Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
File: 1-Rnh8_5ptOvf8CqahX58bCslMBo.mft (raw, json)
Hash identifier: vohTeadGpWRCbFkD3A0MBmEFwa/rbij6wB5JwCNnapw=
Subject key identifier: 27:BB:13:F7:98:C5:AF:02:88:6E:07:35:38:F2:0F:77:E8:C5:02:88
Authority key identifier: F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
Certificate issuer: /CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Certificate serial: 019A4FCFF03E2FE88FD4910C9FF426140974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
Manifest number: 13C4
Signing time: Tue 04 Nov 2025 17:00:18 +0000
Manifest this update: Tue 04 Nov 2025 17:00:18 +0000
Manifest next update: Wed 05 Nov 2025 17:00:18 +0000
Files and hashes: 1: 1-Rnh8_5ptOvf8CqahX58bCslMBo.crl (hash: JXwY3SK80EJBKyCMT7Q1VylRQsYIiIKMSxhx/LAp5o0=)
2: OwskQb4uWXAM3BST7CyJITEmG0A.roa (hash: kimIk4ViTfOZBO8RES3wd5ZfNkXzL5WJCpaQ5TXVjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f0:3e:2f:e8:8f:d4:91:0c:9f:f4:26:14:09:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f919e1f3fe69b4ebdff02a9a857e7c6c2b25301a
Validity
Not Before: Nov 4 17:00:18 2025 GMT
Not After : Nov 5 17:00:18 2025 GMT
Subject: CN=27bb13f798c5af02886e073538f20f77e8c50288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6b:68:d6:e0:4f:76:5d:b2:9e:58:94:b9:6e:
9b:7e:be:9d:56:b8:22:0d:f0:a3:e1:c9:2b:c6:80:
eb:0f:f4:73:42:85:15:7a:0e:d5:0e:20:78:6f:df:
5e:c7:8c:19:a5:07:c9:72:1a:d4:7a:4c:1c:6a:11:
47:23:5a:04:36:b2:1e:21:10:3b:12:de:15:0e:a4:
63:5d:c2:7b:11:31:b2:35:2c:c9:46:e0:c4:50:70:
e9:a1:5d:15:3f:35:09:5a:d7:42:50:e3:ff:aa:b3:
ef:5d:d3:f4:ec:76:75:af:d2:26:c5:11:de:b1:59:
81:f2:82:94:48:ee:fe:14:cb:8b:df:3a:10:b7:af:
75:97:46:a3:a4:fe:8f:79:83:f8:39:94:34:b4:71:
3a:0c:6e:9e:d4:b8:c5:7e:2a:d0:5f:c1:1e:02:a3:
f2:1d:5a:a5:3b:31:0a:8a:df:aa:e9:ac:9a:a3:a3:
a6:91:cd:d2:f2:5e:ab:91:98:72:ab:fb:e2:5d:b0:
29:d9:ce:02:c8:a8:68:7f:56:ff:a9:13:f5:8b:c0:
16:5d:84:e3:fc:25:87:02:20:4a:02:3c:51:e7:1b:
07:11:74:85:05:d9:d6:06:87:b6:38:71:87:cc:cf:
b8:0a:25:68:ab:72:77:7d:f3:e8:d5:e5:9f:84:aa:
8f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:BB:13:F7:98:C5:AF:02:88:6E:07:35:38:F2:0F:77:E8:C5:02:88
X509v3 Authority Key Identifier:
keyid:F9:19:E1:F3:FE:69:B4:EB:DF:F0:2A:9A:85:7E:7C:6C:2B:25:30:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Rnh8_5ptOvf8CqahX58bCslMBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1c9809-1f60-43c2-8103-dad0420b85d3/1/1-Rnh8_5ptOvf8CqahX58bCslMBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:e6:79:38:db:9b:66:d3:77:e7:fe:f2:24:b9:29:eb:0d:c9:
90:d2:db:4a:8c:9d:63:00:f3:d5:2e:58:e8:47:90:02:2d:a2:
b4:ab:12:90:9f:d5:79:bb:1c:87:6d:d6:d6:75:6f:d0:a8:2b:
9d:49:19:90:84:6c:0f:4c:42:46:9c:41:05:68:33:5f:2e:43:
ff:89:df:b2:28:5b:6b:6d:ab:70:aa:2e:74:81:b4:46:5d:4a:
e8:b8:62:cb:6a:71:57:ff:c2:31:5b:d8:a0:14:28:fa:57:9c:
94:8b:0c:76:86:92:e8:58:99:53:6d:48:14:26:bb:54:db:c1:
5c:91:ac:ee:a5:71:e5:47:9c:8f:bb:b2:0f:60:c9:b1:59:d2:
fe:92:0c:15:c7:1b:58:1d:e1:24:ac:4d:7a:83:c3:e8:44:bc:
d4:c8:15:3f:9d:e2:46:e0:54:9d:e2:4d:2e:1b:48:cc:25:f3:
53:f9:07:35:d6:b7:1b:96:a6:7a:11:99:f0:21:97:62:f5:e9:
ef:57:8d:a6:4a:46:98:42:a6:58:7d:64:8a:42:a8:ae:e3:ea:
f6:26:70:43:0a:71:22:88:b2:1d:2c:6c:89:0d:7e:04:5a:04:
12:da:5e:73:96:fa:dc:bd:05:2a:01:d5:f2:48:98:fb:c3:cc:
61:50:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:59 2025 by rpki-client