Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json)
Hash identifier: 2MTrWqCYDn5AFQDETB2p3KEB1uuPrIzgBs0lKRjiTWY=
Subject key identifier: 11:A4:88:3F:3F:CA:15:3B:D6:49:4F:12:B6:6D:6D:9C:9C:97:8E:23
Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Certificate serial: 019A73DD4E295C9F4121542291B55789C917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
Manifest number: 044C
Signing time: Tue 11 Nov 2025 17:01:14 +0000
Manifest this update: Tue 11 Nov 2025 17:01:14 +0000
Manifest next update: Wed 12 Nov 2025 17:01:14 +0000
Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: nmq7ClA3FSSTVN+xugNIuAwyH6bnEp9rpKaaXqjFJtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:dd:4e:29:5c:9f:41:21:54:22:91:b5:57:89:c9:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04
Validity
Not Before: Nov 11 17:01:14 2025 GMT
Not After : Nov 12 17:01:14 2025 GMT
Subject: CN=11a4883f3fca153bd6494f12b66d6d9c9c978e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:12:ea:26:54:61:21:f8:56:95:e8:9c:e6:55:
86:f6:d8:f9:3f:7d:ad:b3:6d:ce:cc:53:ae:23:61:
8e:5f:a6:28:d9:ce:01:b8:3d:b9:14:cc:67:2b:c6:
c9:dd:d3:c3:ee:d0:d8:b9:ab:e7:07:c7:c5:30:99:
32:dd:ca:3f:92:b0:5c:ac:9b:8b:c6:b9:9c:c7:24:
a9:8d:22:a8:94:55:2d:73:fb:b5:b6:ba:a7:73:6d:
f3:7e:7a:91:d9:02:87:4c:31:3a:87:37:76:23:02:
5c:da:7b:f5:d4:c4:34:fe:9a:4c:84:a0:31:b3:b3:
b6:bb:af:27:ab:c8:b4:e8:b4:20:a5:2f:68:bd:63:
a9:50:6b:a1:db:cf:9a:5f:4e:60:b1:49:e4:ec:c2:
f3:81:44:04:04:84:03:11:76:6f:0e:58:3c:1a:76:
68:54:91:61:98:10:d7:18:31:49:3c:b4:01:c9:3b:
a2:b6:7b:91:64:d6:36:07:83:02:73:d5:62:17:94:
c8:ca:1d:2e:a5:45:90:1e:b8:2f:69:98:25:2d:6d:
9e:64:aa:e4:fc:3e:06:8f:06:01:fc:5d:60:4b:ea:
77:3e:39:97:54:5d:78:d9:3d:d3:70:d4:34:48:52:
cd:8d:84:98:6e:9a:d4:b6:fb:3a:c7:2e:99:d2:84:
40:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:88:3F:3F:CA:15:3B:D6:49:4F:12:B6:6D:6D:9C:9C:97:8E:23
X509v3 Authority Key Identifier:
keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:4a:62:a6:5c:d7:ac:d3:5a:2a:6a:37:fd:56:b4:a2:ef:0d:
77:2f:2c:df:84:87:f0:a1:79:d6:f7:fe:b1:83:c3:f5:fb:ed:
ff:92:ea:da:89:7b:97:a6:dc:a4:a3:d4:6f:c0:77:4b:f8:5b:
5f:59:3b:62:2d:6e:cc:d4:8d:97:d8:a0:dd:51:b6:46:e4:a7:
0e:5d:2e:d0:0e:48:37:ec:1d:ab:45:27:05:a0:ab:6c:92:46:
04:63:41:b7:77:8f:f7:b4:01:2b:25:06:df:2f:bf:a8:e5:b7:
4c:98:1d:ff:dc:7f:c2:08:69:09:c2:b8:37:3a:cd:3b:a0:3d:
5d:25:72:6a:6e:71:95:79:7d:cc:bd:a9:54:65:ff:2b:aa:c1:
5b:7f:34:23:4d:6f:0a:02:bb:c0:34:ad:7d:e1:61:a9:c3:1b:
4b:4c:0e:7f:af:4f:35:a4:89:64:7a:0b:f6:05:99:ed:7f:d2:
f0:b5:97:93:2d:a4:cb:c9:6c:74:63:eb:d6:cc:ad:b4:d7:a2:
95:3c:b6:80:fc:f3:e7:19:c7:e0:b5:ff:0e:6e:07:b2:2f:dd:
65:ea:24:c6:a5:47:15:d4:de:11:2f:18:4e:25:70:49:aa:e8:
fe:97:af:50:b3:e9:d7:49:41:9e:34:f1:9e:df:42:ae:5c:6f:
4b:e6:8b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:38:14 2025 by rpki-client