Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json)
Hash identifier: YwCC8bnr0cCFeFuhDLUI/4n91Q2SezbEVxFOlbvtxSs=
Subject key identifier: B7:D7:75:D2:6B:BF:BA:9F:12:CF:02:58:1C:9C:21:B0:B6:21:3C:BD
Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Certificate serial: 019A3E37D683ABB702B8D7D92E7CA25EC621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
Manifest number: 119C
Signing time: Sat 01 Nov 2025 07:00:37 +0000
Manifest this update: Sat 01 Nov 2025 07:00:37 +0000
Manifest next update: Sun 02 Nov 2025 07:00:37 +0000
Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: b+USIivuZonIrLKgDhowq3M+gI7At7n1LA2Z9AkvDT4=)
2: D-kvzPrAwGbNDxb_KzLw4lsFxes.roa (hash: JU5Ry1WiWCRnSvWFUZ6oaKSDfbBv9sPRmk3mHwJb9y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Nov 2025 07:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:3e:37:d6:83:ab:b7:02:b8:d7:d9:2e:7c:a2:5e:c6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404
Validity
Not Before: Nov 1 07:00:37 2025 GMT
Not After : Nov 2 07:00:37 2025 GMT
Subject: CN=b7d775d26bbfba9f12cf02581c9c21b0b6213cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3c:52:bc:b2:c9:8b:1a:38:fb:74:67:e5:9a:
76:19:d3:3d:e3:fc:91:65:63:5e:2b:fd:a9:c0:6f:
d8:d4:5a:58:15:27:92:e7:5c:75:9e:c3:68:f2:85:
e2:94:78:76:2f:45:57:68:46:d8:4b:db:a5:53:e9:
61:c6:63:66:6c:20:58:94:b7:84:71:44:fe:c4:e9:
73:4c:34:ba:d0:47:d5:33:44:57:5a:ee:b2:25:5f:
42:48:c2:c0:18:56:f1:be:f5:18:c4:47:8f:d1:68:
b0:84:4f:ed:b2:e2:58:e9:d8:9c:26:3d:20:98:64:
a9:80:2b:95:fa:88:50:ea:1d:10:63:03:5c:ca:be:
43:b2:7e:d8:d7:67:ca:de:30:23:b5:1e:cf:bc:ba:
e2:8c:91:45:b6:f6:ca:93:01:63:2b:7d:2f:20:39:
13:da:f7:2c:7c:9a:89:9e:53:fb:09:97:2c:95:9d:
cd:08:e1:41:af:f3:30:03:61:fd:a7:4e:31:04:ad:
0a:51:36:27:8e:25:2f:c6:f6:bc:3b:fc:0d:af:29:
3a:d3:d3:13:15:71:7d:eb:26:e4:84:55:28:07:09:
88:3f:72:e3:a1:97:83:38:20:70:49:49:4c:4a:60:
71:bf:14:43:c0:cb:10:2a:5d:37:75:2b:ac:99:f4:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D7:75:D2:6B:BF:BA:9F:12:CF:02:58:1C:9C:21:B0:B6:21:3C:BD
X509v3 Authority Key Identifier:
keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:99:40:4d:30:ca:25:e7:30:76:5c:78:a8:56:e8:31:de:93:
98:39:c3:3c:17:56:2b:57:6c:4c:02:c7:42:10:a8:69:6d:49:
f6:da:cc:d2:e5:b7:8e:e7:bd:bf:82:1e:da:98:ce:b3:1a:e3:
d6:37:f9:eb:3f:a7:51:b6:ba:7c:8e:0c:e8:ba:e5:6e:af:dc:
96:dc:29:fe:5f:86:2a:cd:be:70:b3:af:54:68:79:bb:01:e1:
c4:06:f5:46:43:59:be:88:aa:db:3f:04:52:69:7f:3a:6f:f5:
1d:93:33:63:c8:85:25:f4:f8:68:70:d8:ef:c3:2f:67:f7:97:
8e:5f:e3:c1:ca:a8:41:f3:74:42:79:d4:ca:7b:74:eb:45:65:
37:f0:62:80:00:f1:0c:80:58:82:17:9d:d6:b2:da:6a:7a:10:
dd:5e:6d:9b:b1:7f:7c:99:27:89:a0:79:86:b4:d2:b4:4b:ee:
7d:aa:db:9f:be:f6:aa:27:e9:52:69:f9:d1:08:e4:a1:e1:9e:
ea:97:cd:4f:92:52:2c:09:03:9c:43:38:bb:4c:43:82:63:04:
0c:27:21:7b:39:b7:5a:d7:95:24:f9:1f:00:1a:d1:34:41:02:
7f:2b:bd:9e:1c:49:19:16:8d:c1:da:15:2f:03:45:38:98:da:
69:0a:4e:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 14:11:14 2025 by rpki-client