Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
File: 1PvHTNH4egvxbEgvYgHJueskTqI.mft (raw, json)
Hash identifier: 9A1bCDEC33QD/zFG71cvhCLTz+dfu9D73y61ItdwcIM=
Subject key identifier: FC:B6:34:EB:F3:5C:90:67:B8:90:60:EC:3A:7C:CB:65:48:66:90:8B
Authority key identifier: D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
Certificate issuer: /CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Certificate serial: 019A4F6259EBD8C8F8DFABE047374761E4E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: 1PvHTNH4egvxbEgvYgHJueskTqI.crl (hash: vs01YzbFVYnMv3mb4rrSV61ck3hCr51OQ3gbb+Hx27I=)
2: Lf04Gu4CGxYLcQBclc4AN9VDJLA.roa (hash: dSOlHoyFZA5kqNN/4PjLQn10doJUzZFyYe2NTurY+0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:59:eb:d8:c8:f8:df:ab:e0:47:37:47:61:e4:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4fbc74cd1f87a0bf16c482f6201c9b9eb244ea2
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=fcb634ebf35c9067b89060ec3a7ccb654866908b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:6c:27:b3:fd:9c:75:2e:70:2c:8c:9f:bc:
b5:eb:c5:d1:0b:b9:69:13:4d:d0:a6:84:ed:b4:e8:
8d:72:ac:43:47:11:dd:c7:2b:86:66:26:1e:3d:64:
60:26:06:4c:50:c7:76:db:f0:11:32:67:76:31:2a:
bd:59:22:af:7d:5c:3d:4b:d1:1d:28:1d:5e:67:05:
b0:38:a3:90:42:c9:a1:f5:cf:90:a0:48:52:5b:f3:
a5:0c:b9:82:ca:dd:5a:91:ed:10:fa:f4:2d:4e:4c:
9e:a6:e2:89:34:a8:fa:b8:61:2b:07:87:df:c4:be:
a5:78:27:fc:36:60:9a:fb:58:d3:8a:b3:e7:8c:6d:
59:c7:4c:63:f6:0d:55:a8:b7:a8:84:a8:96:44:ad:
b2:72:f9:68:7c:0c:3b:dc:57:d8:a8:dc:b5:f6:89:
ca:25:c1:55:27:19:2d:28:6d:b6:b4:48:41:ab:9d:
63:4e:ca:17:c6:2f:97:d0:71:54:e4:f2:ef:c4:4d:
e7:83:31:e2:6a:aa:e3:20:fa:bf:38:8c:77:be:81:
4b:c6:c4:09:fc:0b:2b:d0:a2:84:a4:51:1a:10:4b:
bd:2b:0f:fe:d0:55:8e:b6:00:61:6c:fe:0a:9f:a2:
5b:92:c5:ba:d7:c7:09:a2:c5:2d:88:a4:f3:69:58:
95:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B6:34:EB:F3:5C:90:67:B8:90:60:EC:3A:7C:CB:65:48:66:90:8B
X509v3 Authority Key Identifier:
keyid:D4:FB:C7:4C:D1:F8:7A:0B:F1:6C:48:2F:62:01:C9:B9:EB:24:4E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PvHTNH4egvxbEgvYgHJueskTqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/87312c-69c4-4813-b740-1c9667730534/1/1PvHTNH4egvxbEgvYgHJueskTqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:95:d5:dd:c6:20:62:af:2a:14:20:2c:3b:be:94:35:2a:41:
07:44:10:0a:a4:bf:a9:63:ef:39:ac:a7:4d:a5:0e:ec:84:b3:
ac:5c:42:ed:47:32:69:db:b3:ce:a2:1d:df:f0:48:07:81:55:
2f:f9:00:45:46:73:f2:5e:d6:4d:a7:69:f5:09:27:05:55:96:
bb:eb:29:86:9a:e9:f1:57:f6:c9:76:1b:cd:44:f6:68:25:ce:
29:c4:f6:25:d0:96:ce:81:7e:22:4f:fb:48:3a:ba:d0:34:54:
67:bd:23:b1:f5:94:a5:97:43:e0:74:9c:71:56:55:b8:d5:f7:
87:d0:a1:66:12:63:7a:65:d9:be:8c:dd:1b:95:b1:98:b2:1e:
cc:1c:a9:19:70:8b:86:9d:b8:74:3a:d6:17:f0:e7:f5:9e:be:
60:4b:6c:08:3c:b0:5f:8d:a6:11:09:8e:61:1a:b1:d7:9d:11:
b4:1b:fb:b8:f2:fe:3c:6f:eb:99:df:96:85:7e:01:cb:95:c5:
cc:0d:e0:1a:ec:c8:a8:fc:c0:aa:c8:0b:6c:1c:6e:d4:00:e3:
ab:9b:15:5d:33:40:84:3b:09:6d:52:57:94:3a:b3:9f:a7:d6:
c9:c2:cf:ea:6f:5d:4a:97:8a:b3:ee:f0:95:c2:01:10:b1:29:
53:cf:98:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:33 2025 by rpki-client