Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
File: 1uDRyowZYcCxEoqlW4V5axIECpU.mft (raw, json)
Hash identifier: 2TJafOqOCT8QQDlorpOKI8xQe2S9im4ur4wJGS0+rB0=
Subject key identifier: 18:4A:D9:D2:5A:D1:F6:CC:8F:80:95:44:A3:CD:C5:F8:A1:78:D9:A4
Authority key identifier: D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
Certificate issuer: /CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Certificate serial: 019A71B9728BF74B3D75377E1497140627D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
Manifest number: 0C2A
Signing time: Tue 11 Nov 2025 07:02:50 +0000
Manifest this update: Tue 11 Nov 2025 07:02:50 +0000
Manifest next update: Wed 12 Nov 2025 07:02:50 +0000
Files and hashes: 1: 1uDRyowZYcCxEoqlW4V5axIECpU.crl (hash: MWbBQ/AOYIvM51oqhrlHVroPcgLh0VedZwzLOPiPA1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:72:8b:f7:4b:3d:75:37:7e:14:97:14:06:27:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6e0d1ca8c1961c0b1128aa55b85796b12040a95
Validity
Not Before: Nov 11 07:02:50 2025 GMT
Not After : Nov 12 07:02:50 2025 GMT
Subject: CN=184ad9d25ad1f6cc8f809544a3cdc5f8a178d9a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c4:e0:23:a4:59:df:05:41:5f:8b:06:47:78:
56:2f:8e:25:10:c7:03:b3:83:f4:b3:3c:bb:2d:5d:
ba:81:49:3e:fb:d3:66:d3:05:b7:91:5e:e0:0d:00:
b4:79:5d:6b:40:76:2a:68:60:73:3a:ee:73:f9:b0:
98:04:df:d8:0d:1c:01:17:48:c4:80:bd:68:ce:87:
17:ee:c6:ce:1e:5f:db:75:bc:9d:43:9a:87:49:b6:
50:4a:4c:f6:a6:0b:d6:63:51:87:00:35:b5:1f:0e:
44:3b:8f:c0:25:f2:ca:ef:b1:76:d5:67:6a:53:29:
58:a9:51:19:51:f6:b7:18:98:de:bb:e4:82:1c:b5:
4b:82:30:01:94:3e:68:b3:91:4a:73:49:4a:fd:45:
bc:f3:9e:76:a0:bc:79:1f:4a:4a:33:3b:8c:e6:65:
80:be:19:b1:61:ab:3d:11:9a:d5:78:20:db:6d:59:
4d:bc:bc:c5:4b:eb:50:f6:d5:e1:c1:11:6f:86:90:
86:c4:bf:ba:f5:bd:ca:91:0a:d1:97:80:92:88:52:
cf:d6:6e:d9:25:5a:42:16:8e:c3:9b:31:9d:a3:d6:
fb:57:19:68:b1:fe:bf:8e:5f:4c:0b:d9:da:d8:35:
4e:51:ac:59:3b:5e:7d:2b:f2:8c:17:40:bb:ff:eb:
4e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4A:D9:D2:5A:D1:F6:CC:8F:80:95:44:A3:CD:C5:F8:A1:78:D9:A4
X509v3 Authority Key Identifier:
keyid:D6:E0:D1:CA:8C:19:61:C0:B1:12:8A:A5:5B:85:79:6B:12:04:0A:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uDRyowZYcCxEoqlW4V5axIECpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fde26b-e2af-4cef-8dc9-47cd464192e7/1/1uDRyowZYcCxEoqlW4V5axIECpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5b:37:26:8a:16:1e:a3:e6:8c:e7:cd:e1:5c:e4:ea:4f:11:
fa:aa:0a:c7:5c:66:0d:3a:88:de:fc:3b:d0:56:76:19:90:5f:
b0:19:ab:b6:54:8d:ab:77:8e:b6:9a:73:34:33:ff:0d:a8:ad:
d4:68:52:76:ee:ad:ad:9c:23:0c:1d:b8:4f:6c:a1:d6:13:ef:
98:38:f4:de:1c:69:f4:3c:52:db:b4:84:de:59:25:2b:c9:55:
6b:fa:22:dd:46:ac:10:d3:b1:e3:02:f1:93:42:2a:e4:99:1c:
fa:dd:02:b1:1d:c2:12:4d:4e:50:d9:be:3d:06:52:64:13:74:
c5:d4:89:11:5e:ad:27:59:b1:fb:20:56:d9:95:dc:26:38:d5:
81:04:d1:c0:c3:db:c8:df:2c:93:7e:bb:35:1c:d2:38:50:69:
c1:3b:6d:83:7e:c1:a7:1a:8a:53:df:73:6a:e6:17:cf:d0:ad:
22:3f:27:22:2a:51:00:a4:39:91:04:cf:19:f8:86:39:1f:e3:
d7:6f:91:b4:8b:e1:e8:86:6b:19:a2:44:47:15:e0:c1:01:7e:
bc:10:30:99:21:5c:e2:e9:be:c3:e9:c6:b1:f3:3e:39:37:c1:
93:77:03:fa:a0:7d:41:38:5c:69:62:d5:5f:14:c4:db:f3:01:
9a:31:7d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:59:38 2025 by rpki-client