Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
File: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft (raw, json)
Hash identifier: agf7zKdEVY3yqKhAeiLobMYT7jPgZstb6FHSfqqeVkA=
Subject key identifier: 55:79:5C:0F:79:59:9C:63:1B:20:26:30:11:10:22:DC:4C:83:23:D3
Authority key identifier: D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
Certificate issuer: /CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Certificate serial: 0199FCC65457A01A6B04FFA874392F54264F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
Manifest number: 0D09
Signing time: Sun 19 Oct 2025 14:01:20 +0000
Manifest this update: Sun 19 Oct 2025 14:01:20 +0000
Manifest next update: Mon 20 Oct 2025 14:01:20 +0000
Files and hashes: 1: 1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl (hash: 9q3hbfRs/MUKRj3/ypAN0INl7TnWoCTIB/3tgmaaZYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:54:57:a0:1a:6b:04:ff:a8:74:39:2f:54:26:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d51bb8659118d752f1e73545fd8ac73a7d18b21c
Validity
Not Before: Oct 19 14:01:20 2025 GMT
Not After : Oct 20 14:01:20 2025 GMT
Subject: CN=55795c0f79599c631b202630111022dc4c8323d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:f4:50:fd:13:df:b2:ff:c6:91:5b:74:95:
9c:2f:32:e2:ae:ea:f1:8b:b9:b5:d7:ec:2a:93:4b:
d1:fb:97:a4:d0:67:4e:83:b4:d2:8d:fb:ee:2b:7b:
e2:3d:a4:ee:61:aa:4d:42:16:2c:ad:45:b4:fc:d3:
18:69:55:7c:bd:63:f4:57:be:c9:58:01:ff:60:e4:
9b:a4:55:a9:52:bb:21:c1:3b:62:be:b1:4c:c9:bf:
46:66:8e:1f:2d:64:2e:e1:a2:fa:b2:1b:b5:e0:ed:
db:1d:5c:5f:ff:f2:e7:ac:f4:6b:35:04:7f:1b:36:
66:85:14:ba:6f:ce:a1:fb:ac:d0:fe:3b:45:a3:f4:
46:20:36:b5:24:df:59:4b:d5:9c:0c:88:23:0c:2d:
b1:3a:94:62:9b:ba:77:32:ed:1b:83:9a:41:7e:1f:
60:9e:03:cd:b2:be:51:a9:e6:47:8c:78:88:f0:cd:
c1:7d:9a:5e:c1:91:6b:cd:a8:7d:3e:81:04:28:14:
10:86:68:5b:46:d9:f4:6a:2e:89:51:c8:ef:4d:a7:
3c:e6:0c:00:59:3a:2e:da:cf:1b:c0:8e:1a:de:77:
58:61:ed:cf:3c:33:47:48:f0:aa:81:80:95:a0:34:
9a:ff:16:3c:d3:bf:99:89:55:c6:7c:fe:73:54:dc:
a8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:79:5C:0F:79:59:9C:63:1B:20:26:30:11:10:22:DC:4C:83:23:D3
X509v3 Authority Key Identifier:
keyid:D5:1B:B8:65:91:18:D7:52:F1:E7:35:45:FD:8A:C7:3A:7D:18:B2:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f2a8be-721b-4563-9ce2-5cf21509405e/1/1Ru4ZZEY11Lx5zVF_YrHOn0Yshw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:86:1a:a3:89:b4:49:70:33:98:50:69:40:75:62:fa:2d:58:
e4:8f:30:05:1d:81:9e:df:d7:5e:4c:7e:1c:7a:e7:f0:7e:9a:
5e:f1:fc:f4:d4:eb:1a:6e:8f:dc:3f:32:08:a6:89:70:b4:c8:
9d:bb:3b:f5:ea:93:d5:44:42:10:64:fd:88:ce:e0:06:a5:1f:
82:fe:35:23:97:59:d4:8d:0c:b1:7a:93:91:38:42:c7:f8:fe:
95:43:b6:75:f0:78:13:31:67:bf:c6:8c:6b:60:be:61:7f:71:
28:1f:c1:35:3b:f6:9f:95:36:3a:af:48:da:3f:f6:18:17:50:
fb:46:4d:5b:87:7f:ec:24:df:29:2c:dd:9d:0a:ea:19:53:4f:
0f:1c:c0:d4:f9:57:f8:1c:2a:aa:b5:f7:68:7e:ff:14:ca:bd:
52:c7:e9:14:38:2b:eb:cf:47:c2:f2:ed:d0:86:eb:d7:88:0c:
21:36:59:00:bf:7e:69:69:fe:2b:6a:33:16:88:11:55:b0:41:
ac:04:96:36:37:e1:27:17:0d:c3:71:15:46:20:93:d3:e2:93:
f3:88:38:6c:9d:9b:07:82:78:14:72:49:57:f2:ac:9a:d0:9e:
05:d4:d1:b9:80:a2:e1:34:c8:f7:57:f0:83:2f:9f:dd:4c:70:
0b:99:d2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:41 2025 by rpki-client