Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
File: 1bFX6mgu908PHvZ_oekWDRfNLpM.mft (raw, json)
Hash identifier: RnmCb8meYGN9TQ4iKjxgZxmY4djLmbo8kYBrkoLhfnM=
Subject key identifier: 30:1E:58:C3:AC:0B:CC:43:D6:59:C0:32:91:D9:8C:94:4D:98:B6:F2
Authority key identifier: D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
Certificate issuer: /CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Certificate serial: 019A50E398499508BC40EA986110A921C9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 22:01:24 +0000
Manifest this update: Tue 04 Nov 2025 22:01:24 +0000
Manifest next update: Wed 05 Nov 2025 22:01:24 +0000
Files and hashes: 1: 1bFX6mgu908PHvZ_oekWDRfNLpM.crl (hash: lUzLQjFNXS1AQLLoym35PNUvXVScSxDT3sskF/Su2u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:98:49:95:08:bc:40:ea:98:61:10:a9:21:c9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b157ea682ef74f0f1ef67fa1e9160d17cd2e93
Validity
Not Before: Nov 4 22:01:24 2025 GMT
Not After : Nov 5 22:01:24 2025 GMT
Subject: CN=301e58c3ac0bcc43d659c03291d98c944d98b6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f5:37:d2:6c:df:11:c3:c5:9b:2a:38:5b:07:
64:19:68:c9:55:37:2b:d8:98:70:60:b5:77:b8:2a:
3f:55:eb:ce:92:a3:77:a8:9f:4b:d0:cb:8f:a6:8a:
5f:21:4b:ca:55:c9:1e:b0:e4:52:e9:be:a6:6d:7c:
fb:48:b0:60:e9:47:bc:fa:27:53:69:59:48:99:a4:
1e:6b:d4:cc:68:bf:37:b0:23:1b:04:97:36:71:f5:
d9:30:10:35:1d:56:dd:49:d0:fc:4e:4c:f2:14:5a:
7c:73:1b:96:2a:f5:10:32:ac:43:ff:44:8d:78:0b:
88:8f:de:bf:d7:15:09:f9:d8:ef:98:bd:fe:aa:49:
17:6a:38:fd:8f:1d:7d:e9:e9:c1:3c:27:68:4d:40:
62:38:bd:38:98:d8:2c:10:8f:38:bb:74:6b:18:c8:
3d:a6:ba:5f:7a:77:e7:4b:e4:4e:04:2c:93:f6:a9:
c2:56:ab:98:6c:a2:07:8b:b8:65:10:9e:87:4b:0e:
1b:aa:b8:f7:00:78:10:e6:b4:7d:d2:4d:24:ac:4c:
68:9c:91:0d:95:42:f1:0e:51:fd:ff:e3:88:df:a0:
c2:d6:8c:8d:54:4a:6a:f6:6d:37:9a:e2:24:20:7d:
84:38:36:8a:c7:59:bc:44:33:82:55:4a:67:c8:0b:
25:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:58:C3:AC:0B:CC:43:D6:59:C0:32:91:D9:8C:94:4D:98:B6:F2
X509v3 Authority Key Identifier:
keyid:D5:B1:57:EA:68:2E:F7:4F:0F:1E:F6:7F:A1:E9:16:0D:17:CD:2E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bFX6mgu908PHvZ_oekWDRfNLpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/f76e8c-82b3-47d4-b4b6-021c9eec0077/1/1bFX6mgu908PHvZ_oekWDRfNLpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:30:62:70:9f:55:d9:56:ce:83:b6:07:09:55:77:b0:e0:95:
93:60:da:87:fb:08:18:e4:ca:90:81:65:53:64:5b:6e:b3:95:
b3:9b:63:9b:a3:df:7e:b8:42:34:03:e5:e7:59:02:fb:f7:ee:
2a:d9:ab:98:1d:ad:5d:e9:9b:88:01:18:05:bd:25:c2:91:cd:
fc:cc:3b:8a:9a:2e:02:e6:ee:89:b7:2c:90:6a:ac:7a:b0:19:
b9:1a:9d:df:86:3c:f2:1e:95:a7:4d:60:46:48:f0:d3:22:ce:
db:87:f2:b6:7d:09:b6:dd:4c:5f:0c:ba:37:ca:fc:af:99:f3:
cf:58:14:a5:7e:17:a6:71:36:62:d1:4e:c0:b0:3b:64:01:ed:
0d:29:c0:c1:0c:92:bf:76:72:31:09:16:12:ca:52:35:dc:7b:
99:ba:cd:44:b6:ad:91:fb:ae:7c:bc:98:2c:a4:79:62:df:7b:
23:05:d9:d0:7a:a3:90:99:55:42:c9:7b:e7:e2:9b:06:cf:03:
80:51:10:b2:d3:fa:a1:c4:d0:3e:36:46:21:e3:46:d3:e6:e2:
9c:d9:97:72:ba:dc:55:d0:07:67:a2:7f:cc:60:a5:a9:ea:e0:
b5:b3:68:69:ad:e1:4c:04:b0:55:fa:f8:03:91:c6:97:be:85:
83:6c:b1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:29 2025 by rpki-client