Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: U92jKBfXl8GsR6ODPQ4ka96WkGicPcY00VcOmVOqkyk=
Subject key identifier: 88:73:08:0A:F0:98:72:47:4A:DC:F0:8F:F7:E4:7D:A0:D0:EB:CC:6A
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019A50077DC0D07D423FA4DACD13186B1BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 04A0
Signing time: Tue 04 Nov 2025 18:00:59 +0000
Manifest this update: Tue 04 Nov 2025 18:00:59 +0000
Manifest next update: Wed 05 Nov 2025 18:00:59 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: BvdpMYBnxHYa21CVP8yBMWgS5AXZ5KhUC3Po3C8smDE=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:07:7d:c0:d0:7d:42:3f:a4:da:cd:13:18:6b:1b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Nov 4 18:00:59 2025 GMT
Not After : Nov 5 18:00:59 2025 GMT
Subject: CN=8873080af09872474adcf08ff7e47da0d0ebcc6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7e:bc:3d:ff:ca:af:4c:f7:ab:a9:e3:5b:6c:
14:a2:3a:ac:a5:e6:03:6c:4e:75:f7:19:e1:24:0d:
9f:41:bb:eb:b1:64:5d:de:89:80:24:0d:06:7d:c0:
35:3a:b5:6b:78:74:fa:53:bc:55:eb:01:d3:1a:46:
56:f8:bb:7b:3a:d0:82:d9:76:c6:d6:45:27:17:d6:
c9:c6:37:8b:8c:72:c2:4c:38:34:47:4d:c5:f8:4d:
9e:79:52:e5:50:88:b6:67:43:6c:87:4c:01:6b:91:
43:37:ce:05:ff:ab:66:57:aa:df:ae:3e:54:01:8e:
ef:f9:bc:27:85:54:5f:e1:ad:86:95:e3:a2:3c:04:
96:97:65:97:a9:c4:70:60:f0:20:7f:16:b5:8d:d7:
ea:ae:70:99:44:88:7f:7c:17:65:e4:60:24:ce:93:
b0:c8:55:0c:d7:db:51:d4:cd:9b:a1:77:c7:7c:16:
0b:84:93:63:53:70:07:51:b5:4f:15:06:b1:fe:ed:
a6:0c:64:10:73:0d:d6:8c:09:7e:91:f4:ab:d6:0a:
97:ff:9b:ed:48:0b:2e:8b:ab:fc:94:99:a8:6c:9d:
01:06:2d:f4:ed:4e:81:fd:dc:28:ce:96:f5:77:ac:
82:9f:10:0a:12:12:af:2e:ba:2e:4c:3b:d2:d3:e7:
7f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:73:08:0A:F0:98:72:47:4A:DC:F0:8F:F7:E4:7D:A0:D0:EB:CC:6A
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:19:62:29:d6:d3:99:dc:23:cd:35:9e:31:a8:e6:61:96:1c:
13:46:41:7b:58:1a:4f:b7:09:1d:a6:70:2a:e6:a1:3d:c8:c7:
e2:12:92:83:25:63:c9:93:ea:96:b9:6c:7b:17:a1:fc:5f:5e:
88:f0:af:ef:c2:64:33:79:96:24:6c:ff:cf:b3:25:34:91:53:
82:4a:45:a1:96:c3:15:eb:bf:ff:6b:89:23:a4:b4:ff:fc:9d:
2d:a3:df:49:f5:5c:23:8c:64:5d:9b:b4:52:0e:65:27:ca:39:
73:59:34:ac:cd:75:e1:e3:76:ad:9d:e1:fa:36:03:e9:91:0b:
38:23:7b:79:22:0f:c5:b4:d5:c1:83:fb:f8:38:d3:fe:a8:22:
49:45:9e:62:59:ae:8b:ec:6d:52:9c:3a:e0:42:79:e4:e4:43:
62:9d:77:b8:e9:14:d4:0f:52:49:73:b4:b7:1c:b2:46:aa:47:
64:9b:d0:9a:8c:d9:39:02:e9:50:e9:c3:cc:e9:3b:bf:1a:f3:
ac:c0:ff:5d:46:8f:d1:72:10:83:38:75:8f:7f:ea:f1:77:e0:
63:05:6c:16:2e:7a:16:1e:a7:43:37:a2:91:10:e8:dc:e8:0d:
90:07:eb:32:7a:01:4d:d1:39:f7:6e:d6:fe:51:e5:fd:68:25:
20:40:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:42:02 2025 by rpki-client