Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
File: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft (raw, json)
Hash identifier: xqUI21GXHLqrHqGd6N4+hOsXNlaHGSVOEOf7Po62Jqc=
Subject key identifier: B5:2C:B9:E6:76:A9:5F:B5:2F:63:4C:62:BD:28:D0:6A:7D:08:A9:6D
Authority key identifier: D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
Certificate issuer: /CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Certificate serial: 019A541AD2003F93BDEB636E2D8C85E69BD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
Manifest number: 0231
Signing time: Wed 05 Nov 2025 13:00:35 +0000
Manifest this update: Wed 05 Nov 2025 13:00:35 +0000
Manifest next update: Thu 06 Nov 2025 13:00:35 +0000
Files and hashes: 1: 1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl (hash: VD7pm3uyq83SxoOgs09TFJnk4p8Td0WvSVzXeqweB0s=)
2: Mhhz4wUnWbhungV9qmdIiiClbC4.roa (hash: vs++Lho+ybbPqiNcZp7StywgPzEvRC+QjSZW2g6/U6I=)
3: Ri1W5hGdOA2IQn0eWHH7b3-bfws.roa (hash: P/qvYKsl5b2W4hd0B25iig5CdZGpWYsMZEWjWtHjTyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1a:d2:00:3f:93:bd:eb:63:6e:2d:8c:85:e6:9b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4afe3f0c9e555e52d3505d6163278df3da18cee
Validity
Not Before: Nov 5 13:00:35 2025 GMT
Not After : Nov 6 13:00:35 2025 GMT
Subject: CN=b52cb9e676a95fb52f634c62bd28d06a7d08a96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:83:f6:1d:9b:e8:31:d1:79:cb:2b:42:c5:
21:5d:40:78:b4:7b:9d:ec:61:ed:d8:eb:ac:70:4c:
1d:23:a8:88:52:79:a1:52:cf:c1:44:ef:b4:9b:f5:
75:ca:ab:ef:10:cc:2e:78:5c:45:5e:9a:ef:9b:ef:
fc:19:4d:25:d8:db:50:1a:ec:6a:21:72:33:85:ab:
a4:da:e0:8c:9c:75:99:11:f5:cc:a2:f4:d2:95:38:
ad:42:f4:74:45:da:e9:e2:b3:74:20:a0:83:03:c3:
c4:59:3e:a5:f2:eb:ce:a5:fc:51:83:80:ce:c0:19:
dd:ed:1d:cb:71:5c:bc:ba:73:cd:74:ea:a4:3a:19:
e6:45:8c:67:f1:44:48:8f:ee:0b:99:6b:e2:35:e7:
fc:d9:a4:9b:94:2d:d8:4c:8a:84:17:69:cc:2b:92:
96:b2:cb:a5:d6:dd:22:66:9a:de:a4:59:e0:60:82:
67:53:e6:fd:27:23:37:26:15:40:65:1d:9c:c9:fc:
c0:6a:2c:02:e4:c7:f2:9b:24:e1:3c:2f:2a:84:60:
cf:cc:9f:30:c6:bc:a5:4e:06:90:6a:3a:28:e4:d2:
43:e6:03:af:b8:12:2f:31:d0:79:1b:02:de:45:fe:
b5:01:73:3f:0f:ad:12:bb:41:dd:de:72:9a:25:d9:
23:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2C:B9:E6:76:A9:5F:B5:2F:63:4C:62:BD:28:D0:6A:7D:08:A9:6D
X509v3 Authority Key Identifier:
keyid:D4:AF:E3:F0:C9:E5:55:E5:2D:35:05:D6:16:32:78:DF:3D:A1:8C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K_j8MnlVeUtNQXWFjJ43z2hjO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/1c67ef-e83d-4427-864b-c59825bbcb32/1/1K_j8MnlVeUtNQXWFjJ43z2hjO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9e:57:35:10:e4:cf:28:86:5b:2b:5c:4d:96:c0:f9:64:a6:
c1:65:07:2f:31:fa:ff:6d:9b:16:b4:25:32:d5:c5:ee:52:10:
c6:e8:f1:84:4e:21:99:fb:35:27:c3:6a:d9:40:9e:43:eb:03:
9f:f5:de:69:89:31:29:cd:81:d2:83:e0:3e:bb:80:b7:23:90:
b1:7e:df:00:e5:a9:45:0d:6d:9b:d9:e8:0c:0c:2e:a9:8b:4d:
0e:ae:62:ea:07:7a:26:bb:53:a0:96:a2:09:4d:72:cd:12:b3:
b9:56:dd:38:91:15:7d:28:9d:f9:14:db:43:95:2b:34:2e:ef:
20:f5:98:3e:b4:ea:7d:4f:c5:0e:cc:25:ec:18:ca:5f:a2:67:
cc:a8:85:48:31:a9:84:0b:00:99:65:a3:6b:49:2b:e8:ad:a1:
d6:e3:84:5e:5c:1a:91:1d:c0:95:a9:55:42:47:65:76:aa:05:
df:3c:2a:57:66:aa:fa:7d:33:17:6f:07:96:fa:31:ee:c0:c7:
70:42:2e:5b:e5:83:1c:67:5b:9e:2f:77:6b:33:be:0d:10:9f:
e4:a2:59:d6:52:68:14:82:09:d9:9f:f5:19:41:e9:1a:9d:65:
42:b2:35:5f:1b:c0:de:6c:1a:70:f4:5c:6e:1b:cc:fe:02:3f:
b9:2a:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:33:28 2025 by rpki-client