Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
File: 1-cGMsaUCf6FybxFLPv5io6l5zhs.mft (raw, json)
Hash identifier: +9V0mpHof8M/lb44v8ZoYE4WoEXDTEM8wcVwmI8ACss=
Subject key identifier: 87:4C:B2:B4:5D:EE:4F:02:B4:A1:06:95:62:CD:56:C5:3D:66:FC:63
Authority key identifier: F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
Certificate issuer: /CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Certificate serial: 019A50E28C6A39CFA759B9AB43B39010553A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
Manifest number: 0691
Signing time: Tue 04 Nov 2025 22:00:15 +0000
Manifest this update: Tue 04 Nov 2025 22:00:15 +0000
Manifest next update: Wed 05 Nov 2025 22:00:15 +0000
Files and hashes: 1: 1-cGMsaUCf6FybxFLPv5io6l5zhs.crl (hash: ccvNkNQjZH5n2n4Qvtz//IulwFOD97vG3a9dqJppmO8=)
2: oKBWeiCdr72OFTmQ9qAC_2ODyWc.roa (hash: S0rlxTkwKd8+RpY5lx0VofPErbqrcMDFmRtkG28exLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:8c:6a:39:cf:a7:59:b9:ab:43:b3:90:10:55:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9c18cb1a5027fa1726f114b3efe62a3a979ce1b
Validity
Not Before: Nov 4 22:00:15 2025 GMT
Not After : Nov 5 22:00:15 2025 GMT
Subject: CN=874cb2b45dee4f02b4a1069562cd56c53d66fc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:16:4e:43:51:14:05:e8:db:2b:73:c2:23:6d:
77:30:4f:95:2d:e5:46:91:cd:a0:85:8e:ff:24:3a:
06:03:11:6f:a2:f4:b8:da:35:80:68:d4:69:11:d5:
0b:cd:b1:8c:60:f6:bd:5e:1e:7c:43:10:b3:30:ca:
82:e2:0d:d6:f6:65:4f:16:d4:50:89:1d:26:a3:cb:
c6:c1:e2:f1:1c:04:5e:b5:cf:da:b5:dd:df:dc:e7:
7f:b2:13:90:63:24:b4:93:47:f5:bb:0e:77:24:d5:
43:a5:82:91:47:41:6d:04:fe:12:3c:26:e5:2b:9b:
c3:33:2f:2b:a6:0d:5f:72:39:25:fb:f7:fa:a4:bd:
9e:50:9c:aa:e4:f1:35:38:9a:2a:3e:ab:d9:28:29:
9b:5d:02:cb:09:f4:e6:97:cf:cb:43:1d:3d:2a:31:
98:32:b6:ce:c8:b7:93:a9:40:5e:d3:bb:c0:c7:e4:
72:fd:cc:7d:5e:ec:d6:0b:53:a8:ad:f7:0d:91:be:
a6:1e:d4:02:83:5b:0e:49:55:3e:ec:d7:46:94:ba:
45:14:6c:4f:ae:c9:d6:ad:0c:63:15:19:ea:be:e8:
23:9a:c9:1f:b8:43:b5:7e:8b:23:b7:04:b6:c5:2f:
b3:cd:cc:71:1e:f6:cf:43:9d:5d:73:00:45:30:86:
95:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:4C:B2:B4:5D:EE:4F:02:B4:A1:06:95:62:CD:56:C5:3D:66:FC:63
X509v3 Authority Key Identifier:
keyid:F9:C1:8C:B1:A5:02:7F:A1:72:6F:11:4B:3E:FE:62:A3:A9:79:CE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-cGMsaUCf6FybxFLPv5io6l5zhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/26ca92-6fb8-4dd2-9795-9bc5c26d4be8/1/1-cGMsaUCf6FybxFLPv5io6l5zhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e7:d6:c8:82:b3:69:fe:53:c0:a8:dc:b6:58:0d:a0:7d:57:
7f:a8:58:0e:38:ba:cf:09:a2:f3:cf:b5:1d:e7:ed:ea:ef:ac:
33:18:17:e5:15:3d:b5:aa:3c:de:a2:37:81:45:f9:a2:3c:25:
e3:42:8f:47:cb:8d:fa:71:2f:db:85:8d:ea:38:ad:37:8b:c0:
00:74:86:8d:1e:5e:cf:80:03:a1:65:05:fc:2f:07:5d:ae:0a:
b4:40:48:11:06:e7:08:68:d2:53:de:73:8c:59:e9:e7:50:35:
1b:16:fd:87:3a:a1:30:c3:9c:91:13:29:70:79:09:b7:22:50:
8d:2e:51:2e:41:fb:52:ef:b5:2f:73:b1:05:52:5d:de:c2:2e:
94:f7:98:05:fe:d3:9c:34:f5:5e:eb:2d:bd:41:af:14:24:d2:
8c:40:37:61:7c:29:db:6c:43:8a:cc:e6:ab:a0:fa:4e:d0:d7:
0d:6c:20:4d:b9:b2:a5:02:c6:8d:11:5c:7a:e8:a4:c1:8c:27:
57:31:62:db:28:3c:34:c2:db:98:72:83:01:66:38:d9:7b:0e:
1e:ce:53:7d:08:15:ba:f0:62:20:1c:ff:52:3b:0f:a1:83:47:
3f:85:36:b7:ee:77:c2:16:47:4b:66:59:75:5e:84:22:0f:05:
75:33:a1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:20:44 2025 by rpki-client