Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
File: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft (raw, json)
Hash identifier: qU7ZC2IsaW0vg1NzmgAg3Ec8vXrKNnH6XfQCZm6h9Is=
Subject key identifier: 8E:59:9A:F7:2A:C0:F3:3F:90:B0:13:D5:4B:D6:F6:92:69:E1:A7:69
Authority key identifier: D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
Certificate issuer: /CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Certificate serial: 019A4D0672E201B7E23475F3F084077FC022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
Manifest number: 0C3C
Signing time: Tue 04 Nov 2025 04:00:59 +0000
Manifest this update: Tue 04 Nov 2025 04:00:59 +0000
Manifest next update: Wed 05 Nov 2025 04:00:59 +0000
Files and hashes: 1: 1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl (hash: Rn6+WspKCgy803ialbcXxqv5Xk7Y7/9awBnhz7DeQGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:72:e2:01:b7:e2:34:75:f3:f0:84:07:7f:c0:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7187a0abb3eee4110338b7d8f3f7e7e125be6c4
Validity
Not Before: Nov 4 04:00:59 2025 GMT
Not After : Nov 5 04:00:59 2025 GMT
Subject: CN=8e599af72ac0f33f90b013d54bd6f69269e1a769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:4e:bf:63:75:d5:66:c2:3b:f2:d7:87:80:
e6:38:72:51:d8:75:b0:72:93:97:e4:97:6c:50:93:
da:5b:98:c9:d3:aa:28:43:07:ba:72:9e:86:74:8a:
91:e2:b9:70:95:af:ca:77:00:ed:38:b0:ff:5b:6b:
c6:7f:8c:29:86:0e:61:d6:9e:63:8e:81:04:6b:38:
ee:01:11:f1:ba:32:66:da:38:72:d2:5b:4d:42:9c:
40:4e:5f:dc:48:8e:ff:bf:75:5d:f6:2e:21:c9:29:
18:48:e0:ca:a8:8a:d2:bb:4b:77:e2:8d:d4:dd:b0:
9d:fb:7a:3f:c5:7d:c7:1f:d0:15:88:6a:f9:30:7f:
14:94:46:46:79:f7:69:11:bf:7e:75:7f:1d:47:56:
8c:96:8c:d7:1f:cf:a9:60:03:c0:a6:66:2f:77:a4:
66:0f:38:49:d1:73:a0:03:e4:64:60:2f:76:09:cf:
95:ac:be:8f:bf:c5:0d:cd:b2:10:2a:87:9d:3f:58:
0f:5a:83:7e:ba:5c:2e:ef:8c:20:93:f3:36:79:c8:
4d:fb:3a:f6:51:c6:ca:7a:a6:9a:1b:ce:81:a2:c8:
70:f6:9c:30:9c:7e:6b:9a:4b:64:59:78:7b:05:11:
b9:f1:bf:75:4b:57:38:3b:9d:4c:d9:7d:84:f0:d5:
e5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:59:9A:F7:2A:C0:F3:3F:90:B0:13:D5:4B:D6:F6:92:69:E1:A7:69
X509v3 Authority Key Identifier:
keyid:D7:18:7A:0A:BB:3E:EE:41:10:33:8B:7D:8F:3F:7E:7E:12:5B:E6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/a17eff-a89d-4a3b-a461-c80391eac9e6/1/1xh6Crs-7kEQM4t9jz9-fhJb5sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4b:71:ba:c3:64:a3:5d:4b:3b:e2:f8:d8:d0:5b:52:f1:92:
47:6a:5d:e8:aa:75:d9:6d:a9:fe:35:66:0c:99:69:55:0d:49:
3e:9c:d5:1b:9e:23:02:48:f3:b8:87:bb:7a:e4:78:91:61:09:
f7:1d:6a:d2:1d:f2:0d:01:73:bf:58:6c:4b:f8:d6:c3:06:b0:
40:df:f1:9c:9e:f8:99:dc:8f:1a:bb:e7:a7:58:60:b4:d8:66:
08:bc:b7:cc:ab:30:f2:1c:b7:c4:ea:a1:ac:57:ae:cc:59:ce:
6f:e9:4e:1c:2c:a1:37:34:81:7b:ef:3d:dc:f2:24:61:e2:02:
f1:59:5b:fb:c8:53:26:48:ce:f5:76:dd:92:85:eb:34:c4:58:
62:0c:c4:a0:3c:af:34:c4:ec:28:9b:b4:a9:0f:7b:f4:01:3d:
9d:9e:26:0b:54:67:73:42:e5:08:e2:b0:b8:62:09:04:9a:c0:
31:ea:71:30:44:1b:1e:6b:3c:ae:11:bd:b5:3b:e4:19:54:94:
77:35:31:3c:bb:c3:14:ca:c8:5d:e7:5c:6d:cc:f3:a9:ad:02:
ce:9e:fa:08:a3:f7:da:b7:93:d2:29:6e:5b:c5:fa:08:2e:b0:
60:c6:4e:b1:23:dd:6b:d7:65:db:45:f1:97:01:4b:15:81:a1:
00:ba:d9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:46:34 2025 by rpki-client