Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: QqruXnMUBCgyNDy6p0hik10paOLeCIAKPaQNf/1L4R0=
Subject key identifier: D9:EA:D9:03:10:1F:73:D4:D0:DE:3A:CC:BD:BC:B7:C6:C5:81:8F:6E
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 019A7225F53B2CB9D867FC3BF17D3FA40F83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:21 +0000
Manifest this update: Tue 11 Nov 2025 09:01:21 +0000
Manifest next update: Wed 12 Nov 2025 09:01:21 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: UQUlUXkNfYbco+qWAYgfwuksC6vXr9tVWQHolmyVFf0=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f5:3b:2c:b9:d8:67:fc:3b:f1:7d:3f:a4:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Nov 11 09:01:21 2025 GMT
Not After : Nov 12 09:01:21 2025 GMT
Subject: CN=d9ead903101f73d4d0de3accbdbcb7c6c5818f6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fc:6b:3c:a2:0a:3e:d9:b9:7a:4b:f8:f0:ec:
c4:b5:ab:39:ee:19:cd:3e:2e:58:11:0a:97:4f:fd:
20:63:b6:34:3f:b1:65:b3:9e:ec:d8:34:0f:ee:4a:
2d:d4:fc:3f:7c:dc:43:3f:c7:30:5c:33:88:d4:60:
a0:30:3a:f8:e5:53:9a:a9:25:21:6d:1b:0a:16:07:
ed:51:58:6e:4c:86:69:03:c7:2c:8e:d1:74:5e:eb:
8a:3f:9b:5e:74:d9:81:10:f9:49:c2:f8:d7:3f:68:
2a:d9:6c:b2:4f:99:57:a6:74:de:92:05:85:83:96:
4b:0d:82:f3:10:5b:b7:73:3d:b1:9f:6b:5e:24:7a:
66:e2:06:e4:9b:d2:f1:d9:57:7a:bd:3d:93:25:af:
ea:2d:ca:d5:a8:72:af:fc:dc:5f:d4:65:0c:59:b6:
d9:0d:d4:dc:f4:07:df:20:1a:69:5b:e0:98:9b:fa:
88:a2:82:ce:22:3f:95:de:b0:a2:7c:ed:2f:ac:73:
0f:85:8b:06:62:21:cc:96:ae:9b:6b:65:85:08:fd:
52:b1:dd:f5:a1:d1:c1:c3:0d:6f:e0:db:92:11:8e:
63:38:0d:97:5b:6c:34:97:46:64:a8:10:a1:fb:53:
59:3e:ad:a9:5e:34:5e:9b:8e:89:a4:44:78:a7:82:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:D9:03:10:1F:73:D4:D0:DE:3A:CC:BD:BC:B7:C6:C5:81:8F:6E
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:97:24:24:02:a7:69:15:e9:e3:40:af:6d:cb:b3:10:5b:74:
03:bb:2b:d8:62:73:71:c3:9b:05:c5:7d:b2:5f:33:59:b7:b3:
c9:a1:cb:53:9f:33:36:43:db:2c:9d:a1:98:15:8a:31:08:e4:
3e:c7:cd:a0:e1:b4:8c:71:df:4c:81:4d:45:bc:6d:86:8e:cc:
cd:f5:d0:7d:91:91:fd:22:5e:3a:2d:e1:d7:43:de:1e:33:22:
51:4e:7b:d0:f7:48:0a:97:61:77:6b:f2:72:e1:7c:c3:a5:b0:
e0:a1:0a:c2:53:da:71:4e:09:da:5e:4a:0a:c5:42:36:75:9d:
2a:c9:fc:67:40:ef:36:cb:c5:d1:c8:76:df:a3:c9:b0:3f:36:
de:bb:27:f8:bc:45:a2:89:c6:45:3d:40:e4:44:ef:b4:b0:04:
29:50:55:38:6e:dd:76:4e:9f:c4:01:05:62:8a:7e:33:92:b2:
7b:8c:64:88:e2:c5:d4:b0:43:a4:8e:01:04:97:10:76:aa:3b:
e0:5f:97:20:ad:d6:9f:bb:74:05:ba:62:a2:ce:a7:cc:17:ab:
ea:52:b6:24:f0:cc:53:b8:a0:bd:0f:ed:e1:94:65:26:e9:ef:
1e:d0:c1:3a:aa:d9:c3:ea:3b:7f:fe:88:fd:59:01:87:cf:c8:
62:8f:f1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:21 2025 by rpki-client