Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
File: C-1D9AnLNc6153tW0LvJpMwtJpM.mft (raw, json)
Hash identifier: bvT8O07oQVQ1vODeQI6pLhy9N8+ZR2hmDc8RP2dzF9c=
Subject key identifier: FA:5A:3C:2A:63:37:3B:83:31:33:0B:2C:53:97:21:0C:CF:8D:C9:92
Authority key identifier: 0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
Certificate issuer: /CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Certificate serial: 019A4DE1D7556747C2665FBC8C9282A3338D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
Manifest number: 1699
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: C-1D9AnLNc6153tW0LvJpMwtJpM.crl (hash: hnQSwYqgDnyfNFpIv/z3r9pIIuOD6RUJRZmS0vaKZlw=)
2: sBhtRIsrLGDcCHm1OuhjaCUr2_0.roa (hash: Ua22PTmfzyT5DTnVC3xgijxYiy9LNm1nh8SzeYUTwDc=)
3: sZiCl9lv80fsle91xuU3_BKnt_s.roa (hash: FzOmDkg8UvmI+LcJN7K+9dJBFFV57UBgPrTOJAC0yec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d7:55:67:47:c2:66:5f:bc:8c:92:82:a3:33:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bed43f409cb35ceb5e77b56d0bbc9a4cc2d2693
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=fa5a3c2a63373b8331330b2c5397210ccf8dc992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:11:52:2d:59:27:40:44:a0:eb:08:fc:a9:
6b:13:e4:34:18:33:08:e0:4a:e5:9a:6a:51:10:7c:
4d:20:1c:07:4b:82:1f:ea:57:a3:32:e3:25:c9:48:
76:27:13:39:32:04:95:30:0c:fd:8f:d7:a4:2f:11:
b0:20:7d:93:d2:61:cd:31:64:6f:eb:53:5c:4a:81:
88:fb:87:d5:b6:a8:30:fe:a3:cf:6f:1e:71:54:55:
66:9b:af:09:31:17:a4:9c:bf:36:58:0e:2d:97:dd:
74:f5:91:fd:44:81:8c:58:5e:33:ad:a8:d7:a0:42:
12:a8:06:4e:c5:d5:eb:b5:42:b2:50:65:c0:e1:49:
1e:86:9e:a3:06:63:0e:6e:b4:dd:0f:8f:a1:47:d1:
b4:65:93:b8:c8:dd:73:e5:e9:62:e0:45:c1:c7:85:
99:e6:67:72:5c:b3:16:bf:34:85:ef:d1:b9:87:82:
a8:95:ec:45:f1:ad:36:d9:7f:b7:4f:9b:e3:5b:30:
34:0d:aa:af:c4:9e:a2:d1:03:a7:6c:a1:7d:01:41:
de:d8:25:7b:12:19:64:27:d5:3b:40:5d:0f:09:d2:
4f:13:a8:ca:39:81:1c:cf:de:af:f6:4b:62:b1:70:
9d:43:4b:4e:68:63:29:c8:e8:fb:3d:a7:36:7b:eb:
56:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:3C:2A:63:37:3B:83:31:33:0B:2C:53:97:21:0C:CF:8D:C9:92
X509v3 Authority Key Identifier:
keyid:0B:ED:43:F4:09:CB:35:CE:B5:E7:7B:56:D0:BB:C9:A4:CC:2D:26:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-1D9AnLNc6153tW0LvJpMwtJpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c743cb-8137-455a-a573-d808b1afa881/1/C-1D9AnLNc6153tW0LvJpMwtJpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:88:2f:3f:d0:0f:a5:f8:15:da:fe:34:d5:ba:27:bb:7f:c9:
d1:32:a1:3b:18:42:0b:a8:90:e8:d9:36:f7:c9:4c:23:9c:5f:
e3:de:26:9d:03:3a:01:27:16:ed:0b:b2:fa:b1:62:a6:5f:d4:
4b:7c:35:f9:a7:a7:43:39:0c:92:02:c4:16:81:ed:db:0b:cb:
30:1a:97:ae:0a:8b:24:ce:b0:eb:ba:36:24:ae:4c:32:c3:86:
e2:1d:a4:d8:7d:b2:92:8a:4d:db:ba:7a:ad:5e:a0:2f:ed:33:
9e:55:40:4b:1b:14:09:08:24:ad:11:5e:35:dc:21:1e:e0:a7:
ee:fb:66:be:e6:9a:83:bc:53:6a:60:80:ef:1f:16:5c:bc:c4:
e5:f9:b6:0c:09:af:b2:fa:75:71:06:85:29:27:0d:03:97:09:
d9:f1:e3:eb:e5:2c:6e:b7:f4:4a:62:12:df:c5:28:ef:29:74:
8c:dc:c8:7e:ba:65:c0:1d:1a:eb:bf:18:9e:23:4f:3a:f5:9d:
ee:3a:36:07:af:b6:35:1c:c0:1e:47:da:5c:d7:64:56:a5:66:
74:08:ce:37:cd:07:8f:3c:64:66:84:5d:02:22:7d:76:cb:9c:
f8:00:fa:bd:71:dd:1b:78:06:a1:b0:c2:42:b5:4a:0a:f2:ad:
c2:ee:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:03 2025 by rpki-client