Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
File: 1-J4in4YLBY0j_SiikmFhuHhjMMY.mft (raw, json)
Hash identifier: cbN2XqYyAm0Fd0QC+EZAZCgapgoRuZMkxZJl6HyUBQs=
Subject key identifier: 1F:C3:B1:0C:20:53:80:44:32:11:F0:A1:5B:87:61:A8:64:B2:F8:12
Authority key identifier: F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
Certificate issuer: /CN=f89e229f860b058d23fd28a2926161b8786330c6
Certificate serial: 019A733863004EF5E868F24671690B7176A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
Manifest number: 0FE4
Signing time: Tue 11 Nov 2025 14:01:06 +0000
Manifest this update: Tue 11 Nov 2025 14:01:06 +0000
Manifest next update: Wed 12 Nov 2025 14:01:06 +0000
Files and hashes: 1: 1-J4in4YLBY0j_SiikmFhuHhjMMY.crl (hash: Nu9/sPicTSlOnrkFoKaLKqs756pXFGlg+9/8wv0rNMo=)
2: Aa6sIwlX6_w5uXf2zsts3DwkhU4.roa (hash: LlENaZaigA7zDM+CDaj8xvJ6snfd5fy4W4jHwPOvoos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:63:00:4e:f5:e8:68:f2:46:71:69:0b:71:76:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f89e229f860b058d23fd28a2926161b8786330c6
Validity
Not Before: Nov 11 14:01:06 2025 GMT
Not After : Nov 12 14:01:06 2025 GMT
Subject: CN=1fc3b10c205380443211f0a15b8761a864b2f812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ef:73:cf:28:8c:dd:40:33:66:89:fc:b5:c6:
41:70:fe:23:10:97:ab:19:86:72:d2:18:ae:2e:77:
e9:91:52:45:37:f5:7a:66:15:08:f4:ad:dd:4e:8b:
48:0f:52:57:08:b1:83:7c:fe:48:31:41:11:9e:6d:
88:4c:db:36:40:b8:2b:46:de:f4:21:40:57:9e:dc:
6f:3c:50:d5:2b:51:65:30:bf:0f:36:a9:ef:0f:5e:
1e:ef:88:ea:25:9a:30:c3:23:b1:4a:59:9a:1a:96:
2e:9b:53:61:f5:5f:a9:c4:5e:37:07:47:39:90:7c:
b2:88:46:7f:48:fe:6b:9f:a5:33:0a:a5:8f:6b:28:
71:df:c3:30:cb:e6:1a:83:c2:13:2a:13:56:9d:2b:
8a:e6:93:2f:cf:4c:30:3f:d0:0d:19:a8:e3:d7:bd:
6f:87:fb:3f:92:6f:3c:ed:97:99:d3:2b:77:00:0e:
18:24:9a:b4:e2:fb:32:e4:ea:1f:3c:f4:fd:79:4b:
6c:95:2f:dc:a8:22:6d:03:62:1b:56:16:17:63:6c:
d3:81:99:19:f2:c9:48:47:93:bb:88:03:aa:43:88:
fd:a1:85:23:5d:b8:04:24:d0:47:20:47:fc:85:d1:
9d:e8:67:4a:6d:e3:92:61:85:07:93:37:d1:cb:15:
3a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C3:B1:0C:20:53:80:44:32:11:F0:A1:5B:87:61:A8:64:B2:F8:12
X509v3 Authority Key Identifier:
keyid:F8:9E:22:9F:86:0B:05:8D:23:FD:28:A2:92:61:61:B8:78:63:30:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J4in4YLBY0j_SiikmFhuHhjMMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8cca33-c2b1-4541-9ef2-aa0eb53e90b9/1/1-J4in4YLBY0j_SiikmFhuHhjMMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:cc:83:49:f7:60:5c:b7:36:b5:4c:bb:7c:8c:9d:75:f8:37:
ad:91:89:a4:eb:e6:8f:74:35:88:91:c2:41:4a:dd:72:85:12:
d8:09:24:cb:00:6e:fb:04:3c:1c:ec:31:a5:cc:88:62:8f:bc:
13:78:a9:07:bc:7a:92:94:49:f0:41:75:c3:a7:e5:7a:d2:09:
aa:65:0f:5d:94:35:1f:7f:a2:4b:de:13:d3:4f:80:e5:3b:23:
7e:d1:f2:71:e4:2d:df:fc:6a:fe:51:ad:d8:e5:1d:f3:8d:fa:
b9:a9:e8:b2:3f:54:33:7d:97:65:e1:8f:86:c2:11:0b:fc:95:
e2:bc:6c:53:14:64:e7:74:3a:83:03:92:33:16:46:bc:83:ef:
3e:93:7e:7c:91:c7:0b:12:dd:18:bd:98:ac:b1:7a:7f:37:9d:
eb:1c:65:de:63:7c:3b:a0:13:c6:01:cb:a7:8b:22:a4:5d:9a:
f2:34:b7:09:99:3d:eb:2e:62:e0:14:81:5c:ae:46:87:b0:17:
0f:b1:38:e4:8f:15:89:d4:1a:b3:4a:27:2f:8c:5a:ef:1e:66:
83:70:33:80:9b:8a:c7:c7:65:bf:c2:02:49:fe:83:12:d0:4a:
70:92:fd:a0:e6:c2:a4:c9:b9:92:8f:be:7d:a1:08:a6:8a:16:
40:d6:1e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:51 2025 by rpki-client