Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier: xEDYzvvw63kpnyDJfQ+ZzW4IQgn/kNDCmbAKQU/IV1c=
Subject key identifier: 21:70:8C:21:4D:38:B9:54:FB:5F:45:4A:CA:F6:C0:02:1B:93:2C:CC
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer: /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial: 019A526307ECC944273E1C1738F1592C5BCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number: 170E
Signing time: Wed 05 Nov 2025 05:00:12 +0000
Manifest this update: Wed 05 Nov 2025 05:00:12 +0000
Manifest next update: Thu 06 Nov 2025 05:00:12 +0000
Files and hashes: 1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: ZSvcq3EWEVZEYhuO6R1OPGp2ojBMrepYxDAD4RtTq7k=)
2: H-kQEaFf2MPiwlkPCOgWrFwC_9I.roa (hash: WMlarJWRcXR27oWlU2I21RPYRd4PDPHteVf5HE7I34E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:07:ec:c9:44:27:3e:1c:17:38:f1:59:2c:5b:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Validity
Not Before: Nov 5 05:00:12 2025 GMT
Not After : Nov 6 05:00:12 2025 GMT
Subject: CN=21708c214d38b954fb5f454acaf6c0021b932ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:5f:d6:fc:d4:46:9d:8a:01:ce:0c:5f:82:
a2:56:d7:5f:4a:01:ab:42:af:c1:55:6b:3c:22:06:
34:ea:d6:e1:61:48:46:15:bf:52:97:ce:5d:13:9a:
88:fb:d7:49:c2:34:94:b0:08:28:40:7f:da:a3:0a:
5f:4f:a2:88:23:da:92:85:f0:58:bc:1f:cd:67:8e:
c7:a0:2e:2c:f4:9a:5d:c3:2a:80:eb:01:1a:40:c2:
2e:45:48:f6:0f:a8:2d:af:dd:fb:2b:ce:c8:3f:f0:
86:f7:ae:9c:a6:e0:cd:e4:c4:2a:7c:27:e6:bc:d2:
9d:14:41:e9:43:64:52:4a:a3:77:b9:8c:a5:43:0d:
5f:22:58:77:db:05:55:75:ca:05:b1:a2:b5:ff:f7:
88:45:c1:10:d8:6c:18:4a:47:fe:5d:75:6c:1a:34:
83:d2:37:5f:3f:c4:a4:5e:f0:16:ed:a4:88:3f:03:
ea:6c:34:10:f0:85:62:01:ac:60:0c:28:97:1a:ed:
eb:41:c0:01:8a:35:fc:21:53:33:5a:3b:e4:ba:69:
fd:20:92:39:52:a7:f2:66:cb:82:20:64:19:87:97:
fa:42:e9:16:b5:bb:5b:17:b0:34:c3:a4:8b:c5:51:
30:6c:dc:6f:19:7a:64:51:1b:50:1d:c8:bf:01:1f:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:8C:21:4D:38:B9:54:FB:5F:45:4A:CA:F6:C0:02:1B:93:2C:CC
X509v3 Authority Key Identifier:
keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:d1:35:31:44:57:a1:f0:ce:3a:85:04:24:8d:30:2e:65:5b:
67:c8:a3:37:6a:3d:7a:d0:77:3d:39:7e:8e:55:87:13:e6:8b:
2d:28:c4:cc:0e:8f:85:81:fc:8e:21:0d:8c:65:06:07:69:9f:
81:73:21:8d:7f:57:49:49:55:04:d7:70:52:89:56:df:1c:81:
9f:e2:44:f7:67:41:29:5d:08:ed:6b:b9:15:78:dc:90:df:bf:
13:d3:7a:3c:38:dc:01:79:7a:0e:25:03:0a:77:8d:49:9f:d3:
7b:13:b8:85:65:fd:4d:ee:55:57:b0:de:e6:5f:d1:6e:65:84:
75:29:af:45:91:ea:7e:29:aa:8b:8a:f1:21:33:9c:09:ff:a1:
6e:4a:e8:6c:3c:0f:79:f7:d9:16:84:1b:fc:ed:ae:d1:f3:ea:
4f:56:05:1c:31:cb:e2:84:77:1b:9d:a6:7a:fa:6a:7c:ec:e6:
14:a0:ae:76:58:27:be:bd:56:3f:bd:7b:1a:25:5e:2b:13:ea:
9b:93:c8:8f:fa:b0:62:61:d6:b7:19:31:9d:50:52:02:b1:bb:
13:f8:ef:bf:3a:85:a4:da:98:f0:b9:68:30:1b:0e:1f:66:c3:
31:80:f1:42:03:21:83:54:76:56:75:37:0b:4f:29:ca:b2:a5:
1d:39:64:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:09:28 2025 by rpki-client