Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
File: 1-y1mYW_2l9UXaIaOijUhua3M7m0.mft (raw, json)
Hash identifier: aDCzgL6I7CIIc8t4ovHxNRWHHKbU/4M6CN1svIMGyKQ=
Subject key identifier: 07:89:59:81:E5:47:20:FE:E5:55:13:D6:6F:9F:60:10:9D:8A:AC:5A
Authority key identifier: FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
Certificate issuer: /CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Certificate serial: 0199FE46C31A7AEABD107832B2D23FBCAC75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
Manifest number: 0631
Signing time: Sun 19 Oct 2025 21:01:14 +0000
Manifest this update: Sun 19 Oct 2025 21:01:14 +0000
Manifest next update: Mon 20 Oct 2025 21:01:14 +0000
Files and hashes: 1: 1-y1mYW_2l9UXaIaOijUhua3M7m0.crl (hash: 5oYLBMuZ/370jP/qnzm9j9NdP8QIo1ccCd5SKkH58IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:c3:1a:7a:ea:bd:10:78:32:b2:d2:3f:bc:ac:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb2d66616ff697d51768868e8a3521b9adccee6d
Validity
Not Before: Oct 19 21:01:14 2025 GMT
Not After : Oct 20 21:01:14 2025 GMT
Subject: CN=07895981e54720fee55513d66f9f60109d8aac5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f0:4c:21:1d:cf:67:e4:fe:b9:1f:7b:a6:2a:
1f:1e:25:ff:45:67:4d:19:c1:a8:5a:9f:d6:5e:5c:
0d:38:d1:65:42:0d:7b:bd:dd:24:39:9d:2b:15:09:
77:7d:b2:1d:21:44:c2:51:78:e0:95:86:05:33:a5:
5d:86:c8:db:3d:9a:3e:59:83:c6:36:f7:0a:c5:86:
75:bd:77:98:a7:82:c1:e0:a1:dd:30:eb:30:be:94:
19:ab:b3:d5:5b:77:28:01:4a:4b:b9:e8:58:e6:97:
81:cd:4e:c1:f7:e0:73:63:46:f5:80:3b:46:9f:f2:
3e:31:bb:6d:10:bf:23:54:a8:e9:57:cb:6d:aa:86:
07:e3:61:e8:d1:49:5d:54:a0:47:14:c3:55:be:f5:
52:17:ed:85:fc:f0:85:12:51:ed:15:11:08:51:23:
a5:bf:1a:d1:3f:e1:63:e2:fe:53:42:ae:2a:ae:55:
31:de:fb:2a:63:a9:58:5d:b2:94:8b:77:3f:df:80:
c4:fd:26:50:5a:46:b5:85:98:3b:83:bb:2f:31:37:
1b:14:37:75:5b:73:c0:93:d0:81:3a:4a:48:96:68:
9f:48:4b:4e:6a:d6:ba:8c:58:40:7a:5b:3d:7a:a9:
42:89:0a:2f:14:39:f5:5f:e2:ba:dd:59:30:18:7a:
57:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:89:59:81:E5:47:20:FE:E5:55:13:D6:6F:9F:60:10:9D:8A:AC:5A
X509v3 Authority Key Identifier:
keyid:FB:2D:66:61:6F:F6:97:D5:17:68:86:8E:8A:35:21:B9:AD:CC:EE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-y1mYW_2l9UXaIaOijUhua3M7m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ad0eab-e2a1-4398-9871-ffaca7e309a6/1/1-y1mYW_2l9UXaIaOijUhua3M7m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:60:e4:98:81:db:26:78:dc:e9:38:0e:8d:0c:af:d4:1d:9e:
16:37:f2:dd:a1:d6:b1:7a:47:e7:76:e6:9c:bc:a6:fe:4e:bd:
77:23:75:48:f5:e2:8a:56:be:8f:de:36:f5:07:97:2f:77:36:
8b:78:72:e6:bf:c1:f0:c4:3c:a7:64:95:a7:8b:82:2a:1d:43:
a7:b8:4f:3b:b9:5c:b3:75:dd:02:53:0d:ac:d0:e2:ab:81:b9:
f7:f3:43:b8:2c:30:98:31:69:fb:dd:d8:18:43:ef:d7:95:96:
32:d4:f0:8f:7c:ae:26:b4:43:6c:7c:69:c7:c7:5d:1c:5e:82:
26:81:09:e9:69:54:69:93:41:6a:ab:c8:42:48:2f:25:64:2a:
5e:58:eb:be:89:03:f9:1c:df:d4:9e:ff:b9:ee:32:63:f8:7f:
36:cb:37:78:b5:e3:ca:af:e0:ef:98:02:b6:b7:ca:da:f6:7d:
e4:64:05:ac:40:4a:92:b3:c6:e4:54:d6:11:f6:eb:13:69:ac:
04:fd:0e:ec:c2:b9:a2:e9:60:5e:cb:8f:99:7c:a3:af:3b:2f:
5a:23:30:e6:79:5c:40:66:58:e5:14:ed:5b:fc:e1:ff:92:22:
25:fd:da:43:e2:ae:38:ca:ae:fe:9a:9f:97:a7:58:42:05:f7:
94:d9:96:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:15 2025 by rpki-client