
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: 9IxHiJKxo5h6MGeVdiwtuceOBFR9Hut79Dc7LMDnAjs=
Subject key identifier: C8:19:B3:02:80:E1:27:A4:68:FB:4C:77:7F:65:24:F5:D8:E8:B1:64
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 019A214049D998E552C4947E41381D704E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 0674
Signing time: Sun 26 Oct 2025 16:00:52 +0000
Manifest this update: Sun 26 Oct 2025 16:00:52 +0000
Manifest next update: Mon 27 Oct 2025 16:00:52 +0000
Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: ep5ECl6NGk+3BHgv5tvfsbpWQtbEUbcRuZkG1elLV1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:49:d9:98:e5:52:c4:94:7e:41:38:1d:70:4e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Oct 26 16:00:52 2025 GMT
Not After : Oct 27 16:00:52 2025 GMT
Subject: CN=c819b30280e127a468fb4c777f6524f5d8e8b164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:12:9a:2e:06:73:10:9a:97:43:93:a0:8a:32:
1d:9d:36:71:d0:18:30:16:57:fc:06:ab:73:58:90:
50:8b:50:f3:3f:82:21:ab:a0:94:e0:91:c1:32:fa:
e8:9e:6f:63:16:e7:c8:82:b1:88:44:6d:4a:63:ad:
ba:19:29:9a:1f:94:ea:ae:81:60:60:5a:54:31:23:
9d:be:49:e1:bc:8b:71:ee:0c:07:d6:92:08:a2:b4:
51:cf:ad:ec:c8:bb:bb:19:30:be:85:f6:37:cb:88:
d9:ba:66:d7:67:d5:e1:46:51:99:42:93:35:e1:d8:
68:d0:af:a1:75:27:04:63:c1:7c:dc:d0:45:83:b8:
b9:db:ed:b0:32:cf:d2:84:30:60:a4:d9:6c:e3:d8:
22:45:f3:f2:b9:d5:86:23:35:c0:72:b8:e3:a2:0f:
a0:04:ff:45:b5:f7:2d:03:23:70:b3:99:47:9f:1f:
d3:19:e0:8b:18:1c:04:21:a2:be:20:6d:82:e8:9a:
b4:44:df:e0:1a:c7:b3:1b:af:ff:b6:2f:9f:46:9a:
12:9a:00:f5:60:bc:24:57:35:4a:9c:12:5e:6f:55:
55:9a:69:f5:34:13:41:bd:db:4a:87:a2:a0:51:2d:
78:fe:53:34:08:e9:3d:17:e3:35:66:b4:84:36:a4:
a9:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:19:B3:02:80:E1:27:A4:68:FB:4C:77:7F:65:24:F5:D8:E8:B1:64
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:5b:d6:5b:2f:7b:5f:29:91:d9:b1:dc:a4:5a:e1:9e:70:62:
83:4c:6d:a2:25:05:26:c9:b9:03:55:f8:90:a0:21:c4:0c:82:
0a:b8:82:38:63:da:37:c9:b0:20:3f:5f:5c:13:2c:ee:f6:18:
dd:0f:a1:6d:cc:04:8c:c7:ee:aa:e2:30:56:75:cf:38:7c:b9:
db:d6:e8:6f:27:50:cf:24:4c:33:c0:41:58:d5:ef:cd:08:ab:
2f:bc:12:6c:fe:24:51:af:54:27:50:df:5b:f9:4b:e1:e1:c6:
44:a6:89:94:fd:ea:37:62:5c:bc:d2:f6:26:1e:47:bb:54:dc:
12:0d:e4:dc:e0:de:08:3b:9e:47:ce:f8:c9:3a:76:92:fb:6a:
1f:bd:13:5f:04:94:27:ac:18:09:f0:12:21:d5:9e:39:dd:87:
35:7f:11:80:c3:78:86:11:45:5a:98:36:1a:e9:61:76:a1:ca:
67:b8:62:73:36:d2:20:7c:ef:bf:ff:50:b7:c7:80:ca:50:2a:
dc:10:51:82:e8:67:24:e7:0d:6d:f0:5a:77:5e:d5:c5:4e:39:
9a:2c:6c:77:f3:e2:e4:34:be:8c:c3:c7:10:a9:40:33:28:7a:
b7:a4:93:70:d3:77:8b:c3:63:21:1c:96:d3:f8:f2:ea:d0:48:
a7:e6:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 23:21:56 2025 by rpki-client