Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
File: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft (raw, json)
Hash identifier: rR6SauqRCiEj9zuYlJFnD2WJJPgwIdWAs85BMUK0HYE=
Subject key identifier: A9:8C:E9:BF:DA:ED:A0:69:EF:51:68:C3:AF:9A:48:A5:0F:4D:95:57
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 019A73019A6B4AC5623818AFDA327EBE7F3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
Manifest number: 14B7
Signing time: Tue 11 Nov 2025 13:01:16 +0000
Manifest this update: Tue 11 Nov 2025 13:01:16 +0000
Manifest next update: Wed 12 Nov 2025 13:01:16 +0000
Files and hashes: 1: 1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl (hash: tVNUoKtciA/3sj4X/L/mrHoWCIcMMVI5unQmpUdeacU=)
2: xIoC-WGecmJt_bZ5x_Wrj2HyW44.roa (hash: LepzO7LDnuKCKfB445emcRk0FeJMq3z/X+qXQkTIak8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:9a:6b:4a:c5:62:38:18:af:da:32:7e:be:7f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Nov 11 13:01:16 2025 GMT
Not After : Nov 12 13:01:16 2025 GMT
Subject: CN=a98ce9bfdaeda069ef5168c3af9a48a50f4d9557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b8:87:b0:98:72:60:5f:ad:d8:7b:dd:c5:62:
ef:51:6d:dd:7d:3d:29:50:ae:b0:6b:28:1e:c1:f8:
87:da:ba:64:64:90:22:62:d5:cf:72:b4:ae:8e:89:
47:71:17:8f:68:9d:e1:57:bd:75:89:5b:09:34:1e:
31:f9:98:35:71:2b:31:25:ad:96:26:4b:e1:f0:16:
0a:59:6d:27:94:d7:31:25:ff:5f:a2:14:8d:11:db:
96:12:0b:7e:e8:e4:f2:ee:8a:c9:5c:b5:cd:42:3a:
37:04:d8:39:d1:3d:8d:3e:de:95:f8:d1:3d:ae:1b:
e0:c6:4c:1b:93:4f:73:c8:1b:bc:19:0d:83:8a:89:
05:f2:8c:59:4c:9a:8f:23:23:2d:d5:15:fb:d9:cc:
68:15:0b:f4:ee:59:dc:9c:ce:20:b0:a0:ad:39:54:
be:d1:25:fa:df:0d:7c:f8:c8:aa:98:06:c4:56:5a:
f1:3e:8b:86:fa:6e:83:03:70:9b:35:e7:70:8b:68:
36:b1:67:48:7e:67:79:8d:a2:18:bf:46:56:97:33:
f6:b6:03:c3:b0:bf:c0:bd:66:f4:8d:78:2c:b6:a5:
ae:d5:33:c7:70:33:49:ff:e9:42:af:c4:b3:d8:77:
3e:52:29:7c:00:3e:81:53:05:54:75:db:0f:8a:c7:
da:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:8C:E9:BF:DA:ED:A0:69:EF:51:68:C3:AF:9A:48:A5:0F:4D:95:57
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dd:e5:d7:ac:aa:b0:4d:1c:18:e6:ee:bc:24:c9:94:96:d9:
9d:ab:fd:50:90:13:12:b1:0d:ce:e1:ae:ac:04:59:48:96:fc:
30:30:11:85:f2:61:10:f1:8e:88:6e:27:81:1c:07:0e:35:91:
bf:5f:d4:50:fc:d0:20:91:7a:2c:42:d0:83:64:73:22:7f:81:
8f:6a:42:ec:2c:e0:f6:aa:98:78:72:cd:42:96:14:a7:0b:23:
02:c6:48:71:bb:ad:7c:eb:1e:d8:cb:b2:2f:cb:de:c1:ed:31:
d0:ea:50:e8:f1:70:b8:a7:07:a6:22:4a:ef:52:ec:b5:77:6a:
be:df:4b:48:9c:85:0a:7b:c4:fb:5b:e4:a8:e0:0d:67:85:60:
da:57:ab:16:94:21:8e:c6:71:18:dd:eb:4b:b4:ec:e7:76:23:
99:3f:c1:a3:54:89:4f:46:db:15:d4:78:cc:be:89:1b:fd:e5:
c1:b5:8a:d8:4c:82:11:01:ba:e7:b9:16:2e:3a:a9:db:4c:75:
ee:e0:42:45:47:fa:fc:da:0b:a5:9f:94:24:7f:04:91:85:8b:
58:68:4b:3a:80:09:3d:6e:69:1d:7d:20:35:43:f8:0f:f0:c4:
fa:4c:ce:f2:4d:6e:3a:78:22:c1:25:f4:85:26:34:27:7d:a1:
b5:41:80:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:51:53 2025 by rpki-client