Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: W0EawnXCdaiSFO7aHOHiFPDkjI3GAdMsVekSYz0wrTw=
Subject key identifier: CB:CF:60:7D:FD:B7:5E:A4:48:08:F6:64:37:F0:8E:09:3C:12:71:58
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019A4E4F4AE50180D8583C1F46B984DFFE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 168B
Signing time: Tue 04 Nov 2025 10:00:10 +0000
Manifest this update: Tue 04 Nov 2025 10:00:10 +0000
Manifest next update: Wed 05 Nov 2025 10:00:10 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: 28gnBwLUDo/Nn8zpCyVAiqDBb2/lo5SpobMwL0TTJeQ=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4a:e5:01:80:d8:58:3c:1f:46:b9:84:df:fe:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Nov 4 10:00:10 2025 GMT
Not After : Nov 5 10:00:10 2025 GMT
Subject: CN=cbcf607dfdb75ea44808f66437f08e093c127158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:be:9d:d9:09:33:eb:1e:07:50:b0:12:ce:
31:28:19:71:91:7a:ea:94:d8:f7:ee:bf:3e:d6:1a:
20:97:0a:85:78:3c:63:f2:9b:1f:f7:82:48:c1:45:
25:12:f1:9c:58:c9:3e:bf:de:94:69:98:10:71:63:
48:45:ac:32:6d:98:31:c2:27:1f:99:b0:08:58:0e:
6f:72:49:32:bc:7a:3f:2e:bb:65:06:f6:88:36:18:
b3:c2:66:31:4d:74:b6:af:0a:da:c7:0f:4e:a4:15:
62:0c:23:11:13:e2:1b:6e:0d:5e:a0:ad:27:75:e8:
22:af:e6:3d:df:1c:f6:ab:fb:40:18:8a:31:f6:4d:
72:0f:5b:60:f5:2d:e1:82:be:2a:5e:62:86:5c:c9:
61:14:40:7b:28:0e:7c:69:dd:ea:89:52:70:23:c0:
81:77:b6:9e:86:9e:6b:e5:7e:ad:eb:27:cd:63:d8:
82:67:90:d9:fa:f1:86:67:73:e3:6a:73:f7:35:2e:
b3:8a:65:d2:bd:0d:c8:b5:37:c4:53:41:84:65:62:
dd:82:bc:3d:61:e8:a6:30:d0:4f:91:0c:ea:07:04:
4c:bb:04:10:6d:5c:c5:65:01:64:5b:68:5f:e5:55:
ee:60:29:59:37:4a:71:da:8b:31:26:ed:3f:f6:dd:
3f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:CF:60:7D:FD:B7:5E:A4:48:08:F6:64:37:F0:8E:09:3C:12:71:58
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:dd:34:75:df:3b:6d:49:e0:5a:cc:c8:47:51:53:fa:b5:ae:
40:9b:1d:55:db:2b:be:80:e1:a8:26:05:dd:b7:c8:26:97:61:
2b:16:55:8b:bd:d3:52:07:fa:d0:06:d1:5a:0c:c2:83:45:e0:
3c:09:48:ae:94:6e:1b:3f:5c:0d:c5:5a:78:d7:3b:8e:4d:2d:
00:02:9c:5d:7a:65:cc:a1:34:f4:72:b4:69:e3:10:af:3e:10:
12:74:a3:81:8e:c2:ea:d6:54:7c:37:d9:ab:c3:e0:b2:c4:2c:
b5:2a:32:37:9f:ad:c5:64:c0:94:6f:b4:b0:18:4d:f2:c3:9d:
e3:30:a3:63:bf:01:11:0b:fb:46:a3:d9:57:93:11:88:39:79:
95:d5:6f:53:f8:be:61:ad:a5:c1:91:bc:27:40:24:8a:15:4a:
10:99:0c:dd:f7:04:d0:fb:75:06:17:d0:db:a0:b1:76:15:1d:
3d:80:87:ea:da:e0:d7:cd:e5:9d:f6:b3:71:5a:a8:1d:fe:a4:
95:88:27:91:87:e5:29:88:f9:4f:99:c0:04:49:9f:72:44:04:
d8:25:cf:61:8b:36:43:ce:54:3f:b1:9a:f4:4e:f5:20:af:c5:
db:fd:ac:58:bc:3d:d9:c7:f1:bb:dc:dc:c2:90:d4:14:45:6f:
98:90:95:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:19 2025 by rpki-client