Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
File: 1-75S2DTiaNxpiDApL95LY8faOS4.mft (raw, json)
Hash identifier: sJwM4jHcye/CU5XgzlvbiBo+wSgmme08tIYdKfDKM9g=
Subject key identifier: 1F:1F:32:DC:EA:44:88:D0:51:ED:95:13:74:8C:02:04:07:7A:AA:D0
Authority key identifier: FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
Certificate issuer: /CN=fbbe52d834e268dc698830292fde4b63c7da392e
Certificate serial: 019A4EF48A5AFD276C69BE0811FB5926B57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
Manifest number: 0C8E
Signing time: Tue 04 Nov 2025 13:00:40 +0000
Manifest this update: Tue 04 Nov 2025 13:00:40 +0000
Manifest next update: Wed 05 Nov 2025 13:00:40 +0000
Files and hashes: 1: 1-75S2DTiaNxpiDApL95LY8faOS4.crl (hash: zqrB7lffbuq6UCffCIi//7dznrvMedkAxx873iFxYh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:8a:5a:fd:27:6c:69:be:08:11:fb:59:26:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe52d834e268dc698830292fde4b63c7da392e
Validity
Not Before: Nov 4 13:00:40 2025 GMT
Not After : Nov 5 13:00:40 2025 GMT
Subject: CN=1f1f32dcea4488d051ed9513748c0204077aaad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0e:5e:07:b3:08:82:ee:f0:ea:8b:d1:3d:ce:
31:91:ee:be:53:d4:ec:fc:c2:c9:c7:18:2b:0a:6a:
8f:44:55:51:df:24:88:ea:d2:ad:88:d4:49:e5:eb:
7d:9a:b7:77:14:4d:b8:bf:64:43:13:f2:bc:f6:6c:
9c:9f:fa:91:ff:a2:7f:ea:84:44:a5:86:8d:3b:23:
fc:07:2c:b0:8e:e7:3f:2e:18:ef:be:70:5e:8f:0b:
a4:e2:44:c2:72:f5:7a:21:74:59:a1:83:41:05:bd:
a6:c1:e9:ed:a2:cb:2e:c0:49:1f:5c:4b:7a:7a:73:
bc:86:97:1a:f0:82:87:1b:22:a4:98:38:2b:ee:33:
b5:80:72:23:34:44:9f:1e:89:d1:de:45:36:f8:3c:
74:d8:5f:f3:b5:11:13:21:78:63:9e:95:97:5a:0b:
82:35:cb:ed:1c:3c:55:55:0d:a4:b0:eb:33:ee:43:
3a:68:e7:75:11:40:b1:3b:6a:37:48:62:fc:c9:9b:
dc:7d:c2:9c:ac:04:83:5a:79:ad:8f:38:ac:e0:83:
3f:d8:cf:74:2f:34:06:91:29:2d:35:9c:72:da:ef:
27:79:2b:71:9d:ec:8a:22:43:af:b4:f4:5e:f3:ad:
ce:7c:b8:7e:c4:bb:c1:bb:d4:df:6c:0a:36:a6:f2:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:1F:32:DC:EA:44:88:D0:51:ED:95:13:74:8C:02:04:07:7A:AA:D0
X509v3 Authority Key Identifier:
keyid:FB:BE:52:D8:34:E2:68:DC:69:88:30:29:2F:DE:4B:63:C7:DA:39:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75S2DTiaNxpiDApL95LY8faOS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/d84b7a-7eb0-46a2-8a8a-026626ae31f5/1/1-75S2DTiaNxpiDApL95LY8faOS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:94:97:33:bb:36:d8:cc:18:ca:13:33:26:fe:03:0f:09:5e:
9c:e6:4e:d9:1c:91:e5:12:ad:d6:0f:c0:a6:54:f4:dc:09:3f:
a9:1e:c5:8a:72:63:2e:21:88:db:d3:d8:c7:45:e2:35:68:b0:
92:30:c4:bd:28:51:be:91:f3:6c:de:52:fe:b4:1f:a8:0d:3e:
df:8d:3d:28:be:ec:70:1e:bf:90:a5:9e:15:c9:87:0c:97:5a:
13:c7:ed:b6:5a:94:c9:23:f4:0c:62:09:79:26:fc:57:0a:1e:
dc:31:ee:06:d6:fc:69:fb:7c:cb:f4:5f:57:6a:34:88:dd:cc:
c9:22:8d:4a:ed:f8:16:af:90:33:e3:8a:a1:e3:3c:c5:1a:6c:
5a:7c:ec:fd:ca:76:9c:96:a9:f4:4d:5e:14:2c:6b:b6:d7:ae:
fb:07:98:79:05:7d:89:d4:d7:ca:05:69:16:9f:53:1a:6a:e6:
7e:88:ba:a0:ac:32:3e:23:94:89:37:65:ea:74:87:1d:91:7e:
b9:07:68:12:c1:b2:39:cd:9d:81:34:52:a1:5e:cc:09:2a:a2:
12:00:fd:3c:76:d0:8a:33:85:d9:66:43:c8:fe:e2:72:66:24:
fb:11:16:a3:6e:f8:af:04:32:69:9c:bd:1d:9a:b4:29:fc:3b:
23:83:3a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:04 2025 by rpki-client