Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
File: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft (raw, json)
Hash identifier: /VG7jTFf04a2gIPkTsvGw4HM7FvMaI04DODV6ZBP+9k=
Subject key identifier: 67:AD:20:DF:B8:37:A6:6F:A5:6E:E1:31:26:83:36:1D:97:7F:9F:E9
Authority key identifier: D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
Certificate issuer: /CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Certificate serial: 019A72940D65C40DDDB1BEECC1719C9A7F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: 1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl (hash: BZBU6pmF74G8Tff1mqtm3qTVoc9rSqQrjeUN1MLoF4o=)
2: jYHVHa_z-zz0JtB1DIQ1TtprFQY.roa (hash: 5f5RDqgvWFs/JJIC0o4g6y4OSZQd4pIoTEeBtxoIxSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0d:65:c4:0d:dd:b1:be:ec:c1:71:9c:9a:7f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f6f4827c58cb28f996a9aaeb348f1fd26a0ca5
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=67ad20dfb837a66fa56ee1312683361d977f9fe9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:db:15:de:79:c2:a0:5c:18:5d:dd:88:1f:
ae:2f:a3:85:7f:d8:64:c9:f5:b5:1b:36:df:f4:67:
00:e1:51:9a:b4:fb:77:de:51:7a:31:d8:06:fc:06:
ca:bd:92:ca:ca:82:17:f4:58:44:42:ff:2f:02:b1:
52:f9:81:98:4d:06:88:2f:12:4c:7a:e6:f3:33:f7:
16:21:1e:8d:52:5e:65:4b:b7:e2:be:4e:04:dc:0c:
cd:4e:23:9a:e2:4b:f0:b2:89:cd:8c:bb:4e:19:a7:
64:35:37:48:27:d4:86:a9:e3:1a:df:bb:45:b6:72:
2d:60:9e:43:e1:39:8f:77:73:66:cc:b5:ce:3e:a2:
a9:b9:d6:8a:cb:e6:57:ae:d0:c5:cd:5d:e0:6e:32:
c7:72:9b:f1:78:60:fb:66:1c:5e:75:4a:7c:37:c5:
82:94:97:f4:da:33:e1:ce:49:e9:60:d2:6a:10:53:
ce:bb:44:ff:10:5c:aa:b4:0e:92:a4:55:2d:49:9d:
da:00:fd:9e:77:6b:f3:24:33:c1:30:6b:b1:e7:0e:
49:56:c1:9f:4e:1b:22:3f:44:5a:81:1f:a5:4f:c7:
5f:08:8e:e0:7e:d9:e6:dc:1c:cc:23:6e:31:a4:b7:
21:fb:4f:23:f1:3b:11:30:df:17:d4:13:95:74:fc:
f5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AD:20:DF:B8:37:A6:6F:A5:6E:E1:31:26:83:36:1D:97:7F:9F:E9
X509v3 Authority Key Identifier:
keyid:D7:F6:F4:82:7C:58:CB:28:F9:96:A9:AA:EB:34:8F:1F:D2:6A:0C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_b0gnxYyyj5lqmq6zSPH9JqDKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f93db8-0e7d-4ea6-891d-70c67f126bf2/1/1_b0gnxYyyj5lqmq6zSPH9JqDKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:9b:2d:42:15:70:8c:ff:a3:e3:6e:7b:89:3c:1f:35:3e:1e:
eb:c7:bc:50:49:03:0e:4e:f1:02:b5:0d:cf:96:ac:18:0d:45:
33:d0:cb:74:df:e8:b5:60:12:0c:42:81:c6:6f:de:dc:d1:d5:
37:04:10:7f:57:e0:84:d5:13:58:5b:f4:2b:ac:28:bc:6f:ae:
3f:03:cc:4a:c0:ee:07:5c:5e:81:1b:39:62:e3:44:30:bb:a6:
bd:e6:10:e6:4f:0b:a0:9f:5d:09:31:bd:30:fe:78:26:91:9e:
2a:8b:5d:99:c1:e5:f8:7b:20:3f:8b:34:d6:ab:3b:96:b5:d9:
5a:dc:52:5c:dd:a1:46:8e:39:11:72:a3:55:70:ae:23:c1:d4:
2a:cd:4e:31:e8:03:5e:4e:09:0a:74:7c:5b:4c:05:b1:2b:4a:
34:f7:55:85:53:dc:52:ae:6f:c6:44:c2:92:2a:15:fd:c5:66:
9b:9f:85:9b:6c:e5:3a:21:57:51:ba:46:83:2f:a8:a2:9c:b5:
8f:29:20:7a:48:54:f1:a2:7d:8e:6e:63:76:49:5a:f7:46:de:
2d:7c:c5:2a:2c:af:e1:26:62:64:61:01:59:8b:d2:df:a2:cf:
53:3d:34:53:0b:8c:2a:e8:c6:43:94:ea:cf:10:03:df:f1:06:
7e:cf:6a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:56 2025 by rpki-client