Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
File: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft (raw, json)
Hash identifier: RyFFhXNNZhaVpUNh68yZf+AKIFTVAfKsoAuc4UXylDI=
Subject key identifier: 46:4D:2C:72:F6:F2:79:F4:57:15:0D:D7:9F:92:79:0C:4D:5F:E0:22
Authority key identifier: F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
Certificate issuer: /CN=f83faec93d403f3713823fa39c7d27c62e921471
Certificate serial: 019A72260E87BC9189A9FA3E1549F4D3D2BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: 1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl (hash: /ItU6EjhBtOL2wEaIIs3RdXaD0IIOYW5nMc2E3DFrCI=)
2: 72LdJQQ_XzgvUHseE2sST5RXq_4.roa (hash: kR5iFtf9EPBMZTsPkYiIRyrCHP6r5lMPF7yM/ECFgng=)
3: lput6Z6vJPdy08jemWLG6WZi0oE.roa (hash: muWWXK/VbX5K0RlIXjBqeo4nzxA9w0OVj29rsOGgE/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0e:87:bc:91:89:a9:fa:3e:15:49:f4:d3:d2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83faec93d403f3713823fa39c7d27c62e921471
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=464d2c72f6f279f457150dd79f92790c4d5fe022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f0:bb:72:6a:5a:ef:59:d6:1b:11:3a:00:e1:
02:fe:3e:13:ba:86:f5:b6:81:d4:49:a3:7c:e8:37:
d3:58:2b:fa:98:f4:61:c1:a0:05:06:e5:0a:1c:e7:
ea:50:f4:ea:91:01:be:5b:e9:bc:d9:a6:1d:f4:86:
eb:84:a5:c1:c5:c5:c0:4a:61:98:d3:bb:7a:83:cf:
13:82:59:8e:8c:8d:dc:3a:4f:a8:11:f8:13:01:9b:
94:8a:9f:72:e5:29:fd:b1:2c:69:5a:be:9b:62:40:
8f:61:05:bd:97:b2:ce:fa:dd:87:73:69:ed:35:43:
4b:a1:ee:b0:51:e7:7c:3f:c4:49:81:a0:31:5b:3d:
c3:9e:cc:0c:5f:f9:18:62:4b:62:be:8f:55:d7:09:
c1:22:61:5f:df:e4:2b:a0:69:16:d1:fb:b2:78:48:
db:43:2b:6d:e7:30:d0:64:63:fd:87:84:9f:4a:88:
20:5f:c6:87:3b:1f:79:1a:f5:72:cc:bb:f2:b7:62:
23:73:db:d5:4c:72:b5:e4:91:93:af:18:14:c6:84:
3c:bd:3b:e1:8c:c7:4f:46:ab:ae:8f:07:95:3e:f6:
0f:91:7c:71:f3:cc:01:11:64:93:25:ad:30:82:4f:
a1:19:e0:f2:03:2f:4e:87:99:b2:47:0f:83:a2:60:
0b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:2C:72:F6:F2:79:F4:57:15:0D:D7:9F:92:79:0C:4D:5F:E0:22
X509v3 Authority Key Identifier:
keyid:F8:3F:AE:C9:3D:40:3F:37:13:82:3F:A3:9C:7D:27:C6:2E:92:14:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D-uyT1APzcTgj-jnH0nxi6SFHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/970cf0-9298-4ff0-baf5-210ae0569a45/1/1-D-uyT1APzcTgj-jnH0nxi6SFHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:5c:82:e3:9c:b6:55:ca:f2:84:43:6f:25:05:c0:bf:e4:a0:
ad:c4:96:1c:1d:ae:98:8f:7d:e6:f4:c6:3c:c4:f1:2b:da:2e:
ba:4d:00:b7:03:4f:a1:6f:65:d1:83:16:5e:81:59:fb:01:cf:
ad:18:49:e8:06:17:91:97:c0:14:8d:d7:8d:f9:f0:18:6b:ae:
ce:19:2f:4a:85:55:ee:16:0e:03:bb:e1:cb:9f:4a:30:47:01:
4e:65:9c:86:ab:82:22:d6:d4:4a:cb:79:38:d4:1f:29:f4:41:
33:f6:b7:a9:0c:ab:5c:5d:6c:74:1c:45:14:d5:79:44:2d:15:
63:a0:ed:31:e6:f2:1d:7a:3a:a4:b0:5e:ed:4d:be:3e:2b:5c:
0c:89:72:37:e6:46:e7:b6:12:7d:02:b7:4b:c7:24:a6:e5:e1:
d2:62:a5:02:38:50:aa:8a:8a:4d:8d:15:2e:04:0f:d6:f3:2d:
3d:34:60:20:5b:1d:58:dc:f1:41:97:77:86:a3:f6:e2:bf:71:
57:35:11:91:69:86:60:18:41:a6:63:fe:b8:03:fc:1d:f6:ac:
93:1d:fe:d5:8c:73:ac:ed:02:b2:c1:89:24:5c:4f:49:08:d3:
7a:8d:f0:f7:39:71:b1:31:bf:e5:06:b8:2d:da:8c:a5:7e:eb:
9c:ef:b6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:11 2025 by rpki-client