Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
File: 1b4HZwwsmirgJ4ExqinPPOelqqM.mft (raw, json)
Hash identifier: a493dJowSqfaulgMZ7bgWrzWqYAVPCm31NnxG+GUN+Q=
Subject key identifier: 7D:C3:D0:A9:6B:01:64:25:34:C2:E7:DA:62:76:7B:DD:89:F5:C5:5C
Authority key identifier: D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
Certificate issuer: /CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Certificate serial: 019A4E862F60B8047517FDB1D1BCE3294F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
Manifest number: 0F11
Signing time: Tue 04 Nov 2025 11:00:07 +0000
Manifest this update: Tue 04 Nov 2025 11:00:07 +0000
Manifest next update: Wed 05 Nov 2025 11:00:07 +0000
Files and hashes: 1: 1b4HZwwsmirgJ4ExqinPPOelqqM.crl (hash: nJu1EppN78+/7LUAampEhNZrEQCO5XU3sb7IIs2AKgE=)
2: vXLxmgMvC7DEJcD1j4sd7fYYKao.roa (hash: iJI4ECgDw9YmVWAs4imuXowkCLOYQoqeB/2Y2d8ce+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:2f:60:b8:04:75:17:fd:b1:d1:bc:e3:29:4f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5be07670c2c9a2ae0278131aa29cf3ce7a5aaa3
Validity
Not Before: Nov 4 11:00:07 2025 GMT
Not After : Nov 5 11:00:07 2025 GMT
Subject: CN=7dc3d0a96b01642534c2e7da62767bdd89f5c55c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0a:9f:e9:6d:c5:50:ba:95:d5:48:bf:aa:cc:
21:f7:9b:c5:34:e4:98:e8:26:e1:73:a0:e5:a9:f0:
ad:8c:d6:cf:8b:d0:e3:d9:4d:95:c2:1d:4c:68:7b:
ec:a1:f5:4d:2e:02:e1:ea:3d:8a:92:ef:ca:2e:36:
e4:5a:05:37:9d:3e:5f:b2:13:50:24:8e:61:2a:a3:
67:bd:ef:b5:ff:49:d3:b8:b1:39:8d:91:7b:48:1f:
79:dd:dd:84:73:44:ac:53:8e:e2:f1:a2:9a:4a:e5:
5f:42:52:be:ee:e5:9e:a5:46:09:e2:1b:91:68:4f:
70:a2:51:bd:71:ca:e4:ca:a0:ec:2f:38:20:41:0e:
4b:36:c7:ae:65:f5:ba:27:cb:e7:26:29:01:c0:2a:
38:e9:9f:88:5e:6e:9f:1c:3a:fc:29:a3:28:e8:a1:
a6:dc:50:90:63:77:78:03:99:80:c3:a4:d7:c9:39:
14:02:63:b2:c8:98:72:8d:75:bb:e2:47:a5:49:23:
1b:46:89:19:28:ef:6a:9d:39:09:40:1a:73:02:00:
17:3f:4a:af:ae:0a:8f:41:92:63:85:e7:d6:e8:e1:
4e:81:dd:da:ec:c4:06:4f:d3:0a:09:b2:fd:d0:60:
b2:a9:17:fc:c7:58:b7:b6:84:40:fe:61:8a:4d:7b:
57:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C3:D0:A9:6B:01:64:25:34:C2:E7:DA:62:76:7B:DD:89:F5:C5:5C
X509v3 Authority Key Identifier:
keyid:D5:BE:07:67:0C:2C:9A:2A:E0:27:81:31:AA:29:CF:3C:E7:A5:AA:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b4HZwwsmirgJ4ExqinPPOelqqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/2cc3ce-ec81-45ed-86e6-9ada2378a9a0/1/1b4HZwwsmirgJ4ExqinPPOelqqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:25:0b:2f:0d:07:5f:74:f1:10:ca:9b:b8:7a:51:78:b3:77:
39:0e:e6:f5:e9:b0:e7:d3:b4:5a:de:e2:b0:18:01:83:e3:12:
f0:ed:3e:1c:40:71:73:1c:4b:1b:ae:1b:7e:b3:82:fa:e1:54:
94:00:5f:1e:e9:56:f6:6e:40:46:c6:a1:57:24:1a:c7:48:dd:
99:b8:7d:a3:5f:85:8e:0a:03:d9:60:2e:be:a6:e3:8b:e2:b2:
df:79:35:28:cf:48:9a:2c:fd:0e:65:6c:6f:e5:b6:5f:6b:a7:
81:c0:0a:6b:1f:a9:a7:01:c5:e1:51:bb:c3:a4:bb:0e:b1:8f:
a7:7d:dd:dd:79:be:d6:5c:43:05:08:03:03:e6:d5:10:49:18:
cb:ad:49:98:0e:01:b7:31:cf:ec:3e:d1:60:db:4f:2c:3a:e8:
3b:73:f2:28:5c:95:75:02:ee:63:da:6a:cb:af:4e:2b:99:46:
41:dd:b5:bc:02:6a:57:5a:7d:62:b0:3a:5d:84:a4:d0:c4:56:
13:50:64:a8:46:af:81:95:b5:f5:fe:1e:09:85:31:fe:15:e7:
98:55:e8:ec:ca:26:f9:69:2e:a0:2b:a8:d8:bd:7b:e4:41:82:
c1:ec:19:7e:2e:4a:22:78:07:4b:72:b4:dc:2d:91:20:f4:3a:
58:2c:7a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:16:30 2025 by rpki-client