Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
File: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft (raw, json)
Hash identifier: R064biYUWsBlYV7fFX0BOSKUwiWAuZImjnCLt5QeZRo=
Subject key identifier: 0C:E7:49:88:74:65:87:FC:2A:61:1E:C0:F4:07:23:F0:7D:B1:9D:10
Authority key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Certificate issuer: /CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Certificate serial: 019A4DE1E39B9605439EFF6F13C9F435667C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
Manifest number: 157C
Signing time: Tue 04 Nov 2025 08:00:40 +0000
Manifest this update: Tue 04 Nov 2025 08:00:40 +0000
Manifest next update: Wed 05 Nov 2025 08:00:40 +0000
Files and hashes: 1: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl (hash: KR19Rg+82zF8xf5p+mLGdBvc08h0BHXI0UHpJLU334M=)
2: B0cXI8R5Jkebb1b4_AZX0QkItTI.roa (hash: qU3eVg9ZrPWSREJWyOFSPkiCSojLDzpwNgzDMrBwxd0=)
3: LOHHuqh5utbV1sVMvLXO9x4HEv0.roa (hash: zlFj/WpL6Qd/ZD0zeyPqhzWIhhj8Nvvt5witl0z9Yic=)
4: ndH6JM8LGw_-a86HEW7P-1qV0gM.roa (hash: PbblUtc0vHojXJBh5Iy7RwAYCiNyZajL5DEQ2efa9es=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:e3:9b:96:05:43:9e:ff:6f:13:c9:f4:35:66:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Validity
Not Before: Nov 4 08:00:40 2025 GMT
Not After : Nov 5 08:00:40 2025 GMT
Subject: CN=0ce74988746587fc2a611ec0f40723f07db19d10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:c7:b3:9f:b2:61:f7:6e:a1:de:83:28:f2:
82:14:15:1f:c0:a1:db:e7:ad:bc:8d:9f:15:74:37:
7e:70:9c:98:99:4f:97:9a:7b:35:ec:c5:4d:e5:a7:
45:f8:9d:19:f9:f1:c5:48:d7:24:28:0d:73:be:eb:
5b:29:2c:e0:4f:ab:ec:34:3b:3f:5d:6b:3e:4b:84:
d4:39:62:c3:5d:49:d9:e9:82:c6:a4:0a:65:f9:bd:
6e:1e:3c:a9:16:6a:cf:2e:a1:7c:0e:6f:72:13:c0:
4d:d1:fa:d7:08:0b:f6:77:c7:b5:58:f1:b5:5e:6d:
92:87:ac:55:fe:77:54:10:02:d8:bf:56:dc:29:ee:
cb:e3:6d:6d:4e:b0:b0:78:5e:b2:4b:b7:81:d1:da:
d4:d0:5e:8c:82:e9:b4:ca:e0:4d:9e:16:34:18:e1:
bc:51:b4:6c:9b:94:ed:57:8f:34:f3:84:46:de:1e:
c4:4f:89:e3:46:f7:3c:38:2b:ed:ee:89:54:60:f1:
4f:ef:12:75:79:c8:75:e4:16:4f:c7:48:7a:2d:c2:
5d:89:73:a9:b6:21:1d:d4:51:a3:3a:c4:fe:94:bc:
94:99:74:e4:18:a6:19:9e:c9:ca:11:ce:59:53:76:
dc:97:25:2e:42:df:8d:42:bd:2f:ed:c3:4a:66:65:
c5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E7:49:88:74:65:87:FC:2A:61:1E:C0:F4:07:23:F0:7D:B1:9D:10
X509v3 Authority Key Identifier:
keyid:FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:77:0f:cf:c8:5e:c9:3f:f8:66:e5:f4:b2:72:e2:20:40:dc:
c4:8c:41:c7:32:79:4d:b0:01:f4:2d:6c:95:eb:a4:1e:2a:2b:
30:af:6e:61:93:1b:65:4d:d0:fe:3b:0e:05:e8:69:f2:ed:af:
69:0e:02:d1:f2:c3:fc:86:fb:14:38:bc:be:3f:b7:79:43:81:
ec:45:39:6b:fe:ba:8e:38:b4:71:12:a8:17:07:40:2a:b6:ca:
ae:6d:7d:97:b6:33:63:ae:15:60:19:96:58:70:3a:78:2b:60:
42:93:3c:99:14:39:95:27:b8:66:0e:46:3c:09:92:4a:2f:2a:
37:fe:0f:68:7f:b6:8d:2d:38:55:11:cd:fc:fa:7f:69:04:90:
81:94:80:a5:b1:80:d3:5f:b5:75:f9:09:51:18:5a:4b:d8:8a:
58:9a:a6:de:a6:ab:50:5f:f4:41:3d:da:eb:1d:ed:b9:b1:e9:
3a:40:b6:61:92:28:4e:95:0b:b4:44:b1:9d:fa:e4:c9:b5:62:
4c:1e:22:16:82:a7:0c:98:33:79:d0:da:5c:5d:44:bb:17:4c:
33:40:99:88:89:75:4c:f4:f8:9a:89:3f:29:1e:8d:e0:2c:68:
2b:c7:cd:08:40:80:ce:d6:aa:69:84:42:56:ed:ff:82:28:98:
84:eb:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:46 2025 by rpki-client