Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
File: S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft (raw, json)
Hash identifier: YzKxnZRBma1VX2jiDgk3ypleGBjB8tlvmtdAHfDoU/E=
Subject key identifier: 1B:66:2F:BC:F8:0B:BE:43:DE:0B:84:9E:D6:FA:99:63:49:56:BC:D4
Authority key identifier: 4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
Certificate issuer: /CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Certificate serial: 0199FBEC03AF4F7B14DADE7D91DF0AA4D9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
Manifest number: 13CF
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl (hash: oZeE8b56od7K1RatiAR2B2A/r7r6IXi8YlgM7JiGhy4=)
2: v45LP4AF3yoZv3u_cLa6vnH8FvU.roa (hash: wIRAiX/f/YijUEe8NVGZoMtagmreVjKidBvqPjwb7Tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:03:af:4f:7b:14:da:de:7d:91:df:0a:a4:d9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b5c7d9c7440e5cb4b0a6761563c0d850f08111a
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=1b662fbcf80bbe43de0b849ed6fa99634956bcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:12:27:4a:dc:5c:a7:55:76:13:7a:56:90:
91:e3:09:96:d3:c3:11:af:a6:26:fe:5b:5e:bb:8a:
14:0b:de:59:17:d4:9f:d5:84:81:a9:eb:5d:f9:6f:
d5:96:86:17:2e:10:68:59:da:cc:5e:57:65:b5:55:
0a:fe:d0:7f:ca:78:b1:65:76:be:dd:35:c2:dc:d4:
13:85:11:19:1d:a1:f4:53:d8:34:ac:2f:c5:b2:6c:
ed:b1:99:96:0d:7f:d4:7a:8c:d3:e5:3d:ff:f0:43:
b5:61:c9:3d:e4:f9:0b:32:90:f3:ae:ed:0e:48:8d:
14:1e:bd:b1:66:b8:ad:28:b4:2d:f5:ba:36:7c:13:
19:f6:e6:8a:40:38:a3:3e:70:66:9f:77:b6:7a:bb:
f7:b3:45:a1:bb:4a:f6:34:d2:3f:42:69:b2:50:1a:
4d:e3:59:30:2c:7b:c7:3e:75:61:79:93:8e:98:21:
97:ef:8d:49:fd:10:a8:99:09:57:fc:68:0b:7e:1d:
ec:3c:04:c0:ef:50:0c:a0:57:2c:2c:c0:5b:c0:70:
62:82:92:a0:88:7d:c8:66:41:a9:c2:29:03:de:52:
56:35:60:07:69:03:48:16:73:30:a7:74:eb:d7:29:
fb:26:c7:7e:c4:49:3b:e7:12:1b:33:b5:5d:7d:82:
e5:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:66:2F:BC:F8:0B:BE:43:DE:0B:84:9E:D6:FA:99:63:49:56:BC:D4
X509v3 Authority Key Identifier:
keyid:4B:5C:7D:9C:74:40:E5:CB:4B:0A:67:61:56:3C:0D:85:0F:08:11:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1x9nHRA5ctLCmdhVjwNhQ8IERo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/9d6660-775a-4f3f-93c2-a5eebd28d496/1/S1x9nHRA5ctLCmdhVjwNhQ8IERo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:d4:c1:ed:93:e3:f8:8c:dd:f1:ff:c8:67:bc:64:d3:28:c1:
7e:55:0c:fb:a7:7c:dd:88:69:7f:86:6e:81:38:77:3b:9c:c6:
78:bf:0a:aa:23:53:ae:2d:24:2a:33:ae:06:cf:7e:19:69:8a:
08:dc:02:be:a8:7a:4c:5c:a4:3b:3b:2f:12:a6:70:ed:c7:f2:
e7:8b:00:36:61:b3:ea:87:51:12:43:c3:0e:b8:4d:e8:7a:92:
f4:0f:59:28:53:98:f8:10:71:ef:ef:af:30:7f:04:a3:e4:84:
7f:4c:e6:be:53:01:8d:b4:68:7a:e3:66:ad:de:bb:d6:ea:65:
bb:0f:db:1c:b2:7c:68:08:82:f7:01:92:cd:a5:2c:47:9c:dc:
69:cf:fb:02:d2:8e:ca:48:e5:9b:9e:55:3d:dd:38:18:ce:ca:
46:27:8f:e6:a5:22:7a:9d:45:21:6c:0e:c0:d4:33:48:30:e4:
d1:d2:dc:2e:95:ac:87:89:72:49:89:38:19:65:d7:4d:ef:c7:
f3:80:af:42:15:52:d1:cf:44:44:3e:4b:6d:e5:19:fa:d5:74:
01:7a:88:5d:fc:a6:f9:7f:18:0b:fa:e6:9b:58:b2:11:e2:9a:
cb:47:de:f7:36:5b:07:79:fd:22:2e:2f:c0:c8:b9:ef:fa:7d:
0e:d6:7f:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:13 2025 by rpki-client