Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: YtKSu9Rbty9vD4f22Iq1/k0RIKGNuIBJ+x56jKDkTDo=
Subject key identifier: 01:F7:6E:09:B2:66:04:AC:ED:B5:53:67:C3:51:22:EB:3D:A8:DD:71
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 019A50E36A2C3754C57C06070B5CE236427B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0AB8
Signing time: Tue 04 Nov 2025 22:01:12 +0000
Manifest this update: Tue 04 Nov 2025 22:01:12 +0000
Manifest next update: Wed 05 Nov 2025 22:01:12 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: xWbS+jihcSt6fVzzJSIHiQdEGkT6tHGk8Mm7xcRJNX4=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:6a:2c:37:54:c5:7c:06:07:0b:5c:e2:36:42:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Nov 4 22:01:12 2025 GMT
Not After : Nov 5 22:01:12 2025 GMT
Subject: CN=01f76e09b26604acedb55367c35122eb3da8dd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:cc:2f:ca:8c:82:80:b4:c2:a0:91:66:a3:
f9:a0:65:f3:b8:49:93:d8:f1:db:19:35:c5:8c:71:
69:de:53:10:23:0f:f3:cf:1e:34:ab:e8:37:60:88:
78:65:0a:d6:96:47:08:4a:f5:7e:c7:72:36:7e:dd:
6d:0e:ff:86:8b:b7:81:69:cc:39:19:2d:93:06:1a:
09:62:05:b5:8f:d3:05:c9:36:3f:bd:b2:32:4b:76:
9f:91:64:76:33:16:8d:33:db:12:2d:ad:9e:b6:6c:
04:3b:ce:f3:f2:7e:ad:bc:64:45:3b:3a:e6:80:cd:
c8:a2:31:86:80:54:16:9d:91:a4:4d:97:d1:6c:c4:
d1:80:fb:13:e8:73:e2:30:3f:d6:ec:52:4a:8e:63:
d2:9a:cc:ca:80:69:34:55:32:19:9d:f9:64:22:6c:
cc:1a:f8:b1:0c:16:86:6a:51:b4:85:02:05:ed:4b:
4c:a7:a7:e5:16:08:e0:86:8b:4c:f9:2c:b1:fb:b8:
bb:a5:08:39:d7:d2:f2:64:20:61:e9:e5:1a:65:fe:
33:29:5a:4a:c2:05:4a:0b:76:af:39:19:6a:40:75:
67:95:c5:8d:b0:70:ce:6e:b0:b3:77:a7:1e:9a:3c:
b1:00:d1:2f:71:b3:83:08:96:82:ab:01:ee:ff:e7:
3e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:6E:09:B2:66:04:AC:ED:B5:53:67:C3:51:22:EB:3D:A8:DD:71
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3a:fd:08:35:c7:f8:35:1a:6e:55:70:b7:3a:36:cb:4f:2a:
9b:94:ca:8c:fa:54:24:bf:ed:c6:c8:48:73:1c:6b:a5:e5:73:
f3:8a:2a:4f:f4:e1:f4:e6:52:54:26:5e:ad:68:59:90:39:c4:
b9:24:28:0f:3a:3c:ff:40:d2:69:19:70:06:e0:ff:12:b2:d3:
aa:c5:10:3f:3d:82:7b:11:d7:0b:aa:0e:e3:62:d6:81:47:4f:
b8:38:60:f5:00:1a:5a:88:a2:00:12:c4:3f:9a:c1:5b:0c:b7:
61:57:80:2f:24:a4:b3:a5:37:d4:79:ef:0f:92:aa:fa:c2:94:
7e:23:4a:e8:40:1d:56:7e:e2:b3:b7:68:67:1f:b1:da:80:07:
2d:4f:1d:f1:fe:86:a4:7b:25:7a:7d:d9:cf:2f:e7:b6:c9:92:
ae:83:ca:2e:6d:2f:47:cc:f4:f1:79:a5:3b:41:a0:4f:94:b5:
83:f3:f2:f5:a8:1f:5c:9b:3f:c1:03:79:7c:2d:11:eb:0c:f0:
fb:41:68:fe:23:87:40:4f:eb:36:ee:06:eb:49:58:2f:aa:d4:
a5:98:0b:e9:78:8c:05:ca:d2:b5:d6:0e:3d:21:b3:a7:de:99:
b7:31:cc:d8:18:10:15:81:27:10:53:5e:da:17:8b:d0:5e:36:
6f:b2:85:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:16:54 2025 by rpki-client