
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier: CRLchpWPSCyi52YGgc8hHTnb17rVzu5/yokLJBzv/Es=
Subject key identifier: 0F:CD:B4:B5:31:CC:4D:B9:2C:D1:FE:58:62:E9:04:C3:9C:84:17:8E
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer: /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial: 019A70A57F1D86B12A26F5DB13B6DC1E41AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number: 0493
Signing time: Tue 11 Nov 2025 02:01:25 +0000
Manifest this update: Tue 11 Nov 2025 02:01:25 +0000
Manifest next update: Wed 12 Nov 2025 02:01:25 +0000
Files and hashes: 1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: gACvcGgbA8mM3wjXAlKQLzWpq8iv9TpTSuLR/c99tdg=)
2: lGuoxPEC-ZxNvepE_9KweYRG1rA.roa (hash: ddFvRAgGNbgqtawi7X97di7STYJ32kUEwzdijgE2enE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a5:7f:1d:86:b1:2a:26:f5:db:13:b6:dc:1e:41:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Validity
Not Before: Nov 11 02:01:25 2025 GMT
Not After : Nov 12 02:01:25 2025 GMT
Subject: CN=0fcdb4b531cc4db92cd1fe5862e904c39c84178e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:7f:f4:61:db:a8:2f:61:cf:e1:7a:06:7e:
9a:c6:e7:fb:78:34:a7:3d:92:d9:f1:39:09:73:b0:
e5:36:de:94:f6:6a:1d:ce:d1:e3:2c:8f:f7:da:7c:
0a:d2:e5:bc:cd:0b:93:8c:3f:b9:8f:19:57:09:68:
60:f8:c2:52:e6:ec:49:78:21:f2:65:d1:cd:51:41:
eb:30:9c:a6:e4:ef:e1:fb:f0:e8:5b:b1:26:8d:8c:
f7:8b:07:cc:62:44:00:6e:dc:97:34:39:ee:c4:b9:
12:59:23:8c:5d:2d:6d:6d:5f:67:cb:dd:a6:e1:73:
34:1c:f2:b1:0b:bd:3c:83:b0:8f:51:ef:ee:33:11:
69:4f:03:e8:95:e3:c4:05:0c:0f:76:9f:95:df:07:
e1:5c:72:1f:61:ca:06:c4:db:b6:08:00:7d:53:16:
14:c7:71:17:c4:79:d7:dd:e4:5b:4e:f7:b5:cc:66:
cf:8e:dd:65:d7:d4:51:21:69:a2:22:64:fa:a6:a8:
24:c7:0c:ac:19:22:0c:b5:9e:38:91:58:83:4e:25:
6f:d0:26:0b:11:c1:28:10:c9:41:35:a5:b7:1e:16:
72:a8:4e:2e:49:b4:37:f1:86:e2:5d:c4:b1:e1:ce:
88:81:ed:59:5c:1b:57:6a:f1:8d:97:92:0d:6a:55:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CD:B4:B5:31:CC:4D:B9:2C:D1:FE:58:62:E9:04:C3:9C:84:17:8E
X509v3 Authority Key Identifier:
keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:fe:2b:70:c2:39:ac:2c:aa:c6:35:ae:94:2e:7a:29:32:f3:
1f:fe:31:55:ad:ec:54:fe:c6:da:95:1e:6d:cf:85:1e:9f:e2:
50:f6:fa:2d:96:28:c9:ef:5a:c0:94:b4:9b:ab:84:d3:8f:58:
5a:f2:56:bb:81:ac:5a:2d:01:cb:d4:58:f0:b8:38:7f:9a:48:
58:cb:9b:e5:b7:bb:d2:98:5f:a6:b7:ff:4e:a7:c6:10:d0:56:
e4:ad:b7:69:0a:90:70:e6:30:c1:6d:29:76:16:0c:0a:73:1c:
1a:0a:f7:76:cf:71:ef:95:ab:f4:5c:c7:75:28:d1:f4:8c:41:
03:2a:cd:ba:de:f7:e1:d2:db:af:9f:fb:55:27:04:37:ad:26:
c2:3a:d5:70:22:47:6d:43:04:ab:58:c0:96:0c:63:c8:69:f5:
9d:96:bd:ad:01:e8:70:07:f0:5c:db:d3:e3:12:33:71:c6:8b:
f8:d2:82:90:cf:02:78:a1:22:19:a6:10:a3:ef:ee:0d:69:52:
fa:52:a2:91:b8:a1:7e:62:42:ae:45:96:67:27:8f:d0:9e:54:
15:2f:e1:91:11:70:39:c4:9e:a2:3e:aa:4d:11:85:c8:b6:82:
40:bb:30:de:4b:1d:14:fa:11:9c:9a:94:63:47:35:d7:76:8c:
be:8f:3f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:23 2025 by rpki-client