Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
File: 1-s2QGroNNrZWz5jgwCkX46qiibQ.mft (raw, json)
Hash identifier: Y9bAlXkuCL8QFCV1vw3BGrnAvOuh0BZo0MJLlGFSsto=
Subject key identifier: B8:56:8F:D4:1D:BD:F3:52:61:58:CF:91:DE:E5:0F:AA:4B:86:9D:25
Authority key identifier: FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
Certificate issuer: /CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Certificate serial: 019A7293387DA56D9B511454F08FA4E8AF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
Manifest number: 0781
Signing time: Tue 11 Nov 2025 11:00:42 +0000
Manifest this update: Tue 11 Nov 2025 11:00:42 +0000
Manifest next update: Wed 12 Nov 2025 11:00:42 +0000
Files and hashes: 1: 1-s2QGroNNrZWz5jgwCkX46qiibQ.crl (hash: qWx4O9bVp9FXsieLX38OqmNCGLysZQLeWSPRUM10Icg=)
2: wSUCaZlDq8tA-HMBau3EJ93tyfU.roa (hash: yMgrf3IwtSaiP9aq+f/a8xegEvYBFlBB7iCkJrEJ6kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:38:7d:a5:6d:9b:51:14:54:f0:8f:a4:e8:af:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facd901aba0d36b656cf98e0c02917e3aaa289b4
Validity
Not Before: Nov 11 11:00:42 2025 GMT
Not After : Nov 12 11:00:42 2025 GMT
Subject: CN=b8568fd41dbdf3526158cf91dee50faa4b869d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:3f:1c:82:34:ca:f8:75:91:23:f4:4d:0d:
e3:b9:f1:1e:07:bc:31:cd:20:e8:d0:c3:9b:ea:00:
86:17:e3:6c:b8:47:55:69:0e:ca:a3:46:27:ec:97:
53:f8:f4:6a:ac:78:88:72:50:4b:53:63:77:4c:95:
8b:eb:e4:8f:b5:2e:92:74:1f:ca:44:06:09:f3:0d:
56:fd:59:3c:54:a4:b2:d8:fd:47:06:c4:4b:b0:46:
3c:a7:2e:79:ed:a9:00:1d:21:d8:f3:dc:d1:c6:fe:
25:26:a7:aa:10:81:c0:31:20:f9:15:b4:d2:e9:74:
ef:6f:7d:e2:21:bc:e3:45:36:a0:49:a6:c1:c0:13:
e0:c1:71:8a:2b:3c:9e:c4:01:61:be:30:cd:d0:c0:
ed:ef:20:f4:1b:80:84:42:5a:fa:ef:ad:01:c6:1b:
68:e1:08:6b:18:99:19:89:c0:dc:e7:f4:98:a8:5f:
82:b0:7e:ba:2e:f0:cd:35:08:21:fc:91:05:d6:36:
bd:ab:3d:dd:ab:6c:f5:57:aa:08:8e:a6:13:9f:06:
a3:a0:ff:a7:a6:67:f2:4c:6e:6c:d4:e7:6b:25:ea:
09:14:e6:46:57:51:91:da:a1:49:d4:7f:98:db:9d:
21:99:07:51:47:54:1d:62:be:1a:83:79:17:09:bf:
b3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:56:8F:D4:1D:BD:F3:52:61:58:CF:91:DE:E5:0F:AA:4B:86:9D:25
X509v3 Authority Key Identifier:
keyid:FA:CD:90:1A:BA:0D:36:B6:56:CF:98:E0:C0:29:17:E3:AA:A2:89:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s2QGroNNrZWz5jgwCkX46qiibQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/a526ca-379e-495d-8f15-00fe05c2bfc6/1/1-s2QGroNNrZWz5jgwCkX46qiibQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:26:bf:3b:77:1a:9c:c3:c6:01:59:00:08:05:17:cb:24:ff:
25:01:fa:0e:8f:9e:9d:7d:fe:fe:ab:27:c4:c1:1b:4c:ae:61:
4a:be:e6:46:dc:3b:65:63:a9:ef:8e:3d:dc:67:f1:37:ff:76:
2e:36:97:97:46:62:e6:19:05:5b:0d:3c:eb:2e:8f:67:a6:1f:
37:0f:b4:28:c0:f5:5b:8e:a5:5a:e2:23:e9:5e:b0:4f:90:95:
2f:6c:ed:bf:3e:31:ac:d1:9c:24:ec:7c:43:9f:be:c2:9b:a0:
1b:2e:e1:32:02:c0:8b:78:a2:af:e3:54:4f:b8:fb:fb:e6:8c:
b4:a3:3d:41:70:a2:e2:1c:5b:b6:37:7c:fc:b9:1b:6c:95:ed:
2a:46:61:8d:c3:bd:e8:63:ff:57:94:bc:b6:19:60:33:5c:dd:
f5:19:a0:70:34:3f:35:cd:53:33:6a:c1:5e:8e:fa:43:50:ae:
95:d0:d2:a6:93:b8:ca:72:71:e8:b2:5e:b1:be:fa:bf:b3:7a:
07:4e:be:4c:62:f4:27:a7:ae:9a:e2:4a:28:61:2b:d2:4e:cd:
79:7d:fe:c0:1c:70:04:db:bc:de:f0:4a:a5:f8:59:e2:d4:75:
cb:67:e7:28:78:85:68:8c:d8:1a:68:fc:13:28:e6:9f:ec:60:
85:2e:75:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:37:34 2025 by rpki-client