Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
File: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft (raw, json)
Hash identifier: p9jioGp+7N8FcBmGMQlUTQF41k2tsj44Qda4Gf6QMYQ=
Subject key identifier: F6:E3:DB:D2:9D:69:08:27:55:20:D8:06:5C:03:14:40:3E:25:A6:26
Authority key identifier: FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
Certificate issuer: /CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Certificate serial: 0199FAD7F42F6F609979AE750348A1A20FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
Manifest number: 1087
Signing time: Sun 19 Oct 2025 05:01:20 +0000
Manifest this update: Sun 19 Oct 2025 05:01:20 +0000
Manifest next update: Mon 20 Oct 2025 05:01:20 +0000
Files and hashes: 1: 1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl (hash: NbOWgqRD5j+2TqZePiaJJzSnrmSJplh+jpdzXAmvnDM=)
2: VXcC-Aoxwj-rTTGa_uO04BMN16g.roa (hash: VurFkBc53EnvckMEwSnM6ZAN10rC6gV5KJRXaTV9e/k=)
3: jyRg9rzyp13wzC9lPn-bQBVk9SM.roa (hash: DykO+WlsvnZBAvuruj+gmcKA6ANC0St445Gn0td25pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f4:2f:6f:60:99:79:ae:75:03:48:a1:a2:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb70de840fd6bf4b0afd1274e44efd1b8665762c
Validity
Not Before: Oct 19 05:01:20 2025 GMT
Not After : Oct 20 05:01:20 2025 GMT
Subject: CN=f6e3dbd29d6908275520d8065c0314403e25a626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:58:1b:30:bc:3c:55:22:31:31:bf:28:82:
68:0d:1b:c9:59:d6:ac:17:79:70:9a:7b:f0:4e:b0:
1c:79:e3:45:40:51:f0:98:ce:71:bd:5c:10:4f:1b:
51:92:5d:7b:18:6e:4e:7e:2e:77:d3:e0:b1:05:fe:
33:e3:a7:f3:3f:3e:3a:63:91:8d:bf:92:2a:99:a3:
c2:38:99:2a:c0:84:56:13:81:11:06:70:72:36:e5:
0e:40:6c:58:6f:f6:b8:7d:c4:b1:18:c9:6b:5b:20:
e4:40:d8:b9:bf:a6:54:1a:7d:16:12:db:39:3e:ef:
a0:61:3a:3c:29:1c:9a:17:82:2e:60:36:9c:34:c4:
c0:c6:3c:7c:8a:33:88:a5:7e:d0:a4:4a:36:be:47:
6a:20:4e:e2:22:f0:8c:67:88:08:4a:a3:e7:c4:11:
52:73:76:d1:7c:8b:24:cc:74:14:2f:8b:3e:d6:52:
0e:98:b4:96:de:4b:3a:9d:b8:74:37:d7:79:31:60:
df:c2:0a:9e:94:c2:73:6f:1c:e7:9b:58:30:27:fe:
d8:1c:60:2b:d8:eb:4b:1e:6a:46:81:0b:b7:26:bc:
79:dc:a9:d1:1e:cc:0f:ba:4a:e4:71:73:3d:1c:ef:
e0:d4:b6:60:1f:8d:88:35:f2:c4:a4:6e:af:75:c8:
ce:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E3:DB:D2:9D:69:08:27:55:20:D8:06:5C:03:14:40:3E:25:A6:26
X509v3 Authority Key Identifier:
keyid:FB:70:DE:84:0F:D6:BF:4B:0A:FD:12:74:E4:4E:FD:1B:86:65:76:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3DehA_Wv0sK_RJ05E79G4Zldiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9a3eac-f862-4789-ac21-d9444a3d0ce0/1/1-3DehA_Wv0sK_RJ05E79G4Zldiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:89:86:43:dc:d9:48:e4:b3:1b:8a:44:18:7a:52:39:c7:c0:
fa:69:e2:b8:aa:da:bd:09:16:f9:28:b8:36:be:f6:d7:e7:39:
f3:45:12:9f:14:c1:25:9f:69:49:d7:f4:7d:8b:18:37:4c:e2:
ee:8f:41:62:35:0d:54:f1:cf:e8:6e:4f:f8:83:12:14:b9:68:
35:65:47:86:00:fc:83:43:47:fe:8f:c4:82:26:49:79:cd:b9:
58:8a:b0:b5:8f:f6:7e:bb:61:9f:e6:68:ba:92:a5:d7:2d:ad:
77:d9:22:1d:1f:93:e0:e8:01:49:83:88:f6:c7:6a:ab:39:73:
98:ee:df:5a:44:b2:15:2c:f1:5e:f7:0f:43:f3:90:9c:0f:13:
ee:d8:11:bd:27:64:db:2a:73:e4:1c:01:b7:65:2d:64:b4:98:
96:c5:2e:79:62:da:f3:2c:79:bb:bd:87:68:ce:39:95:48:b8:
95:6c:c4:bd:8b:12:19:11:0c:d3:4c:c9:d3:4c:6e:c9:a9:31:
ab:36:7e:a8:fb:6d:76:91:53:97:95:e9:2a:29:40:13:96:43:
5c:e7:f4:c1:47:76:d8:75:68:f4:81:ee:bc:69:89:c3:2e:40:
58:8f:d8:74:b0:cb:04:91:e6:27:92:8a:63:8f:36:f5:46:a7:
62:e6:8d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:46 2025 by rpki-client