Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
File: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft (raw, json)
Hash identifier: INXLUFXrPpC27co1QkpCBXQRY7wmX2UMGBIE4CeE/v8=
Subject key identifier: 5E:ED:B1:1E:88:60:00:C2:74:75:5F:6D:C6:D2:4B:0F:59:5E:AD:C4
Authority key identifier: FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
Certificate issuer: /CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Certificate serial: 019A4EF468E42EF750B9A6FB6989B360A6D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: 1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl (hash: YbMH76vMRykLire5lX8YAXuODYXfJfMhEhxL0Gak96M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:68:e4:2e:f7:50:b9:a6:fb:69:89:b3:60:a6:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbd0ecf635dd3e9d16b361f8e3e0f50531b1fb4e
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=5eedb11e886000c274755f6dc6d24b0f595eadc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:55:31:f9:31:09:09:b0:f4:3b:95:41:03:ab:
2b:2e:1f:a8:ac:3b:5c:a3:e4:c7:d4:65:af:90:af:
f9:ac:db:56:c3:cc:53:5c:e2:6b:f7:76:86:64:58:
01:0f:85:20:de:6f:14:76:87:29:d5:29:23:02:ef:
5d:2a:6b:a7:d3:4b:16:0c:91:09:5b:1e:b5:a4:ba:
30:db:73:ce:7a:8c:18:27:fd:63:7d:0a:e5:27:f8:
3c:0b:e7:92:5e:68:47:70:06:f7:e5:d5:f5:30:13:
7d:c9:b6:42:a2:d9:e0:20:b0:5a:c6:16:bb:f0:11:
6e:fc:14:a8:b9:3d:86:ad:04:4f:53:c9:6c:33:5d:
c6:a5:c6:89:eb:62:9f:a8:74:1e:5c:c4:54:68:fa:
06:13:47:bf:0f:6c:90:fe:74:0c:3f:2d:c0:0c:eb:
9b:2a:8c:b2:21:ad:05:4a:d2:76:06:fe:08:4b:d3:
2f:c1:23:d1:47:18:41:e0:aa:ac:ad:a7:12:cf:69:
fd:d1:ff:7d:52:39:46:bc:a3:f4:69:f0:fb:66:a1:
28:52:20:c7:b8:dd:93:2d:72:aa:a6:11:a0:a4:79:
d8:72:f5:f1:16:a3:36:11:b9:f8:8b:47:ce:5b:98:
a3:0f:67:91:eb:c4:6c:0a:bc:af:da:8c:cb:73:7b:
f4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:ED:B1:1E:88:60:00:C2:74:75:5F:6D:C6:D2:4B:0F:59:5E:AD:C4
X509v3 Authority Key Identifier:
keyid:FB:D0:EC:F6:35:DD:3E:9D:16:B3:61:F8:E3:E0:F5:05:31:B1:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/abcf72-f30a-4eb2-ac32-4143a8884a2e/1/1-9Ds9jXdPp0Ws2H44-D1BTGx-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:12:a7:71:fd:6c:67:9f:75:8b:4f:62:fe:0c:cc:7a:9e:28:
00:d7:b3:e3:95:23:3d:4b:99:a2:f5:0e:2d:16:0e:a2:c4:0a:
05:94:7f:f1:ff:c5:b5:66:0d:17:7f:2f:91:da:36:16:3c:6a:
bf:8a:25:25:ce:48:5b:f6:72:8b:10:3d:51:f6:4f:39:48:8e:
47:69:38:1b:95:5c:c9:de:57:54:c9:15:81:6e:31:81:f9:e7:
e3:1e:c7:76:55:a3:0f:4e:bd:8d:d6:d4:7a:74:3d:8d:b1:01:
7e:19:72:68:fc:4e:32:51:14:5d:50:e3:c1:4e:24:6b:c8:ce:
83:1a:33:cb:89:e0:cc:05:04:d4:b3:89:e3:2f:b5:96:2b:a3:
07:74:09:22:40:43:33:9b:63:48:9b:32:02:a6:85:c8:e3:05:
a7:4d:7a:8f:a2:81:2c:c5:7f:a4:d0:4b:fc:27:fe:17:46:a5:
09:aa:d6:e8:13:f4:9c:bb:94:6e:93:6b:49:fe:06:2c:f4:77:
a7:56:16:79:07:14:0c:b2:87:3c:df:ad:7b:c9:63:45:61:92:
2b:e7:50:78:9a:16:d7:0f:de:3e:c4:c3:17:ba:0b:12:72:05:
8c:f9:e9:78:78:af:9b:93:41:49:a6:8e:91:5d:f6:21:c5:78:
a8:bb:fb:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:34 2025 by rpki-client