c8:00:a8:
bb:d0:45:72:74:a1:72:b9:0b:cb:2c:5c:2b:b1:fe:a5:82:48:
af:83:e0:ae:91:52:42:2c:f0:3e:92:ab:80:02:48:ac:a8:fc:
db:2d:e8:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:40 2025 by rpki-client