Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
File: 1sHCRltPlz-0sMtmKKmLO1iJbUg.mft (raw, json)
Hash identifier: 6jVLzFp024El42yya/gH2w6YM+m8DviP27iPgn3Z8y0=
Subject key identifier: B1:75:46:E6:03:7E:02:0C:3D:B5:17:89:56:13:77:21:7B:D6:9E:43
Authority key identifier: D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
Certificate issuer: /CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Certificate serial: 019A552DA65BAC5D62DB6CD8CE15A376B125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
Manifest number: 1712
Signing time: Wed 05 Nov 2025 18:00:46 +0000
Manifest this update: Wed 05 Nov 2025 18:00:46 +0000
Manifest next update: Thu 06 Nov 2025 18:00:46 +0000
Files and hashes: 1: 1sHCRltPlz-0sMtmKKmLO1iJbUg.crl (hash: 0trh/4M8fqN+mm+XAWZjs8UjbnVFZOecfvjMvc+dAGo=)
2: 6LgX5MehzRAabFx-kl7-VX8WvGI.roa (hash: wiQ+g/d9+jLtiOR7pk9wrMApI0W1PUh3CexN4Wm3rM0=)
3: b4DuszRvCuY1HNLPnYT0Co3AUUg.roa (hash: Se60NV9pecSqSW5M0t+IF1TsZ0uCtpO4LnPo+ovkM6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:a6:5b:ac:5d:62:db:6c:d8:ce:15:a3:76:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c1c2465b4f973fb4b0cb6628a98b3b58896d48
Validity
Not Before: Nov 5 18:00:46 2025 GMT
Not After : Nov 6 18:00:46 2025 GMT
Subject: CN=b17546e6037e020c3db51789561377217bd69e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:21:b2:c0:89:59:e2:bb:a1:f7:71:19:1d:39:
a2:e9:1b:8e:bb:11:12:a1:db:8e:5c:26:a9:0d:db:
2f:29:5d:33:77:dd:cf:52:f1:7f:cf:65:e8:68:44:
53:fa:12:db:30:b3:59:2e:ee:ec:3c:6a:1c:76:1e:
a8:54:52:49:b4:00:de:d6:d2:75:75:e1:6e:db:5e:
1a:29:de:2c:a9:16:5c:7f:77:d8:be:41:1a:df:27:
2d:53:f7:74:be:70:95:05:55:13:f4:14:52:87:69:
f8:2d:11:b5:1e:51:8e:28:97:12:0b:b6:06:e2:5e:
18:93:7c:50:0a:c7:aa:7a:fd:3a:2e:48:12:a3:d2:
db:7b:54:ec:6e:14:1c:95:ab:96:cb:57:06:d0:f7:
fc:30:aa:63:2b:f3:a4:8b:68:4b:6d:e7:a9:da:7c:
c9:cb:1a:99:f6:c9:e3:dd:e1:9c:06:0b:6f:89:f8:
d3:b0:7c:04:14:5e:33:28:bd:71:98:7e:3a:a9:1a:
0b:9c:b1:7f:57:8b:01:1f:50:f3:0d:8b:99:22:06:
8b:77:6d:a0:8e:a0:a2:e3:97:17:1e:c2:6f:50:37:
4d:29:dc:79:7e:f2:0a:15:f8:10:2a:ff:06:7b:d4:
37:44:f8:ab:e4:3f:99:ef:06:ce:45:08:b2:99:3c:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:75:46:E6:03:7E:02:0C:3D:B5:17:89:56:13:77:21:7B:D6:9E:43
X509v3 Authority Key Identifier:
keyid:D6:C1:C2:46:5B:4F:97:3F:B4:B0:CB:66:28:A9:8B:3B:58:89:6D:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sHCRltPlz-0sMtmKKmLO1iJbUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d72574-272a-409d-9d3c-e49a9e06c700/1/1sHCRltPlz-0sMtmKKmLO1iJbUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:75:f2:62:1b:e4:01:c9:af:47:01:a7:0d:d9:4f:7a:c6:b3:
c2:20:cd:59:52:11:54:61:cf:db:6e:c7:b2:36:9e:03:c4:72:
4e:ec:6b:26:f2:0c:39:4d:25:6a:70:d7:9b:92:9d:88:10:74:
e7:8b:fe:24:7a:3b:24:69:f2:3c:cd:81:d7:f5:60:45:3c:6c:
6b:21:13:70:3b:32:ae:c4:36:01:0e:3d:68:03:54:6f:a7:a8:
40:11:23:a1:2e:c7:89:03:39:b2:db:70:fe:ab:d6:ac:fd:e9:
07:1a:d4:2b:9d:2b:0f:7e:84:3b:62:ba:cb:f8:69:99:25:6b:
2d:3a:3d:4d:e1:82:87:68:ee:e2:de:a1:12:7d:a6:21:b7:dd:
c6:07:3c:5e:df:fb:62:56:49:35:2c:3b:89:a0:4a:ba:e4:43:
96:b4:c5:fe:b3:0e:8f:a8:13:2d:9a:6c:be:68:75:a4:ba:99:
3b:be:76:03:e4:2c:7d:1f:0c:1a:e6:fe:d0:40:b6:ad:63:b5:
8a:97:15:58:a7:ca:e7:4a:09:11:8a:71:0b:bf:97:fc:22:19:
4f:a6:ee:07:dc:2a:ae:b4:4b:b0:39:03:62:4b:08:3f:4e:30:
ef:a0:d0:95:56:14:dc:9c:34:58:72:b0:c3:d7:34:ae:49:be:
2f:ef:26:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 22:13:19 2025 by rpki-client