Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
File: 1cH3vxvczjWLoL_c-_aWTzvqI2I.mft (raw, json)
Hash identifier: QnSWnvV4UrsSaqb49rbnVzDhRo3MqkwfnMi1cr+f4kQ=
Subject key identifier: B0:E5:45:E2:38:96:BA:F8:C5:64:E4:01:04:F7:50:97:A2:9C:3D:4B
Authority key identifier: D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
Certificate issuer: /CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Certificate serial: 019A711320199BD8F4AD783327B807CD62F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
Manifest number: D8
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: 1cH3vxvczjWLoL_c-_aWTzvqI2I.crl (hash: FuMbux1w7AnO+dCZEJFmEfcUCsrXheN73QKB7AA4rBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:20:19:9b:d8:f4:ad:78:33:27:b8:07:cd:62:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5c1f7bf1bdcce358ba0bfdcfbf6964f3bea2362
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=b0e545e23896baf8c564e40104f75097a29c3d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:77:62:ec:11:0b:4c:05:3f:99:c7:dc:f7:
e9:6d:ef:59:3d:d4:cf:60:c5:0c:42:1b:f9:f9:f9:
c5:f5:3d:e2:81:45:43:06:35:51:b6:0e:30:bd:89:
96:25:07:de:87:79:76:c9:26:8f:34:89:d0:e1:f6:
86:2a:dd:c1:42:3e:f0:5f:18:65:71:17:37:b4:38:
76:4c:16:c0:f2:1b:41:80:87:64:65:94:9e:c6:0f:
97:eb:20:5b:59:f9:b0:de:54:95:3b:f4:4a:45:de:
33:a3:11:05:8b:9e:7c:9e:a3:c9:5b:1b:56:fd:07:
15:a6:ac:59:22:b2:4f:40:ac:41:5e:ce:4a:58:46:
85:d1:cf:2a:99:c2:c2:2c:6e:52:1e:53:71:dc:e5:
86:c1:7a:b7:f2:e3:1d:50:b5:80:5e:d0:97:1a:04:
72:9a:d8:92:72:97:b4:1d:2e:6b:b4:96:76:23:78:
64:04:ae:ab:23:6e:d2:e1:d3:e5:81:3b:3a:0b:78:
f9:c9:8b:cd:d3:8a:53:88:06:8e:e6:9e:1f:5a:f9:
75:3e:71:57:a9:f7:f6:6f:4c:53:cf:62:48:07:6f:
bb:80:4a:5f:2e:b5:a1:b1:84:6b:7c:0b:de:2a:72:
99:92:44:93:6c:cd:51:7d:05:6f:85:cf:66:93:82:
3a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E5:45:E2:38:96:BA:F8:C5:64:E4:01:04:F7:50:97:A2:9C:3D:4B
X509v3 Authority Key Identifier:
keyid:D5:C1:F7:BF:1B:DC:CE:35:8B:A0:BF:DC:FB:F6:96:4F:3B:EA:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cH3vxvczjWLoL_c-_aWTzvqI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c96f5b-4917-4743-b6b9-6807613255b2/1/1cH3vxvczjWLoL_c-_aWTzvqI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:1c:d4:2c:82:27:d6:4b:80:dc:3c:17:b4:8e:dc:ae:6f:
4a:ee:5a:c9:0b:ed:d5:c0:01:f4:1f:2a:12:87:a6:28:83:fb:
9f:e0:0d:48:85:81:2d:d5:60:3c:a4:91:fa:17:50:1d:2f:52:
bc:59:25:9e:fe:3a:d2:ac:6e:8a:f9:54:59:e9:0b:73:ef:d9:
c1:7d:7b:d7:c4:13:e6:e3:de:0e:8c:f2:93:60:b6:85:55:8a:
3c:4c:cb:bf:d0:e0:3f:f9:01:95:5c:fd:95:58:ea:34:32:25:
48:a0:74:bf:8a:5f:36:8a:4f:76:d6:9b:2b:3e:1c:fd:35:04:
3a:a3:cb:98:6a:89:55:a8:de:c8:db:80:7d:18:46:af:1c:e8:
14:b5:dc:ab:8a:a7:20:a4:ee:2b:fe:d5:b9:c1:25:43:a5:e2:
f6:b2:6a:f1:fd:d5:f3:e8:fc:cd:c5:ef:e9:8b:ef:4a:9f:05:
68:bb:5e:f6:17:34:6b:e4:c2:a3:db:98:23:b7:81:08:e7:c3:
37:13:f4:69:e7:c2:d2:48:10:75:09:6c:0e:fb:6e:02:29:6c:
47:13:b5:b2:91:a9:9d:c0:99:8d:1d:f7:52:ea:e3:4c:43:80:
26:cd:04:2d:ba:88:1e:9b:f4:dd:65:2b:55:8c:bb:2c:71:53:
62:7a:c1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:17 2025 by rpki-client