Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
File: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft (raw, json)
Hash identifier: rKkV7WoRLolFdY1PeRmtFjpCrmfcUG3hYNorVmHjtFc=
Subject key identifier: 74:6F:33:5F:EB:D4:33:56:B7:B5:B9:17:F3:19:67:FD:0A:D0:66:7B
Authority key identifier: FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
Certificate issuer: /CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Certificate serial: 019A722655F281EA93A42339004C035EAD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
Manifest number: 12C4
Signing time: Tue 11 Nov 2025 09:01:46 +0000
Manifest this update: Tue 11 Nov 2025 09:01:46 +0000
Manifest next update: Wed 12 Nov 2025 09:01:46 +0000
Files and hashes: 1: 1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl (hash: nMvu9ehhs572zYWaEwS8525i8ELKhQfTurFXRc1Kfbg=)
2: h0w_kFKT0XqvvDjFWN0hbdP6R0I.roa (hash: HwjG9qWbKXQOPWt9s3bE5FAbNnpfV2VmVkVACeqa+SM=)
3: mduo7I3wNgYNMDFTnFs9bATZw0U.roa (hash: cwDJD0pk/dLmG1tNo7Q1h2nrGc/1dBKFJ1gp1DO7kqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:55:f2:81:ea:93:a4:23:39:00:4c:03:5e:ad:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fad0fb39d6b11fd15fcbb4163403155d1d455c05
Validity
Not Before: Nov 11 09:01:46 2025 GMT
Not After : Nov 12 09:01:46 2025 GMT
Subject: CN=746f335febd43356b7b5b917f31967fd0ad0667b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:5d:ad:82:5b:0e:00:29:21:46:6c:58:22:
ec:56:7d:ee:e2:f1:06:6d:a8:db:ef:3f:a7:af:b9:
27:09:76:f6:50:00:b3:de:1f:78:cd:f3:34:89:cd:
c0:f5:3a:eb:b7:77:e8:50:d8:d4:08:b5:fb:7c:9e:
80:ef:f3:51:38:4e:29:6b:e2:2a:56:69:0b:84:1f:
83:92:f0:73:0a:27:8e:e5:95:44:d2:68:c7:85:17:
cd:50:87:ce:62:54:49:17:4b:57:cc:28:8d:c8:7d:
f3:71:cf:c5:fc:12:d3:da:90:a3:ae:81:51:a6:53:
07:26:83:a1:6f:b8:d2:78:65:a5:d5:76:31:59:4f:
3e:b7:fc:d3:8c:8d:c8:23:b2:67:1d:8a:d9:b0:90:
89:5a:19:72:94:e8:02:9f:98:be:fb:ad:63:3b:fb:
94:57:86:61:5d:3a:25:ce:b8:7f:a7:86:88:5a:7b:
07:49:39:8d:48:4a:0c:55:de:26:02:8a:be:c8:54:
ed:91:3b:68:b0:a6:16:8b:17:7c:99:a0:c6:41:cc:
0a:c5:f3:46:38:21:d2:99:2f:a7:d7:dd:2e:75:a5:
66:3f:db:d6:23:52:8f:e4:cf:a3:1b:48:23:39:52:
8b:74:16:9c:a4:0a:63:e7:06:13:e3:4c:76:d8:da:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6F:33:5F:EB:D4:33:56:B7:B5:B9:17:F3:19:67:FD:0A:D0:66:7B
X509v3 Authority Key Identifier:
keyid:FA:D0:FB:39:D6:B1:1F:D1:5F:CB:B4:16:34:03:15:5D:1D:45:5C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/304e3d-1f0e-44eb-b2c1-e792f89cbce2/1/1-tD7OdaxH9Ffy7QWNAMVXR1FXAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9e:cd:16:23:ea:df:e1:bb:6e:a3:76:75:24:00:34:8f:4f:
3f:04:11:cb:98:fe:aa:c1:ff:2d:43:4c:1a:b9:70:8e:78:4d:
3f:5f:cd:5f:b1:f5:1a:fc:a5:81:96:00:00:77:de:1a:bc:85:
87:5e:e0:f2:d6:8a:1e:2c:4f:d2:f6:40:02:fb:66:93:2b:30:
ad:98:63:45:40:bf:63:27:fc:c5:35:6f:66:ef:5a:05:fb:7c:
81:86:bf:0f:e1:19:6d:da:62:10:c5:e7:d9:cf:c9:bf:37:ad:
f6:b7:f7:1d:a4:90:00:62:ef:09:28:dc:dd:a5:d6:be:22:87:
9b:18:ae:4b:37:d2:ab:57:38:30:09:b7:12:1d:64:bd:fd:e0:
10:fe:d3:f1:65:3f:57:c8:fe:ea:7e:0c:c1:15:ea:1c:d1:0f:
44:ff:26:1d:7c:12:ea:82:f1:cc:09:d2:ee:56:ab:eb:93:1e:
9a:ce:43:ab:18:82:06:d4:69:6a:9f:5b:2b:92:75:43:57:b0:
d3:e4:5b:f4:ff:c7:b5:d8:5a:d4:5d:3a:ee:b4:68:71:77:a4:
cc:62:b5:94:63:20:7e:a5:91:4d:19:0d:0c:62:c8:11:37:f4:
a7:35:06:c4:25:ce:2e:2f:ca:8b:dc:02:f6:34:61:17:5e:ba:
99:54:12:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client