Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: DsXR5U0KGBRVxf7Z1wdrimcQZDy0FQwm7+NAZqm0olA=
Subject key identifier: 3B:A7:31:AC:B9:36:51:BD:DE:B6:3D:D9:12:F5:C6:A0:36:3A:4B:3A
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 019A4D3CC3AE20761EFAE303B5F0F7A53B48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:19 +0000
Manifest this update: Tue 04 Nov 2025 05:00:19 +0000
Manifest next update: Wed 05 Nov 2025 05:00:19 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: ZBvWgPEkFK6u+0ubtgQu1IZYoA5sV9KZXxZP1c68WL4=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c3:ae:20:76:1e:fa:e3:03:b5:f0:f7:a5:3b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Nov 4 05:00:19 2025 GMT
Not After : Nov 5 05:00:19 2025 GMT
Subject: CN=3ba731acb93651bddeb63dd912f5c6a0363a4b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:e8:9c:2f:1e:9e:97:85:23:ec:23:77:65:
ae:31:49:40:14:f6:8f:34:69:ea:b8:57:0a:01:93:
2b:8a:89:06:09:fa:08:7f:9c:e6:41:5f:19:11:1b:
6d:12:bb:ab:a0:ee:ea:5e:4b:b9:99:c7:3f:ec:56:
1d:c2:3c:2e:26:dd:e8:22:ac:7c:60:b7:e4:10:81:
49:78:80:e8:e2:ab:ce:ef:b7:1f:f3:18:12:8d:6f:
20:cf:da:a4:c9:47:53:31:e8:21:73:58:00:4e:5c:
78:fb:6a:9b:b3:89:e4:5a:12:fa:bb:0f:54:11:26:
d9:42:87:8e:e0:5f:88:89:7a:37:14:3e:82:4a:7f:
f3:66:ca:d4:1b:ba:67:fb:99:05:a2:b4:ee:a5:d3:
3b:97:0e:5d:60:bb:ea:44:5a:4a:36:c6:45:ab:ab:
83:86:0a:bf:85:c3:8d:ff:7a:ea:f8:12:c4:4c:6c:
e5:ab:aa:b2:0f:45:8e:33:73:64:27:66:23:73:ac:
12:d3:3a:af:39:f7:5e:26:9b:83:bf:04:b7:bb:2e:
2f:f8:51:f9:2d:34:1c:4e:ca:b5:0a:47:4e:15:24:
2f:f3:15:c3:63:b6:6e:16:20:99:91:d4:fa:7c:5c:
a4:e4:04:cf:5c:50:d2:7a:c4:55:a0:b4:34:59:da:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:31:AC:B9:36:51:BD:DE:B6:3D:D9:12:F5:C6:A0:36:3A:4B:3A
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:12:13:85:e7:9c:a0:c5:78:e4:e6:cf:47:d7:3f:27:7c:6d:
ca:d8:b1:a4:ff:55:c9:f5:09:6e:0e:a7:c9:66:41:df:53:00:
9a:75:c1:c1:20:36:65:d6:a5:69:65:76:54:a1:8e:9d:29:09:
85:29:14:5f:2b:7a:26:80:5d:24:c8:ab:05:e6:63:b9:7f:83:
92:c4:a8:1c:94:27:cb:72:98:de:f3:45:6e:8a:23:9e:6e:ac:
dc:2a:95:53:2f:2d:98:0d:7a:49:21:ca:c1:20:2b:bb:74:3e:
f0:21:33:33:5f:7e:b7:0b:65:01:6a:8d:26:e5:56:6c:b9:4a:
82:5b:a4:8a:d7:22:98:5e:c4:5c:9a:ad:c9:6a:17:b6:97:e8:
a2:03:cf:11:99:00:b0:7a:fc:fe:55:c7:20:82:29:fe:8d:1c:
d3:2e:22:bb:08:3e:79:3f:ee:7e:84:a3:ef:12:08:4c:f7:91:
af:4f:7e:7c:1e:96:29:34:9f:7e:0c:16:56:de:56:11:62:9e:
d4:3c:6a:f0:e3:7e:bd:1a:fa:f4:87:96:2d:cc:e1:2e:ea:ba:
6f:c4:a9:b0:e6:95:a7:34:d9:39:d4:69:a6:0d:7b:01:0a:04:
67:08:08:36:fe:45:7e:0b:7c:e7:ad:7d:8b:9a:cb:12:8a:a0:
8b:d6:0f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:54 2025 by rpki-client