Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
File: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft (raw, json)
Hash identifier: Vqdm4har9ry5B3VSyRzQaTF5HRSrOfKMyVteIw156Wo=
Subject key identifier: 16:72:F1:73:66:30:87:4B:D5:C5:B0:AB:77:B1:B3:78:30:E6:D7:B3
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 019A4F9931179252DB1B0BF3154C8426D235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
Manifest number: 0D9D
Signing time: Tue 04 Nov 2025 16:00:30 +0000
Manifest this update: Tue 04 Nov 2025 16:00:30 +0000
Manifest next update: Wed 05 Nov 2025 16:00:30 +0000
Files and hashes: 1: 1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl (hash: zbm6aRqXqHnj5wDtKVBj43I/1qN1Yo4wox0OzENQRIA=)
2: 3ZY4SnX1yy3L1vAgX9voAeMkVFA.roa (hash: tg2AmRn5Z2Y+ThyLPd/HKMkLP9Uc9wkQQiNjIF3J+mw=)
3: ugCHO46pUQzd5zqdNawWJEPystY.roa (hash: BahKiNdd/pZ/56ATzb3cvkxPGvUYcM+QZnAs5IV/tZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:31:17:92:52:db:1b:0b:f3:15:4c:84:26:d2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Nov 4 16:00:30 2025 GMT
Not After : Nov 5 16:00:30 2025 GMT
Subject: CN=1672f1736630874bd5c5b0ab77b1b37830e6d7b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2a:d7:90:cc:ca:16:2c:eb:8a:79:f7:5c:38:
1e:fe:50:78:4f:5c:00:d6:60:78:eb:57:b3:38:f2:
76:56:c7:12:d5:10:e4:ca:6f:35:d8:4e:b5:2e:5d:
a3:4a:6f:71:c1:62:ec:85:de:a9:87:84:45:e3:65:
6a:5c:c4:5e:72:c1:b6:32:3c:12:81:8e:ea:0b:ed:
41:b6:6f:bf:9a:e0:f3:ae:f1:37:1c:e9:00:22:c1:
93:21:86:fa:fe:97:33:74:67:71:cd:77:36:d0:52:
80:b0:2f:df:05:f2:ee:2d:4d:1f:99:bd:75:32:09:
1a:cc:0c:7c:4c:62:ed:a3:64:e9:4c:6c:41:32:ed:
35:d8:a1:de:4b:7b:d0:ce:ac:f6:fb:31:56:b6:fa:
1b:37:46:fd:f9:1f:af:e8:a5:8f:a6:e6:8c:85:cd:
e3:60:45:b5:65:14:7c:87:56:0f:3a:ef:b2:61:e9:
59:b9:02:55:da:87:0c:2a:52:89:f3:7d:e7:01:88:
e5:35:ef:44:6b:7c:a2:b2:02:28:00:8a:6c:ed:aa:
82:f8:5f:5b:61:e7:45:99:b7:5e:28:3b:fd:36:d3:
ae:3d:16:b6:73:3f:a6:1a:53:0b:94:b6:0d:11:8d:
37:4b:bc:7f:4b:19:9e:a8:e8:af:a5:76:9c:64:a4:
a4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:F1:73:66:30:87:4B:D5:C5:B0:AB:77:B1:B3:78:30:E6:D7:B3
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0d:15:c8:ab:0e:1a:2b:e4:c8:0a:21:bf:85:75:4c:4d:f3:
62:fa:de:97:31:43:21:01:a4:82:a4:8b:c9:ab:0a:47:7e:39:
8a:73:d0:d8:b4:eb:a9:2e:3a:a8:88:ea:ac:50:3f:ae:29:ad:
30:f1:0d:21:c0:3d:ac:af:ae:2b:76:d6:43:3f:17:9e:f9:89:
6f:cb:66:e6:3b:69:48:00:b0:57:2b:e2:76:58:c2:25:33:29:
72:24:5a:0c:09:b7:3d:68:27:57:13:5a:fc:52:79:ed:4c:e7:
8a:d6:d8:ae:2f:50:b6:8e:ea:39:9d:4e:7d:56:98:c7:2f:f7:
6b:c0:b7:39:6a:f8:fb:90:e3:8b:c6:36:59:c3:b4:fc:9b:c1:
ab:60:38:cc:a4:64:8e:b0:1c:45:17:15:1a:fa:3c:d9:0c:d9:
dc:46:fe:6e:a5:64:fe:79:bb:f2:7e:a7:9e:fe:41:58:62:ab:
e2:78:2d:68:e4:d9:68:9a:2e:77:eb:be:88:1c:aa:09:2a:35:
cf:8b:7a:4c:8f:38:7c:9f:b4:7d:ca:0d:0e:d5:b7:3c:1d:ac:
e8:8a:40:c6:f3:19:5f:af:4f:99:52:3f:be:c8:68:57:76:21:
dc:75:28:7f:1b:71:8b:0f:f1:82:a7:b8:fc:26:b2:9a:cb:b0:
59:3d:49:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:48 2025 by rpki-client