Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
File: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft (raw, json)
Hash identifier: PoL/SOnomLGcvqK5s7Fjhr/MhQICJQGqvyJyTRKAjw4=
Subject key identifier: 66:2A:AD:F8:61:7D:2D:9E:78:C2:61:E5:94:AE:AB:5E:25:E6:CE:55
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 019A4F98E9BBC3F14BAC62DCDB7AE72A33A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
Manifest number: 1332
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: 0W2rqZ9UNiezcelfUfPSzTPY_D0.roa (hash: mH88xYomD8YngZnNbWHkOV/xeeXv/tLdrmpRYMGuP7E=)
2: 1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl (hash: IArs1KtT8LqZ7rRN8FHqzqYiUs+Lfc3KWHJzGgVeeS8=)
3: 9eH4i0p6oCfS5Co6koOAWFXm7Jw.roa (hash: tsyzy52lOJrhyfRNf4yeW+R41ItQLxSE8ed3yFpy/I0=)
4: QfAYzGD_1GwyHB0copGWfxkgHfs.roa (hash: cG1fHnG7UX+yYX1P9wPnTe50lfsVKVVOrvuJOZCFFRU=)
5: W2y8xZcCJlySPm6oLogB7i6EEQE.roa (hash: 6ORpgVWyWqdOHv+fY4eLu5qKuQH3bFRBOSq17Spb1RE=)
6: eS-Yps_K0BfpUzrN4bMosqiVEAA.roa (hash: knd4qm/EVOSf2FqADVl0W40hB9YRaDz2Ugn/a5rKfkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e9:bb:c3:f1:4b:ac:62:dc:db:7a:e7:2a:33:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=662aadf8617d2d9e78c261e594aeab5e25e6ce55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:12:99:89:7a:14:5a:a1:e3:94:6f:f1:ba:16:
af:5d:c3:e7:b7:49:29:50:e1:60:8a:dd:f5:37:d3:
f6:9c:89:69:0b:40:4c:1e:da:20:a8:33:e2:83:98:
34:29:f2:b8:71:01:c1:1f:95:08:1f:f1:e0:de:a6:
48:1d:c8:f8:00:98:82:86:2d:09:54:aa:0d:8e:09:
5a:d0:03:f1:56:06:43:c0:b9:03:15:bd:fc:2b:9d:
e2:f6:25:98:2f:72:f8:8b:7d:4c:03:8d:19:57:31:
72:85:95:e5:08:59:f5:88:26:6e:33:55:98:87:1f:
bd:3e:54:96:49:af:81:3d:81:50:b2:73:27:c1:f5:
02:d9:60:c6:b0:ec:7e:59:9d:ce:d0:48:3f:c4:01:
98:87:cd:d8:d0:09:60:dd:0d:c0:3d:83:03:13:c3:
96:fb:68:e3:a5:04:aa:3f:fa:f1:4a:99:e3:82:77:
91:ce:98:40:1f:cc:d0:71:86:07:91:a7:0c:6e:5f:
f9:71:a7:4a:a9:76:1e:a8:77:bc:8a:18:c2:44:7c:
cc:bc:ad:de:48:24:83:6d:68:ea:ec:27:17:7a:9a:
88:85:62:6c:e6:22:8c:b5:1c:7d:6a:4f:e1:ba:76:
4d:66:7e:b1:4e:e9:98:85:f1:10:bb:73:8e:54:89:
85:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2A:AD:F8:61:7D:2D:9E:78:C2:61:E5:94:AE:AB:5E:25:E6:CE:55
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:da:8b:35:17:05:e1:bd:63:c4:13:c7:da:cf:1c:6b:63:91:
a0:b9:0c:3b:1e:0c:59:a9:fa:bc:44:22:c5:a8:e3:1c:4c:7f:
e2:87:60:ff:50:4f:fe:a1:5f:fc:64:e9:fc:55:b2:c5:02:f8:
aa:cf:be:92:c8:a5:ca:11:10:ff:45:47:36:c5:ed:4e:0c:91:
ae:7a:d9:45:08:0f:75:86:86:90:69:d2:43:f6:a8:f4:cd:28:
63:6f:36:1c:43:49:df:5f:d3:49:2d:8f:ed:78:31:8e:6c:1a:
96:07:a2:08:54:d6:a1:d7:bc:2d:22:56:93:d0:fa:70:19:b2:
0a:8d:96:61:aa:2d:95:57:cf:76:74:12:ad:9d:b8:1d:e7:d5:
d6:48:78:69:04:ed:cd:88:d9:58:70:a0:f1:34:76:b9:1d:4c:
78:e6:18:0a:0d:fe:87:3e:df:6f:87:29:38:53:ae:1d:e6:4b:
c0:22:50:52:64:33:74:4a:96:15:ec:82:11:23:63:be:23:a2:
99:0f:50:8b:f3:db:53:b9:78:50:80:d3:aa:f0:73:05:42:e1:
0f:a9:97:f8:b6:db:94:ba:cf:ea:2a:5a:c4:85:a6:3f:cd:de:
99:97:69:86:8e:0d:3e:1b:69:4c:68:de:e9:71:86:6d:c8:ce:
15:63:cf:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 19:08:00 2025 by rpki-client