Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
File: 1-TVqludOotcrZUXIfHnSEtcqe94.mft (raw, json)
Hash identifier: NFDXe/srYH/GcTVYlIAYdSfQ8oiyReuaUO6dyz3ote8=
Subject key identifier: E7:4E:D4:9D:1C:D1:AA:86:D1:A9:C5:C5:90:A2:D7:7B:7F:5A:6B:6C
Authority key identifier: F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
Certificate issuer: /CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Certificate serial: 019A258A58E3A9FF8A8D75E92BA0DCBB5984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
Manifest number: 15CA
Signing time: Mon 27 Oct 2025 12:00:14 +0000
Manifest this update: Mon 27 Oct 2025 12:00:14 +0000
Manifest next update: Tue 28 Oct 2025 12:00:14 +0000
Files and hashes: 1: 1-TVqludOotcrZUXIfHnSEtcqe94.crl (hash: E2TZgPJPtPqXDp98lYor2OKa0A79EgYq2z3whEjVFvI=)
2: 40BuKq_ENsetJ0coeTja2uim-XM.roa (hash: jFKs1Nj/rGuvWwuXC1CAsi/+KiI87gmidC/b6O4pmJ4=)
3: Ozsn4JoKAsG2v5UbV7B2BGsrTbM.roa (hash: 3pxKTq3sMKN1NqkN5QM+NnGuUJMn7eGHWu6Nl0xki4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 12:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:8a:58:e3:a9:ff:8a:8d:75:e9:2b:a0:dc:bb:59:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9356a96e74ea2d72b6545c87c79d212d72a7bde
Validity
Not Before: Oct 27 12:00:14 2025 GMT
Not After : Oct 28 12:00:14 2025 GMT
Subject: CN=e74ed49d1cd1aa86d1a9c5c590a2d77b7f5a6b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:69:d5:94:5b:44:6f:0e:a9:99:75:e8:73:28:
d9:74:ac:1f:b5:78:cc:d7:2d:16:e3:1a:2f:a2:ca:
87:b5:e5:e1:20:4c:90:1c:db:0c:95:6a:83:be:54:
ae:82:53:14:7e:96:09:83:d7:ca:66:3d:0a:ff:d1:
57:e6:c7:98:7d:51:14:b1:e0:8d:ed:1d:f9:9c:98:
c4:e2:b8:67:e3:c8:66:05:30:46:5e:e5:ed:57:61:
74:af:95:08:3c:89:7c:09:47:25:41:79:98:bb:c8:
bb:05:07:12:ed:ee:0c:0a:fb:8b:ac:d1:06:4f:43:
29:86:13:82:33:4a:c5:48:9f:f8:46:b1:09:37:7b:
2c:3a:82:46:24:32:5d:bb:1b:83:aa:fe:49:2b:29:
55:46:2a:f6:21:11:d2:3d:16:10:42:39:5a:37:c6:
ba:11:09:34:99:eb:97:08:62:60:80:93:57:0d:e0:
ba:da:66:1b:61:8b:59:83:f1:48:eb:8f:c6:1f:34:
02:61:74:9a:3e:91:49:3b:c8:a4:77:52:9e:ab:59:
dc:91:7c:54:45:69:31:81:6f:42:d7:25:13:dc:98:
37:84:3c:03:25:14:92:e5:a2:cc:dd:12:c3:ec:80:
c6:54:ab:51:f2:2f:90:03:25:29:87:29:a1:e1:62:
b6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4E:D4:9D:1C:D1:AA:86:D1:A9:C5:C5:90:A2:D7:7B:7F:5A:6B:6C
X509v3 Authority Key Identifier:
keyid:F9:35:6A:96:E7:4E:A2:D7:2B:65:45:C8:7C:79:D2:12:D7:2A:7B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TVqludOotcrZUXIfHnSEtcqe94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/9f459f-264d-46ce-87b0-cbb7d2bf6fa1/1/1-TVqludOotcrZUXIfHnSEtcqe94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b0:b6:99:f9:c3:4b:dc:ee:1c:dd:7c:d0:38:eb:ec:48:40:
17:6a:15:bd:25:70:74:3b:82:71:0e:36:25:b1:c8:00:8a:28:
ed:68:17:76:17:81:d1:a3:f8:8c:db:40:d8:e8:d8:d9:62:82:
ee:12:91:b8:82:c1:d8:a7:5b:6e:03:f7:c5:30:1f:c2:fb:67:
93:cc:70:20:e4:51:8f:34:9b:a6:b2:09:98:74:0d:29:2a:55:
9a:8e:54:f0:c5:f3:76:8d:68:80:69:67:81:8d:f7:36:59:89:
5d:92:40:14:3c:a5:37:c8:d2:f7:9b:08:bf:21:30:80:0b:5b:
12:35:36:fa:a6:c5:28:ec:1a:13:33:a1:0b:96:04:90:47:d8:
95:cb:ae:54:64:7e:2e:99:03:5d:47:77:40:c5:b4:a8:1b:19:
b9:33:1e:38:44:0b:e0:97:be:4f:6e:ce:85:a0:71:0f:2b:d6:
35:c4:10:8a:a0:d6:7c:5b:ab:a8:c6:6f:71:94:95:21:f4:99:
14:cc:15:35:34:32:9a:7b:aa:59:32:03:f5:9d:24:56:15:7a:
cf:5e:7b:54:e7:6a:cd:04:56:d6:aa:6a:ec:e8:25:88:35:55:
11:0f:ea:9d:4f:cc:b9:51:c1:ea:16:f1:01:7d:28:e3:d0:aa:
06:97:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:40:48 2025 by rpki-client