Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: DWh85R+jfy/lDs7snhLVduhwD0x5NhfFTW2mMLM7/iU=
Subject key identifier: C9:C2:2F:D4:E7:66:AD:66:12:C3:82:3D:BF:85:F9:71:C2:06:D7:AF
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 019A52636DCF352B35F78D0D23CC02192192
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 0177
Signing time: Wed 05 Nov 2025 05:00:39 +0000
Manifest this update: Wed 05 Nov 2025 05:00:39 +0000
Manifest next update: Thu 06 Nov 2025 05:00:39 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: 36zIwGtnGbQUKRX3WTXWHSVy2CNZFswcEt6KkVo4OX8=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:6d:cf:35:2b:35:f7:8d:0d:23:cc:02:19:21:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Nov 5 05:00:39 2025 GMT
Not After : Nov 6 05:00:39 2025 GMT
Subject: CN=c9c22fd4e766ad6612c3823dbf85f971c206d7af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:44:a1:51:64:6c:0c:0f:f9:e7:b5:3b:9d:
f4:12:41:b0:75:7c:6d:10:2e:ed:d2:d3:c5:54:71:
10:ba:35:af:2c:c2:2c:68:77:d8:cc:7b:74:72:df:
e3:a4:3c:0f:3c:0d:6f:9d:a7:be:32:8b:cd:e7:a7:
9b:c4:79:62:85:0a:ff:fb:f0:27:5b:41:6b:4a:9d:
5e:bb:4a:ee:47:0c:87:2c:9b:28:86:65:4d:34:a5:
47:9a:fc:5f:8f:20:84:ee:47:fd:a3:ea:6c:e3:d7:
f6:93:9c:0a:b8:2f:72:20:a8:84:45:9d:31:cb:8d:
f7:fb:ba:5f:51:48:26:a1:18:51:ec:8d:18:e3:fb:
8a:a5:ff:a5:8d:d2:55:e8:8f:50:43:0e:a7:9b:2b:
b8:ca:a1:89:22:73:bb:5b:cf:20:09:43:37:78:77:
d4:e7:29:1e:c7:35:bd:7f:86:9c:ea:6a:d9:f7:48:
38:ef:1a:e9:9e:4c:fa:5a:3d:a4:5e:04:b4:6e:27:
c6:b6:a9:ce:ea:91:e9:45:77:25:f6:f5:23:2a:d9:
5b:8d:81:99:24:57:6f:07:ca:fa:c8:0b:69:47:8b:
17:ad:b9:88:bb:09:fc:b0:bc:2d:b0:73:3f:65:d9:
73:81:e2:9e:b8:11:f2:e5:f8:7c:4d:d6:7e:c0:98:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C2:2F:D4:E7:66:AD:66:12:C3:82:3D:BF:85:F9:71:C2:06:D7:AF
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a7:e4:91:f1:49:a8:55:5e:d5:fc:c2:4a:d9:96:09:bf:94:
36:4f:5b:aa:26:1b:b7:3c:f2:d4:07:9d:ca:99:7e:e3:11:b9:
db:9c:65:2d:cb:35:e9:c8:86:ef:46:2f:75:bd:70:21:48:c8:
9d:87:66:b1:9e:b2:8a:aa:b8:3b:a5:44:f8:d7:53:cb:5e:56:
26:45:6f:36:67:9b:e8:a1:43:24:7a:09:c8:4a:16:43:67:84:
d2:f1:d4:6c:ff:c7:2a:b7:10:57:70:e7:8c:65:7f:b8:29:b7:
ed:40:41:8e:ad:90:e6:54:0a:37:16:9b:fb:44:1c:51:ab:c3:
88:73:e0:71:82:26:33:65:e1:6e:7e:dd:67:71:74:1f:ce:7b:
a8:cd:1f:dd:9d:5c:f7:41:b9:fc:f3:0e:a0:2e:89:57:d8:6e:
e7:af:3b:cb:29:aa:e3:6f:fb:fd:5e:77:44:19:8f:66:c5:7f:
0b:a2:eb:75:cc:83:c5:71:f4:30:22:74:b0:f6:18:61:60:7d:
46:9d:a7:6b:50:6a:08:29:b6:ad:d3:a4:ed:e3:68:b0:d6:bd:
a1:15:e2:72:fd:12:f0:17:98:95:3b:f5:77:d2:12:0a:be:ff:
6c:7b:78:90:4a:55:8e:9a:f2:31:bd:6c:1f:3c:99:92:c8:ba:
b9:bf:5d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:47:53 2025 by rpki-client