Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: cwRU4tuAu3DpYbNPWilZSQySQSpzcF035F49MR4CEig=
Subject key identifier: 6E:17:73:FD:67:66:6C:34:13:90:80:DE:83:EB:0C:05:F2:DC:37:FB
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019A72265F0DAB89715EC59F59823260C928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 031F
Signing time: Tue 11 Nov 2025 09:01:48 +0000
Manifest this update: Tue 11 Nov 2025 09:01:48 +0000
Manifest next update: Wed 12 Nov 2025 09:01:48 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: n1lMoRrjDbvUMS1bWCdDy98NJRBAfzfUvencydZCiXw=)
2: 8gZ8h62hKDQ0ROHOpNkfYzgqb4M.roa (hash: dXBSN3fOQjIFRZdnOkkO5RCbLu9iQTdXwdnJOOh0Gjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5f:0d:ab:89:71:5e:c5:9f:59:82:32:60:c9:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Nov 11 09:01:48 2025 GMT
Not After : Nov 12 09:01:48 2025 GMT
Subject: CN=6e1773fd67666c34139080de83eb0c05f2dc37fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:80:52:f6:53:33:0d:d7:d9:d2:dc:cb:fd:67:
7f:5d:57:35:3b:b1:22:e8:ed:89:27:0b:6c:1f:7f:
9a:e9:09:24:ef:90:3f:a1:73:bc:f2:18:b7:86:16:
ce:f2:92:13:d4:94:1e:f5:7b:20:46:ed:ab:b5:4e:
e4:df:e1:02:35:c5:5c:dc:d2:1a:be:80:27:50:1d:
b8:8e:06:db:64:92:7f:f2:8d:fc:86:f8:eb:7a:0d:
d6:c4:f7:09:79:03:c5:30:11:8a:38:8e:7d:18:1a:
f4:30:8a:06:dc:27:3a:5a:9a:83:37:96:f5:75:68:
6d:5f:6a:2d:05:66:13:69:f7:e9:ac:23:85:a1:ae:
e4:51:54:72:fb:18:21:3f:d1:43:5d:b5:53:1b:8a:
b5:b7:ef:3f:06:25:ff:f3:78:6b:36:9c:f2:67:7d:
18:e4:32:8c:9c:58:be:cd:1e:80:15:dd:de:61:ea:
fc:2b:eb:c8:fe:de:ae:75:e6:eb:b8:d5:59:10:f4:
9b:95:f1:6e:5a:82:28:38:22:6d:3c:eb:ed:7d:e3:
09:44:ad:58:8a:ce:50:fe:ba:5f:0c:bd:a5:f6:7a:
e1:f1:16:f0:82:67:95:ec:e3:49:36:6d:f6:31:c1:
24:a3:3f:4d:1e:b7:94:8a:d3:5b:aa:f4:b6:38:9b:
e9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:17:73:FD:67:66:6C:34:13:90:80:DE:83:EB:0C:05:F2:DC:37:FB
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:08:10:79:47:96:26:68:42:dc:02:8a:aa:47:37:38:0a:49:
29:b1:37:88:0b:ce:b8:1b:b3:ef:a1:cc:7c:ab:3c:4a:e7:fd:
1e:ea:b8:82:8e:be:2c:b5:2f:9b:66:e3:26:ed:f2:24:6d:b7:
9c:8f:f9:90:bc:5a:6f:82:f6:00:f2:40:2a:e1:46:8e:c3:3b:
6a:18:e2:df:68:1a:d7:98:11:01:32:26:8a:ed:d3:91:84:90:
9a:2f:85:90:b5:1f:1a:9e:b8:20:0c:fc:3b:7b:f4:14:80:2a:
d7:79:64:6f:9e:4e:b2:84:31:54:c1:a1:17:4e:22:ef:bc:95:
ee:f6:d4:23:7f:b7:0d:df:67:70:1c:d2:4a:49:dc:6a:60:ec:
c4:7c:98:36:ce:29:7b:a1:2b:98:bf:b4:6e:58:04:cd:41:4f:
18:a5:b1:2a:79:73:9e:81:ae:71:82:a1:7d:1d:52:e6:4a:05:
ca:65:46:75:d0:f6:48:77:b5:3d:b4:04:88:22:d7:46:e2:e0:
7e:8b:af:4b:37:98:3f:a8:94:86:15:1f:65:cd:53:7c:63:84:
26:61:d5:03:4d:1c:3d:70:52:15:d1:8a:b5:3a:e3:3d:12:3f:
a2:f8:f2:2a:6f:f6:07:f2:5f:04:79:c3:36:3a:ac:ad:8a:e8:
62:c4:f4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:21:56 2025 by rpki-client