Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: ghjjEXndJKNPK+woibUkshhFCVDp6T6/W1efam4SiXI=
Subject key identifier: 24:08:B4:7C:E2:E9:AC:65:E4:F1:19:8B:89:5C:CE:C6:45:90:C1:54
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 019A725CCC57644812FFAE6DC8119DC4E6FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 10:01:15 +0000
Manifest this update: Tue 11 Nov 2025 10:01:15 +0000
Manifest next update: Wed 12 Nov 2025 10:01:15 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: 5nBZ3FnV7K6nuy7anI/8WWZ5L9F30+TkTt4IYU7ifas=)
2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:cc:57:64:48:12:ff:ae:6d:c8:11:9d:c4:e6:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Nov 11 10:01:15 2025 GMT
Not After : Nov 12 10:01:15 2025 GMT
Subject: CN=2408b47ce2e9ac65e4f1198b895ccec64590c154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:0e:f8:5e:ad:45:93:cd:d9:6e:1f:e2:18:79:
dd:00:44:f7:de:1c:06:05:53:61:2b:28:af:81:23:
23:c5:23:1f:ec:13:39:65:56:1f:66:e4:8b:55:d1:
f4:da:c4:1d:6d:0e:52:ad:19:dd:02:0f:60:87:87:
30:dc:14:55:63:d8:cc:2a:4e:a5:4c:f9:a7:55:02:
f4:88:94:4b:bf:97:f5:69:9f:0b:48:40:43:20:85:
11:e7:31:95:16:63:df:c1:ad:ad:be:52:24:ff:98:
a3:a5:6d:42:72:7a:df:ae:15:49:91:23:82:bf:78:
27:87:fb:00:a9:55:c7:ef:66:a1:81:5f:af:6f:29:
66:dc:21:1e:31:08:85:91:7d:08:f3:58:d0:7e:63:
4a:05:7a:78:c4:87:3f:db:bd:be:c3:2d:75:c1:ee:
97:df:04:06:79:29:2d:f4:4f:3e:2b:4b:2f:fd:d2:
b8:b2:97:c0:b1:a2:a1:6b:8b:ad:6c:7d:74:cf:19:
15:83:9b:e4:ac:55:ad:21:79:e7:bb:ce:30:52:24:
d0:6c:af:25:fe:96:77:a8:8f:03:80:d6:49:7b:7c:
0a:85:a6:9b:fa:29:ce:4e:ed:e3:b5:a4:a1:7b:ea:
9f:bf:65:de:b0:93:a8:6a:a3:82:d7:40:e8:86:89:
5d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:08:B4:7C:E2:E9:AC:65:E4:F1:19:8B:89:5C:CE:C6:45:90:C1:54
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:07:80:7f:0d:a2:61:b8:50:62:04:53:d1:ab:e7:1b:18:5a:
9d:fc:00:b5:fe:8f:6b:9d:be:aa:bb:69:f6:3d:b5:76:07:f6:
92:27:ad:6b:df:98:4a:60:a7:b7:d1:2a:33:ec:bf:87:f8:e8:
6a:80:e8:1e:ec:22:a2:fe:da:a8:01:9e:27:8f:61:6c:13:fa:
72:c6:3d:e5:d0:32:92:63:1c:e9:7f:7d:f6:a5:26:cb:77:3c:
10:28:9e:45:4f:0e:28:f0:e9:dd:e3:4a:ef:f1:67:f1:83:13:
2e:5b:70:ad:d3:30:4e:0f:60:ce:7d:47:13:c6:d3:64:91:fa:
a1:3d:34:27:84:e3:dc:5c:63:43:02:0f:66:fd:86:a2:89:57:
9c:ba:05:c3:77:c7:d9:a9:1c:83:c6:c9:9e:16:74:be:a1:c1:
d6:27:8b:51:b6:b3:a3:f4:8b:86:0c:5e:ef:da:00:b4:25:b2:
7f:6c:ef:0e:be:52:32:d1:3f:62:89:cf:b0:b9:9a:10:e9:f9:
49:e9:a7:13:9b:d1:e6:2f:dd:d3:08:20:8f:38:17:09:57:06:
4c:ed:40:19:03:31:fb:d2:13:85:fe:8c:2d:76:80:1a:1b:db:
ab:c4:f8:34:c4:b8:5b:78:72:ff:a3:89:f7:d0:5c:22:69:ef:
2b:7b:49:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:15 2025 by rpki-client