Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
File: 1-ggEoOt5W4aCwn2inp-iKPFygwY.mft (raw, json)
Hash identifier: fEIfWy7+rwXwyWzYd5V4SxcGMvF/DMK96Bt1SXFeqa0=
Subject key identifier: 8B:C7:C9:28:10:78:0F:86:04:75:75:A6:54:C4:DB:3C:40:04:8B:35
Authority key identifier: FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
Certificate issuer: /CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Certificate serial: 019A5187A053C929F62B2688E43BB5DDAAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
Manifest number: 068D
Signing time: Wed 05 Nov 2025 01:00:34 +0000
Manifest this update: Wed 05 Nov 2025 01:00:34 +0000
Manifest next update: Thu 06 Nov 2025 01:00:34 +0000
Files and hashes: 1: 0Z-2mc7N_pHYIGxfIlO4U3iMW84.roa (hash: 99tzN5586TEAscs+FoMd66gq2ah//z8X0pHGL4hBGp8=)
2: 1-ggEoOt5W4aCwn2inp-iKPFygwY.crl (hash: Md4Yz+PCWg4wgYRBu+6+S8KF2cJsUeI0dmQmVHVUQgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:a0:53:c9:29:f6:2b:26:88:e4:3b:b5:dd:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa0804a0eb795b8682c27da29e9fa228f1728306
Validity
Not Before: Nov 5 01:00:34 2025 GMT
Not After : Nov 6 01:00:34 2025 GMT
Subject: CN=8bc7c92810780f86047575a654c4db3c40048b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:05:3d:7f:73:76:93:02:b7:2e:b7:61:38:d1:
bd:be:ee:44:24:60:7d:e5:c1:cb:79:6b:1a:de:68:
9b:c8:58:37:a9:4e:5d:1b:f6:4b:1e:06:d8:72:a6:
a1:59:f7:ab:5e:f9:dc:0c:3a:74:75:85:bc:97:83:
72:fc:75:77:55:44:6f:7e:ee:1c:48:42:ac:77:5a:
33:e6:90:bf:b3:7a:bc:7c:b1:50:7d:3d:8c:09:bf:
b5:12:e4:5b:63:07:35:47:ad:f8:ed:32:7f:94:4a:
d9:cd:93:24:f3:af:c9:de:1d:ef:30:dc:83:aa:08:
8a:80:0f:53:8a:44:f7:35:48:07:88:7e:57:da:32:
5a:e6:75:a2:b9:24:14:80:c9:73:6c:98:a4:02:e6:
72:50:a0:44:3d:86:f3:fa:b5:8e:b9:50:6b:45:2b:
94:86:fe:a2:b5:d7:17:64:5a:75:04:bf:82:9f:ee:
13:5c:55:77:eb:36:0b:f7:0a:a1:a6:c2:ce:0c:36:
89:89:29:6b:1f:3b:1e:95:3b:02:02:b5:b5:43:c6:
e1:83:57:51:ed:17:98:61:7f:f6:96:6b:97:62:bd:
a0:3e:9f:22:ae:c5:9f:9e:98:9e:2e:f9:ce:83:84:
e3:e1:ba:75:19:f2:28:5e:7a:52:ae:cd:3b:ed:f8:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:C9:28:10:78:0F:86:04:75:75:A6:54:C4:DB:3C:40:04:8B:35
X509v3 Authority Key Identifier:
keyid:FA:08:04:A0:EB:79:5B:86:82:C2:7D:A2:9E:9F:A2:28:F1:72:83:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ggEoOt5W4aCwn2inp-iKPFygwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/27fab8-0d25-4dbe-9f8a-426a8cdc8e49/1/1-ggEoOt5W4aCwn2inp-iKPFygwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:e5:e9:82:c0:68:de:a2:ae:c8:8a:a6:47:2b:9d:7d:22:
1a:74:57:f6:69:fa:8f:c3:df:29:d5:b0:57:96:cc:f0:ce:3c:
95:3b:0b:f6:39:38:ee:1c:6a:62:f6:3c:26:66:13:81:7a:01:
b7:4e:41:02:5c:3e:df:58:d8:4c:10:a7:78:45:ab:65:28:a4:
63:31:bc:8a:d1:c9:94:f9:10:3f:0e:38:e3:35:f2:b1:cc:ae:
72:f5:a7:fc:e4:a0:de:fc:94:07:b2:d7:a3:b7:ac:c4:72:a9:
d2:79:90:81:aa:4d:2a:d2:11:12:0b:f2:33:81:33:8e:b7:14:
56:7a:3f:26:a9:f5:e5:fc:3c:5e:82:8f:9a:a3:9b:9a:0c:5b:
b8:77:37:3e:78:1b:2c:31:bf:51:2d:98:30:31:62:56:d4:4e:
ce:a9:00:9e:53:93:02:35:5b:7b:36:4d:3e:a1:db:5f:55:9b:
b4:74:e4:5d:d3:9f:b3:9c:93:c6:e0:02:c1:3e:60:d0:5a:db:
49:12:17:0d:4a:97:a5:39:2a:b4:0d:f0:16:b0:95:bd:e6:02:
af:48:d5:9c:7d:7b:ee:19:89:02:20:5c:32:1d:3e:b8:1a:98:
ab:b2:26:76:21:0c:54:b7:85:27:2b:55:17:8c:53:a4:cd:01:
1d:ba:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:21:00 2025 by rpki-client