Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
File: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft (raw, json)
Hash identifier: 72jOJcBhKeKcBVzFZFSK4CIQwKeWFu4ikxwCubfKi2o=
Subject key identifier: 4F:A1:4A:B6:A2:91:AB:A7:6D:5E:46:6D:03:6A:A0:C4:FA:F8:30:01
Authority key identifier: F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
Certificate issuer: /CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Certificate serial: 019A4DE15EC1F8B7815A257958E83C29D09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
Manifest number: 0C2D
Signing time: Tue 04 Nov 2025 08:00:06 +0000
Manifest this update: Tue 04 Nov 2025 08:00:06 +0000
Manifest next update: Wed 05 Nov 2025 08:00:06 +0000
Files and hashes: 1: 1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl (hash: P6kVvcW29XqY7UK6t02tMxA72obv58HEMjgqj/txMS4=)
2: EMHZK5FmGs3e4ft5zOEqyrPAX3k.roa (hash: SAEFhbIVJ1yY+JX9erZchhAcSGngszOxyT0JSaQzoqQ=)
3: TBVCeR3JZxitx2qIRvwUVmMfz3k.roa (hash: a3GoE65n8nFjDCqtKBSr3lSZewdyS6h51Ixfs3mMRKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5e:c1:f8:b7:81:5a:25:79:58:e8:3c:29:d0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ae9881bf112098a2bfd49a0bcffdccce7bc208
Validity
Not Before: Nov 4 08:00:06 2025 GMT
Not After : Nov 5 08:00:06 2025 GMT
Subject: CN=4fa14ab6a291aba76d5e466d036aa0c4faf83001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:3a:72:e9:38:6b:5e:db:b3:9f:7c:d7:33:49:
3c:5f:52:7a:31:bc:66:40:00:7e:8b:87:20:95:f1:
83:ed:27:6f:e7:6e:18:b2:30:da:a5:0e:a3:30:81:
6b:eb:39:6c:c8:22:28:e2:07:8d:d4:63:1d:18:6d:
3b:06:40:b2:ec:e1:d7:af:36:68:77:63:6a:6d:ef:
a9:06:38:d0:a8:0c:bc:95:2e:a6:6f:03:8f:ea:9f:
ef:d8:74:34:6b:1d:a8:2c:bb:b1:eb:11:45:ab:03:
c7:23:2a:ec:c7:c6:d3:12:fb:46:60:2d:5b:bd:22:
7b:d4:e1:05:e3:f5:74:44:ee:a7:c3:f2:dc:7a:76:
6a:0e:a0:b6:6d:8e:6b:e5:f1:47:91:8a:95:f9:98:
6d:a3:3d:c2:dc:db:ae:9e:81:e8:f2:1d:f1:41:b0:
24:32:dd:bf:76:41:04:01:ff:93:6f:3c:84:37:b4:
46:a1:79:36:19:8a:1d:5b:9f:78:4f:22:ea:d1:7b:
a8:88:9a:08:bc:5b:02:68:ff:fd:c3:2c:fc:a0:5b:
f9:5f:4b:b0:91:e3:21:28:c6:2d:ad:1d:00:47:b3:
76:06:f8:20:07:42:c1:ef:2c:39:87:f8:41:bc:f0:
dd:76:92:70:00:41:f7:0c:2b:b3:77:8a:e7:d2:7b:
6d:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:4A:B6:A2:91:AB:A7:6D:5E:46:6D:03:6A:A0:C4:FA:F8:30:01
X509v3 Authority Key Identifier:
keyid:F8:AE:98:81:BF:11:20:98:A2:BF:D4:9A:0B:CF:FD:CC:CE:7B:C2:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5d9f57-0f10-4e14-b4af-25a15a524f87/1/1-K6Ygb8RIJiiv9SaC8_9zM57wgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:ec:ab:c2:80:99:8e:56:a3:76:b4:32:55:c8:22:b1:b8:b6:
67:78:89:d3:1f:d1:3c:54:bb:82:49:84:b9:17:b2:02:01:9f:
02:85:db:b8:20:9e:25:90:1a:15:7a:fa:5e:57:4a:84:fc:38:
e7:a0:fb:94:26:b5:82:02:31:10:00:af:af:2f:e3:5e:c1:36:
76:39:53:e4:83:49:21:d9:06:f5:f7:08:c8:21:36:38:07:96:
5a:99:22:ee:c5:4e:d8:f1:a1:14:8f:7f:5d:5e:a5:ea:eb:de:
91:45:f7:62:2a:d1:ff:1c:47:02:b7:c2:c6:02:da:02:da:0d:
cf:10:c4:ee:b2:45:9c:21:88:f5:8b:85:be:7f:e7:43:90:02:
aa:47:57:7f:cb:54:02:bc:32:95:2e:0d:0f:47:a4:05:4e:fa:
7f:2b:01:d0:9d:d5:86:3e:30:9c:dc:65:db:b4:18:79:7e:74:
24:53:12:4d:7c:41:fd:20:04:56:77:4b:70:28:3c:cc:7f:ec:
0f:2a:61:b8:84:da:48:3d:7a:63:ac:ba:49:04:19:91:c9:4e:
e6:08:7a:b6:b5:ba:72:ef:d3:2f:9b:db:9a:ff:e8:ec:6d:e3:
84:14:b8:0d:5d:57:d8:97:d1:25:ec:9e:50:fb:7a:2b:02:11:
80:67:67:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:39 2025 by rpki-client