Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
File: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft (raw, json)
Hash identifier: A1tX29BRPp4tIhl6iyyDsckl25sM6mbjzankqLHZg7Q=
Subject key identifier: 0A:BD:C1:3E:D1:68:9E:1B:F1:5E:BA:7F:56:CF:CA:2B:3C:79:AA:0A
Authority key identifier: F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
Certificate issuer: /CN=f83ebe2a906dd587012599209c31ce10f29d5785
Certificate serial: 019A52D28195176DCE41B8AA3C62D98EE832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
Manifest number: 0253
Signing time: Wed 05 Nov 2025 07:01:58 +0000
Manifest this update: Wed 05 Nov 2025 07:01:58 +0000
Manifest next update: Thu 06 Nov 2025 07:01:58 +0000
Files and hashes: 1: 1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl (hash: TLW2TFDZTXiJh5Rr5UeR6GRsRPjVrudPZUMCB5pQySU=)
2: eOFwfpAp9t5Wr1bASPFmeWufZoc.roa (hash: BLw6LWDYgC59tC8PdTRtV9+Fp2Xo+9u/YLlHy2Sn+zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:81:95:17:6d:ce:41:b8:aa:3c:62:d9:8e:e8:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f83ebe2a906dd587012599209c31ce10f29d5785
Validity
Not Before: Nov 5 07:01:58 2025 GMT
Not After : Nov 6 07:01:58 2025 GMT
Subject: CN=0abdc13ed1689e1bf15eba7f56cfca2b3c79aa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:19:3f:6a:e6:1f:e9:dc:0d:5d:3a:a6:77:ae:
6e:a4:39:30:8d:3b:ef:67:c8:9a:67:00:d3:0c:d8:
d3:07:9b:2d:e5:8f:76:4a:86:fe:95:65:bb:e4:53:
15:42:cd:46:9c:e7:0f:85:49:60:21:1a:06:2b:49:
b6:65:f5:a2:b2:00:41:a3:51:29:23:2b:a9:6a:58:
b7:11:a4:1b:6a:57:aa:db:8e:9f:1b:f7:2a:cd:d2:
ac:db:f1:0d:2b:3a:8d:37:c1:f5:b6:09:bb:4f:02:
9a:3c:d1:2f:cb:24:bf:c8:d1:5d:d6:fd:02:04:59:
2e:25:63:ea:74:fe:7f:dd:d7:01:d4:7b:8c:fc:48:
e0:c2:46:8f:9c:b4:7b:21:eb:2c:ac:ec:71:b5:96:
91:da:3b:37:20:ff:3b:1e:6f:ea:a9:04:dc:1e:ad:
d7:ee:b9:3d:55:60:03:b6:71:98:89:29:97:b5:84:
2b:39:ee:06:a5:e0:b0:cf:6f:47:04:dd:21:b6:01:
9a:26:d1:e7:f3:7e:6f:48:2d:eb:6d:41:4c:88:63:
3f:59:52:d4:fc:3e:46:40:4e:bf:5c:65:33:21:c0:
17:15:4f:87:2c:10:25:71:96:2a:d2:9f:cd:bb:ae:
49:36:c7:a6:7c:4d:f4:95:b0:69:c5:f9:75:1e:c0:
f9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BD:C1:3E:D1:68:9E:1B:F1:5E:BA:7F:56:CF:CA:2B:3C:79:AA:0A
X509v3 Authority Key Identifier:
keyid:F8:3E:BE:2A:90:6D:D5:87:01:25:99:20:9C:31:CE:10:F2:9D:57:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1f61ac-02fe-4e4c-852e-4523a0e2b844/1/1-D6-KpBt1YcBJZkgnDHOEPKdV4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:67:7a:3b:f7:98:15:73:a3:44:98:0f:00:f4:2d:c8:55:66:
ec:59:10:8c:2e:23:7e:53:6b:e9:91:b9:22:b4:95:3d:b9:af:
b6:5e:39:cf:a6:f8:6b:6d:3f:b0:05:ce:a2:5b:2a:ef:23:70:
37:74:e5:95:26:ba:0f:5a:0b:4f:e4:a8:c7:03:cf:a0:a8:e8:
b6:d4:a0:23:e4:43:16:3d:12:dc:fb:f2:4c:18:aa:45:f6:3d:
c5:ac:24:13:d1:e6:cb:ed:b5:d5:ab:b5:5c:2e:86:c6:02:23:
fb:9d:db:98:26:1b:91:a8:76:7e:5f:09:ac:ea:55:a0:57:f0:
a7:e3:0d:90:cc:e4:4d:70:97:58:6f:2f:66:ec:4a:d6:db:de:
09:33:17:1d:ed:6e:fc:53:21:1e:3b:3b:c5:d5:8a:79:92:e7:
f6:84:f5:9b:f1:f1:59:62:c8:54:3d:04:7f:c0:95:39:c3:65:
6c:6f:a9:21:4f:fe:0e:c8:39:3c:8e:6d:59:6d:c8:08:8d:13:
78:f2:12:67:a6:61:74:79:02:ea:99:ac:08:21:ca:66:d9:cb:
23:ea:38:28:26:49:a3:c8:a6:0c:30:82:36:59:bf:e9:cd:fc:
5a:3c:94:29:74:7b:c8:46:69:0e:5d:ba:ca:5d:c4:0a:a2:26:
3a:9e:a4:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:55:01 2025 by rpki-client