Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
File: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft (raw, json)
Hash identifier: RqMk06eIF6G+egMxZW/BqUOal0MX/MTSODnZCKETQU0=
Subject key identifier: BF:5C:7A:A6:1F:81:AD:88:EB:AA:19:A7:9F:09:49:8F:D7:DF:0A:F2
Authority key identifier: F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
Certificate issuer: /CN=f970877985b0c5cf69167c91e837424c47d9a425
Certificate serial: 019A71B8345B36FF46AE8EDB8FA1D979C515
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
Manifest number: 0C28
Signing time: Tue 11 Nov 2025 07:01:28 +0000
Manifest this update: Tue 11 Nov 2025 07:01:28 +0000
Manifest next update: Wed 12 Nov 2025 07:01:28 +0000
Files and hashes: 1: 1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl (hash: sORNj04FX8YqySfhVfuSwsT0xjhodAmo3CrywGl2yBM=)
2: dtRhkrrPSJQXLxdge4ROTUVkWDI.roa (hash: LG59mLDEL6OnHYs5spoH7ylFHPQpE2H4qHB7zS4ODlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:34:5b:36:ff:46:ae:8e:db:8f:a1:d9:79:c5:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f970877985b0c5cf69167c91e837424c47d9a425
Validity
Not Before: Nov 11 07:01:28 2025 GMT
Not After : Nov 12 07:01:28 2025 GMT
Subject: CN=bf5c7aa61f81ad88ebaa19a79f09498fd7df0af2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:38:e3:2b:07:98:e8:f7:84:15:30:cc:b4:e6:
d5:95:5a:4f:d6:c2:e8:f9:e7:e5:50:97:fc:f6:33:
05:48:0c:85:38:3c:18:f7:ee:68:7f:b6:96:e4:13:
08:47:7d:5f:45:35:6a:f1:3f:ef:43:df:58:af:70:
39:2f:57:aa:ec:78:74:54:c0:19:fd:5e:67:61:7a:
58:2b:3b:e1:0a:da:f1:04:07:4e:49:0b:20:20:c8:
cd:5e:83:d1:a2:4f:ab:86:c5:3b:9d:d3:7c:6b:74:
04:69:cd:ab:fd:7e:19:2a:7a:80:5d:21:90:61:5c:
64:9b:95:bd:cb:05:40:0f:5d:de:5c:03:55:2a:d3:
28:92:05:96:d8:e0:e4:1d:fc:3f:0c:c8:74:07:4b:
ae:08:d6:9f:2e:b6:35:02:14:f9:2b:97:3b:38:dc:
ad:8d:1e:71:a5:3e:e2:15:97:c8:b2:b7:47:52:60:
b5:30:59:14:25:c8:32:21:c8:5d:01:75:9e:cc:24:
53:ae:c5:6e:72:b4:4a:13:38:06:dc:8d:64:d4:38:
77:04:4c:40:33:2e:e8:2f:17:f9:c4:ea:3c:07:eb:
89:66:83:58:75:85:a5:50:e6:da:a0:65:43:22:9c:
ff:cf:57:30:27:74:a8:aa:20:f3:36:8d:27:5f:20:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5C:7A:A6:1F:81:AD:88:EB:AA:19:A7:9F:09:49:8F:D7:DF:0A:F2
X509v3 Authority Key Identifier:
keyid:F9:70:87:79:85:B0:C5:CF:69:16:7C:91:E8:37:42:4C:47:D9:A4:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d9db98-4010-4328-8445-eecfe7fcf1c0/1/1-XCHeYWwxc9pFnyR6DdCTEfZpCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:a1:bc:bd:da:af:9c:a6:ec:ec:9c:45:5f:dd:e6:15:b0:63:
c8:fb:39:a6:97:9c:ac:36:95:5f:53:0f:cf:c5:42:7c:a7:ca:
78:b9:f3:6c:ff:67:f4:64:6c:79:eb:65:7b:4f:38:02:93:54:
ff:60:2e:1d:45:36:fc:4e:8f:7a:6b:3f:2e:20:6f:21:44:3c:
d8:7b:5a:e8:7b:f8:b6:d1:56:d4:81:70:11:0c:a6:7e:30:92:
30:b1:ee:27:2c:8e:21:a3:69:27:7c:e7:9a:50:23:8d:6d:92:
94:fe:4b:70:60:32:1d:7b:f3:44:06:08:b2:ae:2b:d4:28:d9:
bc:2a:7f:01:97:57:52:89:24:54:50:a4:de:55:82:d6:fb:f3:
93:74:85:ed:54:88:63:ac:f7:f3:4c:7f:6e:7d:33:19:4e:7b:
fd:f6:bb:e6:37:db:50:d8:8c:d3:f4:79:af:f6:82:26:4c:52:
ca:ae:32:84:68:28:4d:6e:51:39:78:02:a4:8f:4f:6f:6b:84:
d3:9a:7e:9f:f3:d2:e2:d6:b8:b9:60:9c:7d:b4:54:ce:13:07:
1c:05:0b:4c:d2:c9:a1:11:5e:56:6d:4e:ed:22:14:be:99:02:
f0:cb:fa:95:a8:a0:b3:4e:b0:70:7e:45:54:ea:2b:b1:38:75:
9f:02:dc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:43:09 2025 by rpki-client