Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
File: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft (raw, json)
Hash identifier: muEB6PUNNP6dUU3gR/EXz7rONMpUuqfe3zC0Hk6Cano=
Subject key identifier: B7:34:D3:A3:16:29:AA:2C:C1:D3:EF:64:34:8F:A0:98:2F:B4:F8:EF
Authority key identifier: D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
Certificate issuer: /CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Certificate serial: 019A722611A17831D48C43F073799194A9F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:28 +0000
Manifest this update: Tue 11 Nov 2025 09:01:28 +0000
Manifest next update: Wed 12 Nov 2025 09:01:28 +0000
Files and hashes: 1: 1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl (hash: jOenMCq1q5mn1HK08lUhHGy5a7OT5ieIQQ/nNESb43k=)
2: DEgfILmdqt9WOK0Ss2u9swrxwIQ.roa (hash: CPWB4WNXgBrN2XbsNeobPvgMpGNxH4sIm1wHWj5pBrM=)
3: Ow9-1popY8awsgXf2GNA95SUDT0.roa (hash: VV75kE6L9UJcAH7/vX99k0BbRR6uwoTqG3wp/AEMXlA=)
4: qFWMItDWl1Jum13M8uyWAtZgPxI.roa (hash: ulclJf7s+eMnTN7KGqSCmRwy1emYo05IB8k/ir7oKts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:11:a1:78:31:d4:8c:43:f0:73:79:91:94:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6dbaa1b52f3a73289ff768acb7baa7f387f955f
Validity
Not Before: Nov 11 09:01:28 2025 GMT
Not After : Nov 12 09:01:28 2025 GMT
Subject: CN=b734d3a31629aa2cc1d3ef64348fa0982fb4f8ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:f7:c4:bc:85:d9:18:91:b8:18:76:a7:16:
39:3f:4e:b9:50:21:9d:1e:4a:46:60:d2:aa:db:1d:
4c:64:17:1e:68:d0:a1:19:8c:3f:6d:42:5b:f1:fa:
4f:69:a8:b2:32:5f:a6:6e:38:8f:f0:bf:c6:af:9a:
4a:6c:3e:a1:d4:cf:a2:0c:a8:24:0b:2d:23:d9:3e:
d8:a5:01:3a:38:22:20:59:ee:6d:4f:fc:ef:ea:cb:
ca:d0:3f:ea:57:2b:51:48:67:aa:e1:7e:09:5b:71:
37:84:0a:c4:9a:08:c2:1c:b4:43:46:d7:60:8e:fd:
51:40:bb:e5:fa:20:5d:94:1f:aa:8c:a7:1d:66:59:
42:0d:98:6f:ad:fe:e2:de:d8:08:ee:d8:58:2d:ea:
d7:3c:8e:d8:ac:77:0e:77:e7:03:d9:ee:91:c4:b3:
1c:a3:c5:62:36:79:df:aa:92:8a:a4:8d:91:99:1c:
57:19:63:32:1b:94:e0:ae:ee:42:e2:34:2e:6d:d1:
4e:9b:f5:58:97:60:a8:be:a0:9c:e7:98:11:e1:db:
6c:27:69:8b:d4:a1:80:9e:46:c4:94:17:10:b5:b9:
32:43:ed:75:f5:24:cf:b6:f2:b9:12:d9:06:35:83:
7f:fb:cc:89:1d:fd:04:06:01:e2:d0:2e:5a:ef:f3:
3a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:34:D3:A3:16:29:AA:2C:C1:D3:EF:64:34:8F:A0:98:2F:B4:F8:EF
X509v3 Authority Key Identifier:
keyid:D6:DB:AA:1B:52:F3:A7:32:89:FF:76:8A:CB:7B:AA:7F:38:7F:95:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b0b6e7-3e23-4426-8c84-fab83d403558/1/1tuqG1LzpzKJ_3aKy3uqfzh_lV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:94:b0:36:3b:47:3a:15:16:93:3e:1e:7e:39:c4:4d:6b:8c:
86:97:f9:6f:d8:94:cb:c6:b1:24:93:9a:59:86:53:29:f1:9d:
0e:56:3f:cb:84:a8:28:06:bd:f0:d5:42:73:24:43:9c:05:19:
d5:b3:22:9c:0d:29:44:15:0b:bb:56:49:a3:87:f3:34:ce:e8:
a5:80:4c:1e:f1:af:77:e5:7d:e2:ff:4a:c9:fa:73:89:a6:56:
1d:06:99:8d:b1:6e:84:14:bc:aa:2b:df:5f:00:06:5a:99:34:
50:18:59:26:d6:85:33:84:f6:ab:83:7a:87:44:57:a2:1e:b4:
b0:67:83:25:8f:6d:c2:f7:f9:3f:16:22:63:de:1a:35:e0:35:
5a:35:82:05:bf:83:d3:e6:dd:4f:9c:0f:9a:c2:3f:9f:5d:14:
a0:b1:f7:f2:fb:31:55:3f:5a:12:06:37:a7:4f:97:06:c9:b4:
77:12:d4:4a:a6:0f:63:1a:fa:46:da:c9:5d:86:60:dd:f3:0f:
b5:6c:4d:07:db:aa:2a:88:82:18:8f:6f:eb:ae:62:f8:42:98:
ee:9f:d4:61:16:b4:a0:a8:01:a9:84:73:06:cc:e4:7e:dc:d5:
9a:94:78:06:70:48:98:03:40:18:b3:fb:c2:fc:90:94:e6:6f:
3e:c4:a5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:01 2025 by rpki-client