Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: ocajIr5hFsY6Pu24hcoZCGpechOUnQulbZtdD0JfuFE=
Subject key identifier: F1:80:98:40:D3:4D:69:F9:B5:DF:60:67:04:54:26:BD:3D:73:DC:19
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 019A71B8BEE902AD14A44D3977B9C2BCF1FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 0795
Signing time: Tue 11 Nov 2025 07:02:04 +0000
Manifest this update: Tue 11 Nov 2025 07:02:04 +0000
Manifest next update: Wed 12 Nov 2025 07:02:04 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: ilMA97uDYvqRZYLlymuSUKaUt7pKBjIGXf0LZQWDXrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:be:e9:02:ad:14:a4:4d:39:77:b9:c2:bc:f1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Nov 11 07:02:04 2025 GMT
Not After : Nov 12 07:02:04 2025 GMT
Subject: CN=f1809840d34d69f9b5df6067045426bd3d73dc19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:1b:d5:c7:7c:af:2a:02:c7:06:b9:c4:f7:
84:b5:f3:68:22:a0:2c:99:68:e9:bc:46:36:91:9c:
27:27:05:67:f2:9e:f3:89:48:b9:15:16:05:d3:c0:
52:36:58:9f:c1:1a:fc:05:fe:29:01:d6:56:6d:1f:
7b:3c:87:69:fd:bf:83:d2:54:fe:09:d2:25:f8:6a:
26:b6:8b:15:b8:8a:2d:e7:ff:0d:75:d9:67:55:94:
0c:05:67:71:b8:f7:ef:7f:84:55:b3:1c:33:03:84:
b4:53:d2:e4:b2:6b:8f:33:67:73:86:67:2c:7d:d8:
e8:31:65:05:d7:07:5f:bd:d7:60:53:9b:dc:66:c5:
f8:2f:f1:d2:7c:f8:0e:9f:3c:39:ef:a6:ec:15:c4:
12:63:3d:6d:dd:74:d7:03:b0:7c:96:4f:fe:0c:f9:
9e:db:e7:76:a6:e6:e0:ad:10:21:d3:0d:80:63:9f:
96:36:46:b6:a7:a1:72:57:98:fa:5b:ac:bd:e2:4b:
49:78:35:01:3a:7d:b8:40:fd:9c:42:b0:32:2d:75:
3f:16:c1:dd:4e:fe:06:71:a8:34:29:fa:50:08:11:
6f:f3:10:39:e8:b6:fc:8f:30:27:1a:26:ea:37:05:
9a:2d:68:77:71:42:14:91:aa:67:af:b0:c9:d8:3b:
a7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:80:98:40:D3:4D:69:F9:B5:DF:60:67:04:54:26:BD:3D:73:DC:19
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:39:9d:92:42:ec:ab:1f:bf:d0:26:e2:c4:63:55:a0:00:6a:
87:ab:47:99:30:ea:60:97:72:da:82:45:17:07:b4:65:35:87:
71:13:be:5c:cc:52:3e:57:a4:e7:0d:93:d2:b1:6e:24:16:4f:
06:e7:90:9f:b0:ce:a3:5a:3b:5b:ec:76:29:a7:c4:64:3d:b9:
4b:ab:ae:74:81:c0:47:c5:4c:03:ec:19:cf:a0:9b:8a:fa:25:
8f:e1:c3:4f:a7:ad:e7:8a:b3:40:5c:a3:5b:c6:11:ce:79:1a:
7e:28:ea:ab:1c:8a:a8:1d:56:18:d5:e8:31:47:c6:08:b2:f8:
30:b7:d0:06:81:3f:a0:b5:93:e1:64:08:51:e7:02:41:b2:70:
70:5e:e2:34:cb:69:cc:5a:1d:e0:cb:6b:84:6f:8c:3d:20:cd:
06:d7:35:30:6b:22:54:3f:ab:6b:06:94:62:76:db:1e:bc:d0:
e3:68:b1:76:3a:f5:55:d2:0e:bf:28:8a:1c:dc:e7:d5:2c:d8:
ee:15:cc:a2:88:33:cf:8f:78:19:a8:d8:94:0a:59:f6:11:a2:
00:4a:f0:e8:db:d6:9b:37:84:3a:70:a3:44:ae:a1:3b:87:e5:
74:b7:e1:3e:7d:00:ec:af:1f:30:ce:59:55:94:d6:8e:13:3a:
28:2b:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:35 2025 by rpki-client