Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: PIM3TdLyCp6ZWHi+KZvBc7+0zV4w7vdYB7Pqd0Qxq4I=
Subject key identifier: 97:99:19:59:68:32:80:B2:6C:86:DF:8A:AE:87:7A:BB:3E:1B:3E:D0
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 019A52D28C904C34FD907C9C04B4CADDE866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 06BA
Signing time: Wed 05 Nov 2025 07:02:01 +0000
Manifest this update: Wed 05 Nov 2025 07:02:01 +0000
Manifest next update: Thu 06 Nov 2025 07:02:01 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: lseTPNuQ8OUBMj0CNHzgfBfpFtiJwLYDJTeq5rIMJKI=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:8c:90:4c:34:fd:90:7c:9c:04:b4:ca:dd:e8:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Nov 5 07:02:01 2025 GMT
Not After : Nov 6 07:02:01 2025 GMT
Subject: CN=97991959683280b26c86df8aae877abb3e1b3ed0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:dd:22:d1:bd:63:c3:6b:73:cc:f8:64:ed:
63:dd:cb:3e:95:21:4a:57:8b:2d:2a:ec:a2:3d:b6:
2f:ef:30:15:c7:22:a5:e9:cb:54:13:b8:08:07:53:
92:34:ee:5e:28:ea:2d:67:00:c7:af:a9:2a:2b:5d:
c3:19:5c:dd:51:59:c1:32:0c:74:a9:e0:4c:40:0e:
23:4b:10:7f:5d:3d:1c:44:cc:d6:67:b5:b2:ad:b9:
27:eb:70:d2:35:d2:04:c6:c0:df:f1:63:7b:f7:fb:
64:54:5e:74:b1:d7:28:89:d1:e2:32:73:c8:21:64:
6f:46:e0:41:79:7f:b9:29:ea:93:3f:77:42:5f:e2:
42:10:e3:d5:6f:36:33:33:09:6a:ff:79:0f:e1:f2:
31:0b:b8:ef:78:77:80:2b:18:54:41:ff:f5:d9:17:
43:e7:73:70:a0:5a:2c:54:73:02:43:62:e6:cd:2e:
1e:7a:a1:ac:a5:ad:b6:dc:b1:a1:5b:fa:90:d9:41:
00:71:9f:f3:7f:06:28:d1:34:43:38:61:20:4f:2c:
79:5f:09:81:1d:83:02:13:c0:f5:40:43:c5:87:a1:
28:53:f9:dd:cd:a6:d4:7b:71:a8:24:16:f9:8b:07:
a1:e3:d8:d9:73:6a:be:13:a0:09:a8:e2:21:cd:c7:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:99:19:59:68:32:80:B2:6C:86:DF:8A:AE:87:7A:BB:3E:1B:3E:D0
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:51:a1:21:7e:c8:0e:e7:d3:f1:77:d9:9d:c6:12:14:b1:
2c:01:f8:f8:93:00:f0:74:97:ad:e8:fa:93:92:83:aa:bc:b8:
95:a5:2f:da:66:42:b0:2f:b1:32:fa:ac:b6:57:50:f4:bb:15:
08:6e:c6:74:03:e9:d7:1f:50:ce:8a:83:1c:e1:dc:40:d2:28:
e8:b4:86:48:57:65:11:88:19:d7:a4:c8:af:54:87:7a:34:3c:
76:7e:bc:1d:32:8a:6e:53:5b:4d:af:b6:bb:9f:57:17:6a:da:
46:48:04:dd:54:fa:bd:fd:41:40:fd:92:33:1d:99:b6:ef:10:
b3:c8:f3:5c:fc:05:14:9a:72:19:29:67:c8:df:3e:66:ab:a6:
14:d6:56:e1:e7:ee:f4:ee:4e:69:47:a4:e6:8e:60:9f:f2:06:
0e:a0:d1:97:e2:5d:4b:f6:5c:79:33:2c:f3:63:96:3d:81:e0:
8d:88:4f:2c:ee:59:88:15:00:ad:bb:f9:d2:40:ee:b8:d1:2e:
18:f6:60:93:85:3a:48:d3:88:69:b4:89:fb:a1:b1:66:e5:45:
85:5c:3f:23:7f:05:aa:68:7c:54:48:df:62:c3:2d:1f:91:ab:
03:2c:83:0f:8d:49:fc:34:13:fc:90:4b:ea:b8:7e:2b:8d:9d:
b1:d0:32:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:04 2025 by rpki-client