Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
File: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft (raw, json)
Hash identifier: oxfnc0rbCONBnCo1ElC5GJqZIvcKJgVZj953ql2zK5g=
Subject key identifier: 04:95:95:95:97:52:4F:54:FB:38:99:39:F8:B0:D7:9F:20:2F:08:09
Authority key identifier: F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
Certificate issuer: /CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Certificate serial: 019A0259E529FAC0FFDFEFCC95383A2CB07C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
Manifest number: 0F7D
Signing time: Mon 20 Oct 2025 16:00:36 +0000
Manifest this update: Mon 20 Oct 2025 16:00:36 +0000
Manifest next update: Tue 21 Oct 2025 16:00:36 +0000
Files and hashes: 1: 1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl (hash: vA1xG7rjKx93r62ZSZ9ih7cZO0JAioQCYixMalx4g7s=)
2: 3H8Iz5hHhMEKn8xskQH_PIfxJ2M.roa (hash: kRuaNE5DN0ER4h4yEzfsi+B5+sjpCYHLxCQH23V/CIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:59:e5:29:fa:c0:ff:df:ef:cc:95:38:3a:2c:b0:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f844e1eafaad3cb091f20ee5bf1c0482487c306e
Validity
Not Before: Oct 20 16:00:36 2025 GMT
Not After : Oct 21 16:00:36 2025 GMT
Subject: CN=0495959597524f54fb389939f8b0d79f202f0809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:46:2f:33:28:aa:02:da:58:4e:06:d2:34:8c:
76:e7:6c:6e:c2:20:f2:ff:23:98:79:9c:60:25:48:
4d:7f:93:0e:1a:28:01:22:cc:ff:95:f2:02:f1:31:
66:c4:ef:9c:2b:af:ab:fa:de:a7:2b:e5:17:ee:f8:
52:4a:1d:30:2b:3e:4a:91:e3:40:21:8d:52:a5:0d:
b2:6b:74:a6:44:2d:64:b2:b2:51:88:ed:7e:4f:f6:
14:19:fd:df:52:72:3c:8e:92:de:11:41:03:98:14:
1a:74:15:c0:27:c3:9d:ec:75:d7:f4:78:e3:b6:03:
13:93:57:c1:e8:4d:44:e8:b7:61:6b:ff:4c:fb:6c:
45:2e:8c:fa:d2:50:58:4f:97:61:60:9d:bb:c4:99:
e8:38:bd:49:37:af:87:2f:1c:21:a0:3e:f8:d8:74:
bb:c5:2e:a3:60:1b:5f:12:99:4b:40:7a:38:10:14:
91:64:5f:17:54:86:ea:ce:eb:82:05:5d:bb:84:78:
fb:7a:7f:13:79:34:ac:eb:4a:05:b8:a0:5d:97:d0:
b6:d0:17:d9:f8:b0:c5:23:cd:ee:9c:4b:98:3d:01:
c3:1f:37:b1:f0:58:40:b0:7c:ce:1e:d9:a8:b2:f2:
18:46:eb:bd:3b:53:aa:0c:1a:8f:d2:22:5b:b0:83:
81:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:95:95:95:97:52:4F:54:FB:38:99:39:F8:B0:D7:9F:20:2F:08:09
X509v3 Authority Key Identifier:
keyid:F8:44:E1:EA:FA:AD:3C:B0:91:F2:0E:E5:BF:1C:04:82:48:7C:30:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f3ca23-86ec-40d0-a520-69a364e5629e/1/1-ETh6vqtPLCR8g7lvxwEgkh8MG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:d9:9e:82:10:ab:8e:7a:59:6e:4e:45:23:85:98:53:a6:1f:
d1:28:f5:dc:de:f1:83:fd:d5:55:38:32:71:08:0e:7c:1e:fa:
eb:85:25:9e:16:86:6c:38:62:c4:64:2a:8b:bf:22:69:90:9c:
3d:65:04:af:2f:94:d9:ee:d4:f0:d9:69:b0:ac:9e:15:d0:a9:
8e:4f:73:02:68:c0:35:b1:58:8a:d1:fb:0c:2b:4d:4e:1c:a8:
a9:5c:dc:61:38:7a:38:a4:5d:b5:53:a3:76:c4:18:7a:01:a4:
ad:05:f6:f3:05:95:0e:04:f6:69:5c:de:84:a5:50:2a:fa:d6:
ff:8b:4b:26:ae:8c:3b:ff:e3:4e:f9:e7:e0:f7:c9:30:ff:69:
35:ed:63:9f:ac:ce:8d:ff:53:c3:9c:f7:f1:1a:b1:43:31:20:
31:08:06:6f:c5:f0:ba:ab:39:f8:e4:ed:6f:a9:a4:d8:5b:e9:
25:69:b7:da:c5:1c:44:ad:c7:bb:ab:96:14:d3:e1:bd:ef:6d:
46:f1:ee:7f:b1:39:66:f9:1a:b8:6e:0f:71:77:94:e1:c8:7e:
8f:e0:a0:38:39:65:3b:af:84:5b:66:d2:a2:f3:74:2e:3e:9f:
3a:5f:ec:4f:4c:79:36:83:97:9b:a0:19:6d:55:fb:99:91:29:
da:31:74:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:26:57 2025 by rpki-client