Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
File: 1-cJWdFvSc8kYauKWNoohF9PSytk.mft (raw, json)
Hash identifier: dp+SkZXDS0qBa6mmymry1orgj3nr4KlhqP8CezBXEws=
Subject key identifier: AB:71:28:E1:A6:3F:9F:5B:00:E5:A0:94:A0:1F:5D:E0:6E:83:20:FA
Authority key identifier: F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
Certificate issuer: /CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Certificate serial: 019A4C97D81F3D4C92B0B7A6687E5B7A2652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
Manifest number: 0CDF
Signing time: Tue 04 Nov 2025 02:00:10 +0000
Manifest this update: Tue 04 Nov 2025 02:00:10 +0000
Manifest next update: Wed 05 Nov 2025 02:00:10 +0000
Files and hashes: 1: 1-cJWdFvSc8kYauKWNoohF9PSytk.crl (hash: d0TDjxi161p0siFDzfNMGyXEKZ/UNxV8xkyceKeLDw4=)
2: N0McjdXZl5TUnCSac35uIbLCfTQ.roa (hash: 3oYd1qltvihRo6bFoxlQSV7suemsf1IDfXlwXxFseIU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:97:d8:1f:3d:4c:92:b0:b7:a6:68:7e:5b:7a:26:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c256745bd273c9186ae296368a2117d3d2cad9
Validity
Not Before: Nov 4 02:00:10 2025 GMT
Not After : Nov 5 02:00:10 2025 GMT
Subject: CN=ab7128e1a63f9f5b00e5a094a01f5de06e8320fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:59:fa:59:e1:9a:00:31:9d:ae:b3:e0:05:41:
1b:2f:45:e8:e2:75:b2:10:f3:83:71:88:83:13:03:
a4:e8:d9:38:bf:95:4c:73:d9:db:4a:93:34:df:77:
95:06:ac:d6:6f:49:ed:0d:3a:fc:a6:31:3a:fd:a2:
ac:56:cd:40:8e:75:69:41:c4:8a:b2:96:48:ab:fa:
16:6e:49:7a:14:fc:13:27:fd:92:db:1d:5e:e5:a5:
6a:22:ff:52:0e:5e:7a:a3:b5:4e:20:e7:64:0d:41:
54:28:7b:32:7a:2c:6a:04:41:b8:dc:9b:0f:0a:ef:
57:36:40:97:d8:93:18:38:28:30:63:3c:0e:42:53:
62:fe:7a:23:64:31:b4:6d:71:49:20:15:7c:83:fd:
d7:7c:6a:b6:b1:f7:d1:e7:0a:5d:07:e6:69:d1:cb:
42:ee:69:11:6d:ed:5f:71:a4:77:9a:13:b2:7a:b8:
19:bb:59:05:6d:83:28:bc:af:f8:64:1f:be:32:7c:
0c:20:37:dc:b1:f7:94:b5:d4:70:75:55:b5:ec:ac:
12:68:4b:f0:b5:66:6e:2b:94:15:ab:5e:f1:9e:de:
56:54:20:19:8e:76:a2:a7:a5:e5:93:e7:71:b9:7d:
f7:21:ce:77:92:9a:40:e0:90:6c:28:09:99:66:a1:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:71:28:E1:A6:3F:9F:5B:00:E5:A0:94:A0:1F:5D:E0:6E:83:20:FA
X509v3 Authority Key Identifier:
keyid:F9:C2:56:74:5B:D2:73:C9:18:6A:E2:96:36:8A:21:17:D3:D2:CA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cJWdFvSc8kYauKWNoohF9PSytk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/44cbb0-1aee-4490-ac52-c941e6a9139f/1/1-cJWdFvSc8kYauKWNoohF9PSytk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:b2:e4:ba:91:7d:e1:e6:96:38:d8:d2:b6:5c:f8:ab:7e:03:
82:7c:bb:28:04:81:2b:a4:08:73:c9:ed:3d:72:78:41:79:8c:
8d:cf:4b:c3:28:95:03:ea:c4:4a:c2:fb:a8:4a:80:17:ef:7d:
75:27:43:be:f7:f7:03:d9:c5:e4:41:6b:f6:f7:7d:a1:a2:eb:
c6:5d:a5:10:6d:31:aa:75:2a:6d:8b:e6:58:14:dd:e5:62:d9:
99:7c:53:e6:13:bb:65:ba:46:49:c0:db:43:25:26:5f:c9:ce:
6b:16:ff:76:0f:2e:b8:41:ca:c2:96:4a:79:48:51:80:30:f1:
5e:69:a8:72:e6:36:e7:c7:9d:a2:4f:4f:f0:53:9e:cf:64:57:
ef:9e:4f:2a:1e:34:0b:fb:a6:f9:86:4a:5f:2a:4e:3d:85:03:
6b:cb:63:92:d2:a2:40:22:64:de:9b:d9:c9:47:c5:cb:91:91:
17:6c:e1:a7:5e:b5:d3:3a:38:05:ae:5a:59:36:1e:a3:5c:c1:
57:d7:47:bc:f4:ee:05:81:99:ef:3b:e1:29:d4:da:fa:67:1e:
49:3f:05:36:2e:e2:4f:7e:a2:6c:da:c8:0f:54:d8:2e:55:2c:
2d:bc:17:34:ba:77:3e:ec:8c:bb:2c:1f:91:c7:6d:99:89:a3:
0f:58:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:16 2025 by rpki-client