Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: kGAg2QcG4dx/fErlt2lqcXdYE5xpOZTJbxFXKgijt+A=
Subject key identifier: 8F:6F:31:4A:34:19:C2:E5:E3:31:1E:4A:59:A4:17:DA:15:92:D5:61
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 019A5376402A6B67E7078A1C2D8475DBDD8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0696
Signing time: Wed 05 Nov 2025 10:00:49 +0000
Manifest this update: Wed 05 Nov 2025 10:00:49 +0000
Manifest next update: Thu 06 Nov 2025 10:00:49 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: V8sUiAHuNpIzOOCcVh14e5vBka2mJzwjRNf7wWlncN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:40:2a:6b:67:e7:07:8a:1c:2d:84:75:db:dd:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Nov 5 10:00:49 2025 GMT
Not After : Nov 6 10:00:49 2025 GMT
Subject: CN=8f6f314a3419c2e5e3311e4a59a417da1592d561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:05:a2:f1:e2:f1:61:93:97:a8:d6:52:63:79:
a7:01:94:94:87:a0:dc:9f:c2:29:01:1e:9e:cb:8e:
eb:25:c3:7a:dc:fe:fe:f4:4b:be:64:91:e1:e2:df:
54:25:75:1d:e7:a6:d5:16:d4:45:c5:8a:a1:ef:c6:
8c:05:78:b2:5b:ad:0f:20:64:a2:3c:59:08:02:c2:
32:3a:76:39:e1:5c:87:4c:7a:23:1f:b5:aa:a4:01:
cb:48:4d:99:48:73:d9:67:65:97:3b:e0:3d:29:71:
05:e8:05:0a:2c:29:e4:3c:4e:1d:14:31:f5:1b:8b:
b4:50:0f:f6:cf:f1:22:34:4d:d9:10:2f:8e:a0:a1:
5d:c9:fc:68:11:88:7c:7d:dd:00:e3:95:19:81:ec:
35:91:64:28:d9:ae:a5:8e:b3:ff:f9:4a:e3:ba:42:
8c:3d:c5:29:62:71:3f:54:c8:0a:9a:20:c2:ee:49:
6f:68:bd:7b:a7:27:40:ba:1d:67:53:7d:98:6e:42:
9c:ba:6e:d4:42:62:49:50:0e:23:1c:65:f5:3c:1b:
d5:b5:13:29:04:4a:f6:76:9c:4a:5d:b3:35:4c:9d:
7f:d9:9c:a6:f0:28:95:02:b5:e9:59:ab:ea:9e:35:
8c:94:c0:82:41:d6:72:94:3b:ce:bc:5b:ca:de:b6:
a9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6F:31:4A:34:19:C2:E5:E3:31:1E:4A:59:A4:17:DA:15:92:D5:61
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:54:42:49:c0:71:ff:44:5f:c9:f0:f4:c8:d0:c2:55:26:30:
31:91:76:b7:5c:43:ec:c4:e6:73:81:36:6c:c1:d8:4d:d8:96:
11:d0:0f:89:71:fc:21:55:49:14:44:c0:97:4d:30:33:5d:28:
4f:86:6f:f2:6a:12:0c:1f:38:52:30:9b:d9:70:37:8f:a9:e5:
61:94:3b:d8:16:b5:df:fa:9b:87:4c:8e:83:b4:96:2e:10:30:
58:ea:76:87:bd:c5:fe:40:c1:87:af:7e:86:1d:84:b8:2a:e3:
59:f4:d7:71:25:00:fd:d5:be:f9:46:f3:a1:f7:81:8d:f7:2a:
33:6f:fc:8e:79:73:f3:3d:9e:da:17:78:c5:ce:d4:cd:be:01:
96:b5:1a:bc:fa:4c:7f:30:21:19:3a:31:41:9d:39:4d:e1:fa:
8c:4e:9d:01:50:27:09:83:b4:0b:10:a0:ab:0b:fe:66:1c:7d:
7d:8b:e4:d9:f0:9a:05:14:27:d7:ed:68:a4:3a:ce:3c:07:39:
e3:ec:9b:03:7f:25:dc:64:c0:dc:76:84:b8:86:63:4a:fd:e0:
77:0b:95:b8:56:bf:c9:50:80:12:d9:6a:fd:88:99:55:43:4e:
21:3b:30:de:17:3b:2b:67:2c:3f:27:98:df:dd:b0:9c:c6:2e:
57:c2:51:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:19:46 2025 by rpki-client