Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
File: 1MpV0uO5FjzEiLb3q-Yusm56jDg.mft (raw, json)
Hash identifier: BQBXBqdJdRA820aCnzTzD287wVzpTwnL3PujBJaT9rk=
Subject key identifier: 57:50:67:9B:FB:8F:35:7A:4A:06:B4:9C:33:85:A7:54:6C:24:6D:01
Authority key identifier: D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
Certificate issuer: /CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Certificate serial: 019A72258FF94F9DE3F9D74C8FF98A0D6582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
Manifest number: 05F8
Signing time: Tue 11 Nov 2025 09:00:55 +0000
Manifest this update: Tue 11 Nov 2025 09:00:55 +0000
Manifest next update: Wed 12 Nov 2025 09:00:55 +0000
Files and hashes: 1: 1MpV0uO5FjzEiLb3q-Yusm56jDg.crl (hash: sTiJImZuy7OmHAaWjIpQNQvR4lsbC3bkjc5gtNEmH10=)
2: YnSv-7hty2XBOtfBw5qkiioJQKM.roa (hash: NdEqiSXPy3YUROk7KGdPBGI+5iDmNNGO1C9AGX01ZC8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:8f:f9:4f:9d:e3:f9:d7:4c:8f:f9:8a:0d:65:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ca55d2e3b9163cc488b6f7abe62eb26e7a8c38
Validity
Not Before: Nov 11 09:00:55 2025 GMT
Not After : Nov 12 09:00:55 2025 GMT
Subject: CN=5750679bfb8f357a4a06b49c3385a7546c246d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:9b:3f:da:f6:1b:bf:49:10:eb:22:8e:ef:
7d:1c:43:9c:14:25:a5:8c:61:ee:13:2d:23:bd:d9:
e4:32:27:4a:88:aa:ce:20:30:c3:36:0a:39:da:31:
1a:d9:94:90:b8:fa:dc:c7:99:00:50:80:56:52:b0:
be:af:00:3b:ea:67:92:c8:34:9a:26:b3:6f:9c:a0:
fd:2e:37:13:2d:a8:b5:1d:2a:5a:87:9c:9c:77:cf:
e3:85:9e:cf:5e:f9:cf:d3:d0:66:e6:c2:4e:57:cc:
c8:81:ce:d5:d1:d1:ec:fc:6a:f1:65:19:24:4b:c2:
e0:97:47:f5:2b:26:28:10:02:30:1b:2c:7e:96:cf:
13:6d:ca:c3:ea:40:04:3a:11:98:23:62:6a:b9:2b:
ba:d6:19:e0:a1:81:e9:0c:64:28:b8:0e:64:b0:14:
04:32:8b:e1:df:93:1a:11:be:93:c5:5a:b2:60:b1:
bc:e5:74:f6:69:f8:d9:46:b6:31:f0:28:a4:aa:68:
93:22:4f:e4:5b:e8:11:ec:a5:16:cf:9f:08:93:62:
c7:40:af:e8:df:d0:98:fa:e1:21:45:ca:32:d2:a5:
b0:af:9f:b3:78:51:70:e1:97:7c:6a:9c:c7:16:96:
a5:ad:82:ef:0c:08:c6:4f:5a:96:3f:28:f0:b7:6d:
7e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:50:67:9B:FB:8F:35:7A:4A:06:B4:9C:33:85:A7:54:6C:24:6D:01
X509v3 Authority Key Identifier:
keyid:D4:CA:55:D2:E3:B9:16:3C:C4:88:B6:F7:AB:E6:2E:B2:6E:7A:8C:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MpV0uO5FjzEiLb3q-Yusm56jDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/1c605b-17b3-4833-a03a-a4f01293cc05/1/1MpV0uO5FjzEiLb3q-Yusm56jDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:f8:07:ea:09:1b:e8:f4:81:4b:87:aa:d1:35:08:2d:ec:e1:
8d:c5:0e:c4:5e:0b:54:18:12:ba:8a:e8:ae:f7:9c:f6:e6:bd:
ef:7f:d7:03:8e:74:41:eb:3f:62:3e:0e:08:89:11:c3:24:ba:
07:cd:ca:9f:a4:46:2a:e1:21:17:34:26:da:32:22:70:0a:c9:
84:fe:ca:ae:a5:89:ee:07:fe:c7:ab:58:f3:94:f0:fd:1e:db:
e9:70:cf:da:eb:e6:7f:08:00:2a:2c:1b:73:31:9a:26:8b:40:
dc:36:65:16:9e:4f:42:0b:57:9e:f4:ee:1a:f1:f2:10:12:b3:
ad:c7:35:09:1f:77:ba:2e:20:9b:ea:39:3a:2e:10:b8:05:0a:
d5:20:ec:97:48:37:de:32:66:95:b2:5d:42:de:d8:05:4c:fd:
51:e9:e1:ca:19:16:13:26:38:67:fa:a0:b3:64:c7:1a:ff:47:
5b:bd:90:9a:fb:c7:3a:a1:5a:c1:c6:9c:13:29:58:f4:f0:09:
79:4e:38:8e:90:40:94:70:55:0c:42:fb:a0:12:b4:52:24:75:
84:67:44:6e:67:97:8b:ea:15:58:f5:8d:23:fa:c9:0b:07:e5:
04:32:cb:e3:b3:ea:aa:42:1f:e5:26:2e:22:3f:f5:5d:eb:0b:
34:d0:63:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:25 2025 by rpki-client