Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier: FOuvM/oqmN3aSsgC3QTS/itPDsjB1KlWY/CwOgmtWTI=
Subject key identifier: F7:F1:58:72:67:FA:69:7B:31:EC:90:E6:8F:AF:04:C5:F9:9F:31:78
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 019A4E869B6E71A96A1BF4DC4663F5B46620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 11:00:35 +0000
Manifest this update: Tue 04 Nov 2025 11:00:35 +0000
Manifest next update: Wed 05 Nov 2025 11:00:35 +0000
Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: kDqLeMikgGI+NaTqiPGy+TvNQ/NQyuwIDO2k0C9SWXg=)
2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:9b:6e:71:a9:6a:1b:f4:dc:46:63:f5:b4:66:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Nov 4 11:00:35 2025 GMT
Not After : Nov 5 11:00:35 2025 GMT
Subject: CN=f7f1587267fa697b31ec90e68faf04c5f99f3178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a9:71:00:79:85:a6:e8:34:47:40:5c:bd:99:
16:f2:bf:24:2c:81:13:65:9f:1e:0e:44:8d:b4:d6:
7a:66:af:e1:8a:5b:1e:2c:65:17:63:de:7f:81:5d:
5b:e9:8a:6c:07:ff:48:31:ae:ec:65:79:fb:12:7d:
7e:24:29:02:aa:44:31:cf:f6:73:6a:cd:e2:c7:56:
f8:08:51:ef:ac:48:38:c1:71:16:39:a4:cf:e8:32:
11:5e:cf:fd:ed:48:5f:d1:07:c4:4e:96:b0:7b:a1:
ae:fc:ce:f3:fd:6a:17:47:ad:78:49:1a:94:f5:ed:
62:af:f2:54:5e:da:a1:c9:37:d0:73:4e:3b:22:8c:
63:9e:f4:cc:c7:b1:59:67:ff:7c:08:80:31:72:a7:
5b:30:e1:eb:5f:30:b6:a9:2d:5f:2a:50:33:67:3c:
61:f3:f4:62:07:d6:ef:0f:1c:33:a7:b2:cd:2e:89:
cd:27:33:5f:b6:ca:15:17:5e:11:54:2b:24:b7:3e:
1f:82:f9:97:f3:f4:77:cd:80:8a:41:b8:0a:a3:4e:
ce:d8:5f:3c:1c:e3:44:f3:84:e0:4f:27:80:21:5b:
29:f1:df:be:d1:4c:55:51:c3:2c:9d:9e:82:e8:fd:
2f:fc:83:d3:a8:52:8e:76:a8:a1:59:7d:59:91:7a:
73:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:F1:58:72:67:FA:69:7B:31:EC:90:E6:8F:AF:04:C5:F9:9F:31:78
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:3a:dc:bc:52:ad:22:d3:ee:fe:1b:78:98:75:e3:45:19:
5a:30:4d:ed:df:b9:70:68:db:d0:4f:dd:06:50:a2:1d:55:a1:
ee:b9:ea:11:3d:9c:b8:24:d5:23:56:fa:ee:43:27:58:9d:d7:
c0:a7:78:1a:a5:69:a3:b4:56:55:74:a6:5b:d9:61:dc:bb:b7:
98:14:d7:b8:ea:cd:a1:f5:a5:c5:de:e8:96:b4:cf:fd:61:e2:
7e:b5:5b:3c:27:98:52:55:5d:af:db:93:cd:fd:bd:6f:80:ff:
71:52:9c:74:d4:08:ff:0a:c3:5f:9b:33:15:9e:4d:b9:d7:8f:
96:40:0d:df:80:dd:12:91:29:6a:d1:3c:ef:c5:04:7c:0e:4a:
92:b7:f2:63:c7:4f:93:e7:c0:23:18:9f:08:a8:ca:3c:81:a9:
ec:3f:ef:46:bd:80:f7:7f:2b:25:c0:15:49:29:af:a8:fc:99:
f9:cc:ac:58:ef:0f:ac:50:61:b3:21:ea:3a:a5:cf:6b:88:34:
3d:49:26:03:6b:8a:e4:39:02:4e:e7:11:1d:23:d4:ae:a6:fa:
e1:5f:e6:30:5b:a1:8e:18:d3:52:54:fc:38:b9:67:1e:a5:d7:
82:41:37:e7:f9:1c:b8:63:25:36:f5:31:0f:ff:c4:7d:4d:be:
6a:53:b0:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:45:05 2025 by rpki-client