Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: KNEtywVc0uurb6aTs+9TrKnrVaIIHsqmJEaH0RpTXZ8=
Subject key identifier: 8A:38:DF:77:7E:CB:8C:7A:70:0E:1B:FC:5B:46:35:3A:8E:2F:84:22
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019A4E4F349E6DF611816D551CE8181E6DEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 13F1
Signing time: Tue 04 Nov 2025 10:00:04 +0000
Manifest this update: Tue 04 Nov 2025 10:00:04 +0000
Manifest next update: Wed 05 Nov 2025 10:00:04 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 4GwoG9uiwEsCC3HWn7QkBRP71QpRmuW7H/N9AnvXQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:34:9e:6d:f6:11:81:6d:55:1c:e8:18:1e:6d:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Nov 4 10:00:04 2025 GMT
Not After : Nov 5 10:00:04 2025 GMT
Subject: CN=8a38df777ecb8c7a700e1bfc5b46353a8e2f8422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:76:a5:b9:54:11:8d:d1:66:d3:d8:71:96:
7d:91:11:c8:48:35:dc:fe:e6:9e:b6:a0:6a:df:7c:
73:ea:e9:51:d6:1a:e4:c7:f4:b6:a2:b4:f9:3a:15:
78:38:9d:d1:b9:f9:f2:94:fa:0b:7e:63:32:c5:c9:
f1:1f:4f:6a:2c:3a:d2:9e:05:11:f3:cb:2b:e1:6d:
e8:9a:5b:fc:59:dd:a4:ba:e1:6f:75:ca:b3:40:e3:
92:b7:f4:88:58:de:1c:42:83:71:ec:b0:77:4a:96:
a3:61:c5:79:a7:be:81:5a:7e:5c:e9:c5:06:6c:af:
82:b5:ac:7d:5b:cf:db:04:09:58:57:c7:5e:2c:7f:
77:3d:f3:d2:10:86:3d:49:f6:05:75:2e:cd:b5:1c:
b9:59:95:88:b9:ad:1f:c3:6e:95:69:a9:4a:b4:84:
90:a3:9e:2c:fd:00:d0:f4:ef:ee:7e:73:6a:21:5a:
18:32:fb:0c:8d:a3:f5:67:2f:88:1a:b4:fc:3a:77:
bd:19:4f:fb:1e:9b:10:31:21:6f:72:93:16:dc:f7:
64:02:e1:72:46:0f:86:da:1f:72:e8:b2:7a:ff:5a:
ac:23:e1:42:88:21:92:4f:ae:81:ef:aa:ac:cf:ba:
15:d1:23:59:a8:55:a8:a1:98:bb:36:9c:a4:d5:27:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:38:DF:77:7E:CB:8C:7A:70:0E:1B:FC:5B:46:35:3A:8E:2F:84:22
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5b:83:7c:25:72:5b:b0:9e:46:a7:cc:a4:0a:9b:50:a0:fa:
f9:ed:dd:2d:c8:01:0a:46:53:dc:db:31:39:89:77:7f:05:34:
32:b6:fb:ec:ac:a6:ad:79:8c:2b:e1:69:63:3f:f5:df:fe:a1:
a2:d3:76:da:99:90:4d:62:c8:a4:4f:15:c9:dd:68:e4:3e:fb:
30:cd:d5:cc:35:fd:fb:ee:26:10:6d:49:60:06:c2:5a:ad:16:
97:2c:38:ad:12:1b:57:8e:c9:67:4c:0e:69:91:0d:0b:02:97:
1d:e0:61:b9:ec:df:46:d5:7e:22:3a:f9:0f:02:ba:e9:dc:e9:
e3:68:cd:33:4e:43:26:0a:ac:18:db:f1:10:da:90:f8:ea:27:
ce:a8:b8:68:54:15:68:8a:2e:db:1c:78:0e:ea:e4:cf:d3:88:
d7:b0:aa:04:25:44:ce:fc:2b:db:a9:8a:86:be:98:1c:14:3c:
e5:e9:22:cb:2b:a1:ab:36:73:9e:9c:66:ea:70:25:3c:4c:e6:
e6:43:cd:f1:98:0f:05:54:44:63:58:bc:e2:a9:31:32:dc:e9:
6d:80:5f:8d:e1:e2:d7:29:20:8d:2c:b0:49:72:66:17:b9:1e:
88:71:8a:98:d1:32:d7:26:1f:eb:53:42:f9:b8:57:21:03:c5:
37:e8:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:45 2025 by rpki-client