Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: KVw3tFmLvsYKbHr0YsEQ+ms/Jvn/m/rFCjHeA5Ov9cc=
Subject key identifier: 1E:74:F4:09:A8:4C:0A:A9:2A:3D:A2:9E:C9:FE:A6:6F:3A:E9:99:7E
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 019A51BEE22FE6B2808176B8479CB5A38634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 02:00:55 +0000
Manifest this update: Wed 05 Nov 2025 02:00:55 +0000
Manifest next update: Thu 06 Nov 2025 02:00:55 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: pwJ2u8C4OgiOxzfg9yfyYXaKDQaHiTsk8kKq+YHaKC4=)
2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:e2:2f:e6:b2:80:81:76:b8:47:9c:b5:a3:86:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Nov 5 02:00:55 2025 GMT
Not After : Nov 6 02:00:55 2025 GMT
Subject: CN=1e74f409a84c0aa92a3da29ec9fea66f3ae9997e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ca:f8:68:2e:d5:74:a0:09:65:d9:ae:05:35:
27:2d:7a:8e:1f:d2:8b:a0:a9:0e:14:1c:59:19:76:
26:01:7e:6e:5d:b9:75:99:03:0f:2c:d3:a8:e8:da:
2b:0d:ef:79:36:ed:ff:3f:48:39:a2:32:84:32:f1:
09:6d:c2:70:17:5d:f7:4a:76:64:bb:38:c9:82:17:
f8:77:7c:07:e7:71:ad:69:fa:07:5b:31:f6:9d:9c:
f2:a5:d1:b9:63:c7:ae:4d:cd:68:74:80:e1:24:82:
a5:22:11:4e:0b:c9:56:09:0c:49:50:f1:fc:22:9b:
0e:76:65:f3:19:2e:91:6f:f0:b0:d4:3f:dc:9f:39:
b9:e6:72:8c:8a:aa:e6:4d:d0:67:f9:8f:9e:c9:83:
d5:21:83:ff:96:98:6f:f6:c4:3a:68:33:1a:7b:bd:
85:49:14:07:88:61:9b:fc:9d:e4:46:d2:58:fd:13:
0a:ee:5d:fb:d9:c0:a9:82:4f:9f:bd:71:a6:9e:5e:
df:25:0c:86:38:41:a6:1c:c0:5f:ff:60:85:66:e4:
3c:bf:77:7f:87:3e:07:09:2a:b5:54:bd:46:db:4d:
a9:eb:95:c8:6b:66:1f:09:7b:64:6e:dd:c0:d2:a0:
87:a1:14:7a:28:7c:bb:af:f1:6c:b3:65:aa:6c:26:
03:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:74:F4:09:A8:4C:0A:A9:2A:3D:A2:9E:C9:FE:A6:6F:3A:E9:99:7E
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8c:44:69:f9:86:18:d1:7b:13:e3:53:10:47:d8:aa:9b:98:
c3:3f:0b:1c:db:50:a2:d9:1e:9f:3b:d7:7b:e7:5d:23:48:55:
bf:18:4d:6d:44:2d:de:90:27:95:19:d1:24:6a:78:4e:cd:37:
ec:75:4c:e7:e5:44:ed:a9:fb:37:a1:02:46:e7:b7:b6:41:07:
49:c7:e3:c4:1c:5e:91:8f:e4:48:b2:c5:49:61:db:0e:14:56:
72:89:a2:2e:ec:d2:6f:ec:8b:16:b4:78:12:32:cd:be:b4:e4:
1a:8b:49:b5:37:44:05:f2:f6:37:26:74:4a:bc:7c:36:68:0b:
b5:4a:bb:0e:fc:f8:90:f2:8a:45:f2:7c:a8:6b:48:18:56:96:
dd:da:ec:b0:d9:9a:dd:12:1e:26:46:3e:b9:ff:31:a1:24:0e:
8c:fc:66:8e:cc:c1:b1:c2:8e:38:2d:e1:2a:af:11:88:ae:31:
7a:17:a6:d7:d4:4d:40:e4:98:bc:cf:99:ae:49:18:af:1d:04:
9d:7e:92:e2:85:b1:8d:de:71:5d:47:50:7e:2a:77:ef:5c:36:
5c:e3:c0:a1:57:d0:44:86:08:c7:14:94:79:db:10:ec:83:3a:
cc:fc:3e:b1:a2:c5:b0:56:8a:5b:7d:1f:f3:76:a7:07:b4:a4:
92:a3:7a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:08:19 2025 by rpki-client