Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
File: 1ITgzuV1xhkFP47isQBMxEL9LO0.mft (raw, json)
Hash identifier: 04C8HFI5yJ79jNHXzLEmkBzB4LEr3crTbXo15lmrQRs=
Subject key identifier: 94:37:D7:8D:0F:CF:4C:13:86:47:08:93:4C:FC:91:6D:06:51:0A:E3
Authority key identifier: D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
Certificate issuer: /CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Certificate serial: 019A50E3D8F7D757F16B8F4A26B114355268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
Manifest number: 1537
Signing time: Tue 04 Nov 2025 22:01:40 +0000
Manifest this update: Tue 04 Nov 2025 22:01:40 +0000
Manifest next update: Wed 05 Nov 2025 22:01:40 +0000
Files and hashes: 1: 1ITgzuV1xhkFP47isQBMxEL9LO0.crl (hash: 2BfrOrqG82n3FUx00gixa4k/Om0QTUVsb4s6DOSMt4I=)
2: LlAa--5nsX3tUHGAFZ_HSMFrn7I.roa (hash: 3b1C9Ph3SGavY+PSGpBTlLw28V2WqXhlaeYP73oghL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:d8:f7:d7:57:f1:6b:8f:4a:26:b1:14:35:52:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d484e0cee575c619053f8ee2b1004cc442fd2ced
Validity
Not Before: Nov 4 22:01:40 2025 GMT
Not After : Nov 5 22:01:40 2025 GMT
Subject: CN=9437d78d0fcf4c13864708934cfc916d06510ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:a4:f3:c1:94:ea:e3:a3:49:86:4d:fb:64:
be:9a:f1:c3:d8:14:27:c5:a6:eb:35:4f:1a:6a:ac:
ae:34:5c:0a:a0:6b:3b:c8:16:8d:86:d1:51:39:33:
73:79:93:42:6f:06:b1:e5:7c:c6:4e:b5:b2:c5:4e:
44:a9:cc:06:53:14:92:33:05:bc:5e:b7:35:cd:ba:
e2:6e:53:e4:d1:43:17:7e:2e:c8:dd:76:63:69:0e:
30:5f:1e:06:dd:19:8d:f2:bd:a0:8a:5a:b6:b9:73:
43:3e:22:1d:13:e5:7b:7e:fe:1e:61:d3:3c:d0:17:
f4:cd:d8:9d:0d:c2:06:fd:b3:93:8f:8d:c7:96:9f:
4e:3e:d0:61:5d:8f:00:de:ba:a0:54:f0:f8:4b:b2:
0c:b0:9b:e6:65:fd:ee:88:b8:66:da:f8:e9:b1:48:
55:ae:23:6e:bb:89:9f:04:33:9a:70:55:6c:77:1f:
c3:80:cd:db:6e:39:d8:8d:18:69:c0:60:4d:ec:a1:
81:02:64:50:94:33:09:2d:f9:5b:25:0a:4d:e4:d4:
f7:2d:5c:c0:8d:cc:e9:b1:8c:e3:84:c6:5c:de:59:
d1:d9:90:2f:40:76:ab:24:11:98:5d:4b:4b:b6:89:
6f:5a:a8:8e:d5:53:21:8b:55:4c:cd:71:56:78:5e:
0a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:37:D7:8D:0F:CF:4C:13:86:47:08:93:4C:FC:91:6D:06:51:0A:E3
X509v3 Authority Key Identifier:
keyid:D4:84:E0:CE:E5:75:C6:19:05:3F:8E:E2:B1:00:4C:C4:42:FD:2C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ITgzuV1xhkFP47isQBMxEL9LO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7847fb-f55a-4995-8531-ec0262ab33f1/1/1ITgzuV1xhkFP47isQBMxEL9LO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:27:c4:1d:69:15:b3:ec:ec:f2:33:b4:1d:d6:04:5a:a5:de:
dc:cb:a5:49:56:0d:6c:d2:2b:7c:59:12:8d:b2:6c:d6:73:7a:
7e:5e:62:01:cd:bd:c3:0d:a2:61:74:37:ea:15:2a:d0:79:93:
d1:fd:36:52:0c:04:de:e3:86:f6:e0:a3:33:8d:fa:be:85:5e:
6b:e9:ca:43:a3:b7:a9:c5:16:3c:96:91:a8:91:82:5d:c7:93:
66:05:e2:ac:f0:85:4f:0e:15:91:89:61:c8:ac:a1:8c:b8:47:
e5:35:7d:05:1e:e3:16:0c:3a:55:a4:85:9a:55:24:83:dd:f1:
70:6d:a9:0c:5b:5b:6f:bd:10:2a:e1:35:b5:b3:f4:04:b8:26:
a3:31:1f:53:b8:a7:91:c5:55:c4:25:5d:4e:10:42:d1:57:e4:
1b:66:e6:14:12:8c:19:5f:d6:10:c6:c0:02:48:05:ae:61:ce:
65:c2:ff:8d:4b:2b:7c:41:2c:0c:9c:88:68:82:a9:be:d9:0b:
9f:67:d7:00:c6:43:a9:39:fc:1e:43:ef:70:75:80:5a:b6:5c:
5f:5f:06:26:fe:e1:cd:97:dc:7f:25:73:44:91:22:81:45:25:
44:9a:cf:7e:c1:9b:1e:d3:19:57:e7:ad:e6:16:29:c4:4e:96:
5e:f1:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:42:50 2025 by rpki-client