Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
File: 1hVJ9XWwR7y9wz59LTbtqEcf3so.mft (raw, json)
Hash identifier: +wOYMZxUoAXSY1B4cjI2wyzHS9Sk1Ji9OtkDzU2v/Wk=
Subject key identifier: AC:A0:76:CF:28:17:07:EC:29:BB:9E:17:50:6E:A1:16:0D:A3:C9:35
Authority key identifier: D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
Certificate issuer: /CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Certificate serial: 019A522CC686E5A9477A5E6956265ED93338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
Manifest number: DF
Signing time: Wed 05 Nov 2025 04:00:57 +0000
Manifest this update: Wed 05 Nov 2025 04:00:57 +0000
Manifest next update: Thu 06 Nov 2025 04:00:57 +0000
Files and hashes: 1: 1hVJ9XWwR7y9wz59LTbtqEcf3so.crl (hash: 4lzskvuOLGymqSjQ5CFE5/MyGqQGS+N7o2N0j8ySOlk=)
2: vBgY54C9wF4igTn_ThI9AD2fAjA.roa (hash: QU8WNIR5SLJr3BG+FWmaZkiRSa43Txva+uD7lv+cdg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:c6:86:e5:a9:47:7a:5e:69:56:26:5e:d9:33:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61549f575b047bcbdc33e7d2d36eda8471fdeca
Validity
Not Before: Nov 5 04:00:57 2025 GMT
Not After : Nov 6 04:00:57 2025 GMT
Subject: CN=aca076cf281707ec29bb9e17506ea1160da3c935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a3:2d:c8:ed:c2:c4:07:96:bd:1a:6e:93:73:
fe:ab:db:ef:14:c8:c4:86:b3:4d:20:8c:30:f1:09:
68:94:2f:47:61:8b:5c:c0:ca:9f:2d:76:df:46:8e:
28:46:33:04:11:33:18:04:a4:60:ea:b3:c0:b6:c9:
16:be:cf:90:63:e6:2c:1b:71:0d:fd:26:9e:84:d7:
7c:02:c2:92:0c:78:31:1e:94:cf:49:ba:18:1b:af:
1e:83:04:9c:e6:32:23:56:e9:3c:fe:ac:b5:5c:7e:
b9:24:37:a3:69:44:29:df:72:0f:a7:a1:29:61:1a:
45:ab:f9:0d:72:31:d9:6f:be:14:0c:e0:61:67:d1:
71:b2:6a:fa:9a:dd:6e:48:81:97:a1:4c:9e:f7:7e:
2a:74:03:41:f9:b8:1d:c7:63:02:82:26:0c:0d:22:
ea:49:62:2d:33:49:be:fb:67:33:6d:a8:65:c6:b9:
9c:37:bf:55:fe:80:bb:55:2e:5a:2d:e0:6c:a7:96:
e6:79:e3:ec:c2:83:45:8c:d3:03:8d:1d:b9:cf:16:
c8:d2:e1:10:5d:b2:2c:cd:f1:94:2c:35:29:dd:51:
8d:6a:40:2b:64:e9:ac:92:76:9c:94:9c:d6:6e:d9:
81:fb:91:22:8d:ba:ed:b9:bf:6b:e3:d7:a1:ac:2e:
bd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A0:76:CF:28:17:07:EC:29:BB:9E:17:50:6E:A1:16:0D:A3:C9:35
X509v3 Authority Key Identifier:
keyid:D6:15:49:F5:75:B0:47:BC:BD:C3:3E:7D:2D:36:ED:A8:47:1F:DE:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1hVJ9XWwR7y9wz59LTbtqEcf3so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f6d25b-d543-422d-8b43-5fd098f3459d/1/1hVJ9XWwR7y9wz59LTbtqEcf3so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:54:d6:f1:4a:a9:10:30:04:f8:1c:71:94:3e:27:f6:04:c2:
0b:9c:f1:6e:0d:57:0b:53:74:75:dc:81:91:34:c2:92:5c:54:
06:0b:b6:bd:d4:9f:23:4c:dd:78:0d:d8:5a:e3:90:65:7f:c9:
41:68:80:c6:0e:5e:08:21:46:06:3c:21:51:d0:3a:75:bf:7f:
55:b6:4d:27:b5:2a:30:9c:b8:98:1c:6e:be:f2:68:2f:d2:26:
7d:a5:69:89:a1:85:e4:ee:85:ba:5b:3f:60:5d:9b:b6:9d:43:
b3:a4:a7:2e:f3:d5:13:27:65:a8:23:17:1b:d6:98:6a:e6:72:
c7:c3:6b:df:31:22:6d:d4:4e:1c:68:b8:84:57:51:99:e4:27:
e3:79:3e:fa:14:90:41:0d:59:88:d6:16:18:b2:49:33:b2:21:
d5:37:15:7a:c6:7f:c1:ee:2f:ba:2f:72:8c:c9:3e:b2:03:c3:
05:b1:8e:fb:af:6a:19:0f:0e:73:da:6c:b1:75:ff:2e:2a:0a:
2e:73:bf:45:74:45:a9:93:0c:f0:77:ce:c2:b4:d8:ea:66:5d:
0b:0a:99:1c:53:39:b1:72:5d:01:79:82:31:7f:b0:78:d1:cc:
92:5c:f8:36:ef:fb:d9:5e:c9:b8:15:10:9e:88:49:7b:9c:dc:
6b:39:f6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:06:03 2025 by rpki-client