Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
File: 1Xd1ecxneERUvNkaBr1pNarvc_k.mft (raw, json)
Hash identifier: JcSf8lsMl5y1nTPmhxbykfU0TEfReO52u+ua4kz7Mzk=
Subject key identifier: 4E:28:5C:D7:B5:58:E1:C6:8A:10:34:3D:1E:8F:AE:52:28:90:57:DE
Authority key identifier: D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
Certificate issuer: /CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Certificate serial: 019A4DAB13FE16D7ED5A8E6C5287D7F8D30A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 07:00:48 +0000
Manifest this update: Tue 04 Nov 2025 07:00:48 +0000
Manifest next update: Wed 05 Nov 2025 07:00:48 +0000
Files and hashes: 1: 1Xd1ecxneERUvNkaBr1pNarvc_k.crl (hash: yUPDrVt3Tqru1B5Dws1bHuIkMumXP5uFLMLvOJy1XAU=)
2: PT9g_wLcneBNjOxS5cSZh8KvoxU.roa (hash: 5/y3EvqHzR0t/EA2PXR7ybL1u3RTtSq96/aHOf8aTaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:13:fe:16:d7:ed:5a:8e:6c:52:87:d7:f8:d3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5777579cc67784454bcd91a06bd6935aaef73f9
Validity
Not Before: Nov 4 07:00:48 2025 GMT
Not After : Nov 5 07:00:48 2025 GMT
Subject: CN=4e285cd7b558e1c68a10343d1e8fae52289057de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:51:25:c2:5a:ef:e8:5b:3d:b5:1a:ca:dd:a2:
90:92:24:56:dc:59:22:65:e0:bc:e9:57:e3:11:6c:
8b:05:53:cd:68:c1:d0:14:f9:a1:b3:31:47:62:c3:
17:3d:13:93:72:36:98:13:3c:62:bb:c5:cc:c7:a5:
99:a5:fe:1a:d4:ea:bf:dc:28:b8:bb:ae:bd:7e:85:
25:11:9a:24:cb:34:20:c7:06:e7:ef:27:13:b1:32:
21:66:4e:8b:91:86:04:fc:a3:1f:21:c2:a1:80:f9:
0f:c4:d0:ba:ce:41:7e:9c:61:62:7b:40:e5:34:f0:
91:08:4a:1a:da:a7:15:ab:64:91:13:17:c2:c8:d6:
0a:76:9b:46:f4:9b:44:61:1f:ec:56:60:1c:57:d5:
61:28:32:77:95:37:dc:b8:41:b8:ba:3a:f9:30:25:
b0:8f:27:5f:76:cb:f2:81:b5:ea:82:7a:0a:42:c2:
b6:9f:d0:3a:99:25:e2:99:11:69:52:1d:89:f8:e6:
ab:3b:28:05:bf:15:db:45:92:e0:89:cd:75:01:e8:
82:38:7f:89:c5:3a:10:02:cf:04:07:3a:7a:10:ce:
1a:67:9e:d4:c2:1e:85:1a:d9:c7:47:e3:12:80:d9:
93:01:6e:35:b8:8f:d0:12:9a:a8:ca:35:80:27:3c:
62:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:5C:D7:B5:58:E1:C6:8A:10:34:3D:1E:8F:AE:52:28:90:57:DE
X509v3 Authority Key Identifier:
keyid:D5:77:75:79:CC:67:78:44:54:BC:D9:1A:06:BD:69:35:AA:EF:73:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Xd1ecxneERUvNkaBr1pNarvc_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/52fb86-ed78-4850-b406-80a2b68c3832/1/1Xd1ecxneERUvNkaBr1pNarvc_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:29:67:4d:76:b5:61:31:f8:93:8c:0c:a1:7c:b2:1c:ba:31:
0d:d9:06:c9:61:f6:68:9e:48:16:a0:a3:45:88:ab:f6:e6:76:
b8:47:3a:51:53:2e:16:3c:6f:ba:bf:1b:4d:f4:60:c7:3e:e2:
73:3b:97:3d:46:49:85:05:46:44:a9:a5:ec:df:0d:2b:22:bc:
b4:66:03:0d:fe:37:93:40:a3:8d:b3:e1:06:26:49:07:1f:2b:
9c:81:92:35:20:7d:79:94:c7:fa:cf:50:0c:be:2f:fa:53:61:
87:6d:41:b2:91:f4:7c:69:4e:24:4b:91:81:6c:6b:14:d3:02:
d5:1d:6b:c9:9a:cb:03:3e:80:6d:5d:86:54:b4:86:62:ce:f6:
19:dd:6e:9a:35:46:40:1e:06:06:36:f0:b2:32:de:ac:21:2e:
55:fc:b4:ae:42:44:04:56:99:4d:1c:02:a0:ad:40:07:f3:fb:
de:9e:4a:d3:09:32:47:6c:93:5a:ad:ed:b0:86:04:6c:48:45:
57:6b:b9:48:83:c6:9b:0f:4c:77:d3:10:59:be:94:6d:62:93:
2c:da:33:be:4f:e7:48:d2:09:06:ea:f1:dc:98:c8:1b:a0:76:
95:4a:f1:37:4c:1e:17:5d:ec:45:3b:56:83:ec:d0:f8:81:0f:
50:bc:84:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:26 2025 by rpki-client