Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File: 1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier: 4Gdzf3Bq844nMc5rP3Zvl8v4uA//ZVCtoVTXWYQI8+Y=
Subject key identifier: B1:40:A7:2B:D8:37:76:F9:DE:4D:1E:30:3E:25:EA:89:4E:0E:D1:5F
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer: /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial: 019A4EF48608F8859B3756615AD8F6BC3735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number: 11BE
Signing time: Tue 04 Nov 2025 13:00:39 +0000
Manifest this update: Tue 04 Nov 2025 13:00:39 +0000
Manifest next update: Wed 05 Nov 2025 13:00:39 +0000
Files and hashes: 1: 1-L2N1IxNmqwC6SnQGrk2zfPC90E.roa (hash: lv5rh5EEaSGLGKAlKwyPA6/B7Y5vo8o7IkiCP0ociGg=)
2: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: BU+GZbX/VMhhXy22O8OBOqcqrpUQhWvuaUcEML3zH1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:86:08:f8:85:9b:37:56:61:5a:d8:f6:bc:37:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Validity
Not Before: Nov 4 13:00:39 2025 GMT
Not After : Nov 5 13:00:39 2025 GMT
Subject: CN=b140a72bd83776f9de4d1e303e25ea894e0ed15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3e:b5:ed:29:63:f0:9b:05:62:89:b3:26:c6:
dc:2b:24:ff:6c:d6:2a:cf:13:13:4a:e5:d0:7a:ca:
3b:b8:da:58:cb:bb:62:94:e0:9d:a6:5b:c6:18:9a:
35:1a:da:e4:d0:b4:40:6e:03:7b:51:01:a8:c6:0d:
4c:b8:5a:73:e0:77:c4:ed:8e:05:17:ed:b4:04:dd:
72:f4:99:e8:d4:18:22:66:4f:fa:52:87:61:e9:46:
8a:31:f1:f4:0a:e7:5a:8f:1f:29:8f:64:fe:1f:d2:
25:c1:99:fb:e4:51:4d:ec:52:41:3f:72:ae:ab:34:
df:09:e9:c2:48:a0:b7:51:36:7b:7b:41:09:e4:a7:
33:1c:bd:24:4c:9b:fb:ec:98:2b:e4:1b:f3:f7:96:
6c:df:0a:f2:a8:fb:e9:71:66:bd:ee:73:96:3b:a4:
b4:b3:a0:f8:cb:fe:a3:2e:51:29:62:b4:d4:48:48:
53:cf:60:2c:67:12:4d:5b:f4:52:5d:2d:79:20:bb:
8d:61:79:1c:33:ea:06:d1:83:a8:ea:b8:33:9e:02:
83:04:71:7e:1a:4c:53:71:92:69:92:06:83:5d:8e:
66:46:ff:c4:92:eb:f5:4d:04:10:16:76:a7:d9:17:
86:8f:84:ad:10:19:f6:84:c3:94:51:c2:7c:02:27:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:40:A7:2B:D8:37:76:F9:DE:4D:1E:30:3E:25:EA:89:4E:0E:D1:5F
X509v3 Authority Key Identifier:
keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:57:8d:de:63:bc:d4:71:bd:ca:fd:e2:f5:6d:88:07:9b:bf:
3f:55:79:27:30:f9:0c:b6:cc:d0:61:0b:4e:c3:ea:5c:50:45:
e8:0a:b6:d5:de:42:02:78:9c:88:98:c4:e7:79:cf:6d:1a:38:
c1:be:9f:90:26:55:c5:67:67:52:4e:e6:25:06:a3:8b:e0:e0:
49:27:36:c0:69:83:fc:4e:06:b0:87:af:1d:88:e6:7f:53:e1:
d5:d3:8f:53:b6:55:2b:8c:c7:65:91:8e:94:f9:e1:a5:9f:0b:
70:f1:df:57:8a:86:e4:c2:2a:8e:2e:60:a7:6d:37:04:6a:76:
aa:7b:1d:6b:75:fa:59:5a:14:1d:6b:0e:9b:1c:32:bc:3f:b6:
b6:2c:3f:ce:e9:47:67:56:7b:b2:b9:b3:56:0e:90:b8:f9:0a:
b3:d8:5f:62:da:20:d3:e7:d3:03:64:a0:31:49:8d:ab:34:4c:
db:2f:93:4d:5c:6b:7a:a5:d9:55:e2:56:aa:33:2a:9c:da:a8:
0a:8d:53:d9:4b:78:e2:e8:ea:ad:98:f3:2b:3e:ec:11:97:93:
91:6b:26:d3:71:61:6b:6a:f1:e3:e2:e7:8f:ed:1a:d0:2d:bb:
00:74:c0:1f:0b:ef:59:e0:68:9c:b1:a5:43:d0:d1:17:8d:d0:
73:3b:bd:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:24 2025 by rpki-client