Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: TZoOdQKpI+2qxyByw+tYNdv3KWPjJLMWZ7paEZT+yig=
Subject key identifier: 59:BF:52:B4:B0:6C:0C:17:AA:1E:C9:98:2F:9C:32:D3:4F:01:FA:EA
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019A71B951F260DF313788486655C413E19E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0E54
Signing time: Tue 11 Nov 2025 07:02:41 +0000
Manifest this update: Tue 11 Nov 2025 07:02:41 +0000
Manifest next update: Wed 12 Nov 2025 07:02:41 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: 53P3g2LoRX6Rc6a0fPYAAOuWIBgewbK4T0scPi9YTf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:51:f2:60:df:31:37:88:48:66:55:c4:13:e1:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Nov 11 07:02:41 2025 GMT
Not After : Nov 12 07:02:41 2025 GMT
Subject: CN=59bf52b4b06c0c17aa1ec9982f9c32d34f01faea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:d0:2e:77:57:f7:c7:f4:4e:e7:cf:2f:6d:56:
68:33:f4:eb:9b:bb:b2:0b:95:22:50:d2:df:a1:b1:
43:6f:61:5d:71:61:a8:6b:7e:fd:af:09:ef:af:a3:
ff:fb:71:ff:dc:73:ab:e0:15:b3:03:e1:85:eb:88:
6d:ed:a4:f6:04:ec:30:ea:63:d6:da:52:41:5e:42:
a7:e5:1b:0e:b1:a5:f6:0a:30:db:43:48:b4:ea:e7:
80:ad:98:96:31:11:32:ef:a6:38:aa:d6:f8:4a:cc:
64:da:fd:49:e7:c4:5f:ab:ca:99:d1:5d:72:bd:e8:
3b:e4:5c:5f:40:f0:62:cd:fa:36:1a:a6:67:74:60:
c5:74:36:38:48:e8:f9:d4:20:33:9a:a0:d1:35:c4:
bf:5b:d8:02:ef:14:2a:45:95:01:0a:7d:07:24:a5:
74:21:ad:7c:97:a1:ae:6c:f4:d2:23:8c:1f:37:6a:
0a:98:11:b5:63:91:25:68:77:5b:8d:25:75:25:6c:
b9:29:59:82:8c:3f:16:a0:ac:88:c0:43:d5:52:bb:
5a:7b:49:0c:3d:49:1b:f4:33:d3:8e:d2:50:70:6f:
d7:ef:a9:0b:bf:26:cd:61:50:f8:7e:f3:b7:8e:85:
28:f6:d3:9c:61:71:90:52:00:1f:b8:8b:7a:f0:eb:
85:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BF:52:B4:B0:6C:0C:17:AA:1E:C9:98:2F:9C:32:D3:4F:01:FA:EA
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:c5:d2:01:6a:90:a6:7d:a7:59:dc:da:7a:a1:97:de:59:15:
a8:de:91:a5:9a:31:56:5b:89:fa:b1:1c:1f:a0:d1:1b:59:9e:
30:cc:b8:1d:2a:c6:68:7b:5c:fc:99:52:1e:24:9a:eb:99:a8:
28:c9:48:d0:eb:4a:67:57:ef:66:6d:25:af:19:7c:0a:65:2e:
e0:88:02:ca:f0:9b:e3:28:b5:19:82:98:a6:39:1e:7b:7f:48:
a3:bc:75:37:da:4a:9d:31:38:63:9a:e5:10:9d:9e:54:c6:ed:
b0:80:c6:bd:de:2b:b8:06:c5:0d:13:7f:29:9f:13:9c:7c:1c:
a0:56:fb:a6:88:81:95:48:89:63:33:ba:a3:66:bd:59:a7:bf:
81:fb:04:d4:77:b5:40:8d:88:0a:fe:ed:b8:11:b3:35:91:71:
23:89:13:19:04:8b:8d:11:8e:a0:de:e7:dd:46:ea:2a:cc:fb:
ca:42:75:3e:c3:99:25:c1:18:26:cd:a7:04:c3:10:a7:6e:e8:
5e:ca:98:5f:f0:df:73:05:3f:7f:d6:64:00:af:1d:35:bb:c1:
70:eb:7d:03:8b:a7:8f:28:d8:78:f3:df:44:3e:5d:db:60:fb:
1c:23:9b:03:fa:af:f7:02:1d:9a:07:23:de:b2:78:86:a0:d1:
cb:f3:28:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:05 2025 by rpki-client