Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
File: 1a8gwCbeEE2W8XrLr054fvnTAgY.mft (raw, json)
Hash identifier: JbVgZ1Ndaae5wdzqegeEPaGBZfmEeD3mfX8kJYhxIBA=
Subject key identifier: 57:C1:94:81:C1:39:75:D1:BC:DC:2E:61:BA:28:99:51:7C:1F:73:96
Authority key identifier: D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
Certificate issuer: /CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Certificate serial: 019A4FD098D5E640C38010433A7FD7026DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
Manifest number: 0B4C
Signing time: Tue 04 Nov 2025 17:01:01 +0000
Manifest this update: Tue 04 Nov 2025 17:01:01 +0000
Manifest next update: Wed 05 Nov 2025 17:01:01 +0000
Files and hashes: 1: 1a8gwCbeEE2W8XrLr054fvnTAgY.crl (hash: 8LY1AMH5d9GxaRi/cDvxRcdue+ajETgsPtZ25C8ufD8=)
2: ZntZKX2L_8Ma0koJ3HPW10lURHI.roa (hash: OJbq7vowsXJwKs2XlYdhIC+ZaJvxn8OPWmKWbar3xew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:98:d5:e6:40:c3:80:10:43:3a:7f:d7:02:6d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5af20c026de104d96f17acbaf4e787ef9d30206
Validity
Not Before: Nov 4 17:01:01 2025 GMT
Not After : Nov 5 17:01:01 2025 GMT
Subject: CN=57c19481c13975d1bcdc2e61ba2899517c1f7396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f6:da:c2:1f:01:65:b2:6c:a1:2f:1a:72:c1:
b0:e0:b0:dd:45:81:61:33:a1:47:e5:43:58:88:d3:
e1:0b:93:b6:22:c5:03:e8:7a:85:95:84:e1:3e:7c:
a2:0d:e6:f0:1a:ae:4d:6b:79:55:97:47:1b:7b:f5:
ec:6d:be:0a:26:40:17:68:31:8c:49:08:0d:c5:9b:
c4:ec:e6:ff:da:87:ce:a2:53:07:b3:a4:9b:b5:ec:
55:ed:9a:be:2f:ea:6a:3f:31:e9:73:95:85:3a:b7:
28:ee:a2:92:d7:1d:22:75:c9:fc:ab:0d:94:39:c9:
e3:9e:dd:57:7d:c2:fb:64:7b:cb:a3:9f:a4:40:d8:
3b:86:b8:e0:20:e4:55:af:fb:bd:80:8f:67:d7:c1:
51:93:aa:db:3d:82:12:30:d1:72:f3:07:78:c2:2a:
71:88:6b:a4:b1:d3:5e:92:28:b4:f5:01:2e:5e:46:
5b:e8:f5:b9:03:72:90:8d:7d:23:0b:ed:7c:05:da:
71:1e:00:6f:ab:9d:84:3b:5b:f4:b1:d8:ee:2d:01:
8b:14:2d:e0:3e:4c:39:48:e9:13:e7:9a:d7:ad:28:
a7:56:00:8a:a0:65:ee:16:57:81:3d:f5:f8:2c:1b:
d6:76:4f:30:34:f6:be:10:69:4c:27:c2:8d:a2:8e:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C1:94:81:C1:39:75:D1:BC:DC:2E:61:BA:28:99:51:7C:1F:73:96
X509v3 Authority Key Identifier:
keyid:D5:AF:20:C0:26:DE:10:4D:96:F1:7A:CB:AF:4E:78:7E:F9:D3:02:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a8gwCbeEE2W8XrLr054fvnTAgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/09d72e-8267-4393-8363-89f1815d4c19/1/1a8gwCbeEE2W8XrLr054fvnTAgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:bb:37:48:a3:2f:c2:78:df:6b:ea:22:e9:3e:8b:5a:59:3d:
54:0b:25:3f:de:71:c3:bf:00:8d:0b:73:3e:86:d4:b0:f0:f9:
21:37:25:7a:35:a7:85:84:f3:ff:2b:77:64:c1:5a:8a:21:63:
e1:07:f9:c4:41:a3:c9:fd:bc:c0:a0:f5:99:5d:86:60:5c:fa:
2a:9c:95:33:91:9b:30:8d:1d:c0:2e:79:35:0d:9f:91:a5:65:
5c:39:79:2c:f3:00:aa:1c:cb:4b:10:9b:05:32:65:59:5f:43:
43:6e:97:10:a0:ed:04:73:be:44:9f:58:df:d1:8c:31:21:c4:
72:66:d8:a0:71:cf:aa:33:8f:37:c2:be:c1:1c:54:c7:da:2d:
d6:83:19:59:40:44:f7:a8:23:af:0f:38:24:84:f3:0d:1d:5b:
6b:73:bd:45:ca:74:33:78:69:83:da:3a:f9:6a:c2:25:84:16:
7f:e6:2a:95:26:92:cf:0a:11:e0:3c:51:8f:d6:19:f5:fd:be:
6e:29:88:13:eb:a2:42:c6:cc:54:99:83:e7:7b:7b:ef:df:ab:
bd:5f:d0:bc:88:e1:35:c7:bb:11:a9:10:8e:1a:6d:73:fd:79:
02:9f:fd:1f:57:d4:17:4e:9d:15:67:b7:8c:0a:d2:88:d6:59:
e0:f7:44:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:47 2025 by rpki-client