Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
File: 1fJk44BaPRBFNzV6FP-SasApWZw.mft (raw, json)
Hash identifier: BZEzghWGLmHLpyBVfH63JYFc0/VGjRLMYVvKhtFVGls=
Subject key identifier: 21:23:DB:14:9A:14:CF:CE:B7:79:62:C7:6E:31:D1:3D:BA:4B:65:4E
Authority key identifier: D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
Certificate issuer: /CN=d5f264e3805a3d104537357a14ff926ac029599c
Certificate serial: 0199FE0FE4DE344E9BCFB395226E9F6AE57C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
Manifest number: 06C4
Signing time: Sun 19 Oct 2025 20:01:18 +0000
Manifest this update: Sun 19 Oct 2025 20:01:18 +0000
Manifest next update: Mon 20 Oct 2025 20:01:18 +0000
Files and hashes: 1: 1fJk44BaPRBFNzV6FP-SasApWZw.crl (hash: GQZPPscyLIdAzF4aHlWK8zlDVgZYwryUY+ULlJLSXFc=)
2: nK4fLsZ-CNNohZUItb4se5mVTks.roa (hash: E8CbmlBbMfwFFllt9Np43WKWYkKbRui+TW9xF2TYMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:e4:de:34:4e:9b:cf:b3:95:22:6e:9f:6a:e5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f264e3805a3d104537357a14ff926ac029599c
Validity
Not Before: Oct 19 20:01:18 2025 GMT
Not After : Oct 20 20:01:18 2025 GMT
Subject: CN=2123db149a14cfceb77962c76e31d13dba4b654e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:76:92:22:24:42:51:ae:1a:18:b3:31:53:76:
05:37:81:53:72:23:0a:3d:8d:7d:3d:3d:3e:f3:1a:
34:41:48:c9:75:b9:51:16:04:ac:8d:7a:3b:1a:91:
e4:f3:cc:41:b7:91:3a:2a:db:79:2f:d9:58:7a:22:
73:e3:e7:c6:a2:56:f9:a1:da:68:fb:72:bf:30:65:
c1:56:2d:1c:91:cb:86:23:e0:76:ff:8b:a3:26:60:
a1:97:5e:26:f5:b6:88:74:4a:17:9f:10:1c:f5:2c:
39:1e:1a:c5:ba:ed:c7:a1:34:c3:99:e3:3a:b0:f9:
14:a5:72:61:35:6a:ee:31:e0:1e:f0:fa:ab:ed:05:
39:2f:fe:ce:fa:c4:32:19:c0:e1:6e:b7:4c:48:95:
2f:d9:c0:c7:ce:62:6e:2d:54:53:45:11:24:46:37:
44:0a:be:1f:cb:86:c8:0a:16:43:4a:e3:6e:15:b7:
06:65:cc:0b:ea:b8:ac:d2:98:a4:cb:40:3e:5d:2a:
44:2f:05:98:6a:d6:cb:e3:46:4a:d5:a3:02:a0:bf:
fd:ff:bd:35:4b:7e:24:c7:af:07:31:f1:6e:62:f8:
11:84:8d:72:98:1c:15:38:2d:f6:4c:ec:d0:c4:b0:
12:0c:b0:5c:3d:8f:82:eb:2f:e6:ef:3f:18:05:6d:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:23:DB:14:9A:14:CF:CE:B7:79:62:C7:6E:31:D1:3D:BA:4B:65:4E
X509v3 Authority Key Identifier:
keyid:D5:F2:64:E3:80:5A:3D:10:45:37:35:7A:14:FF:92:6A:C0:29:59:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fJk44BaPRBFNzV6FP-SasApWZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/5d632a-e453-42a5-805f-3dcecbca3702/1/1fJk44BaPRBFNzV6FP-SasApWZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8e:33:5f:9f:90:1f:aa:8d:e2:f5:eb:65:7c:a4:1a:b1:50:
ed:40:89:e0:eb:de:fb:0e:6e:53:35:39:29:3d:85:b6:82:9e:
ac:50:d5:f7:00:27:d5:0a:17:ff:d5:27:4e:6b:19:31:67:58:
95:91:79:0b:88:5c:ab:0e:be:a1:81:c2:88:04:0e:1e:10:46:
be:ef:7d:73:6e:ce:a7:a3:85:f6:ef:d4:8a:96:bd:d7:85:05:
7d:fd:c0:51:1c:7f:a3:40:1c:b6:5b:6b:51:fd:13:ef:f1:14:
dc:e0:41:56:86:c6:e3:ba:02:b9:cc:06:35:d8:e3:4d:25:15:
45:2b:9b:6c:61:90:09:f6:e5:df:a0:2f:2d:8d:84:e0:65:40:
86:fa:de:e6:b2:41:7a:11:b7:cc:7b:a3:1a:fa:f6:58:78:27:
a5:9f:ff:4a:4a:d1:a6:d0:6a:58:d5:d5:89:7a:99:76:d0:30:
d6:1d:6b:d4:d0:43:5b:e5:be:99:3c:b7:d5:d9:ed:d8:97:64:
cf:c0:ae:66:e9:d6:a6:91:e4:a1:5d:f6:cc:28:72:05:07:fe:
78:25:10:a8:a2:ba:62:45:76:41:80:6e:62:04:89:60:e7:fe:
5a:fd:69:ee:55:39:00:e5:32:62:88:88:11:cd:11:43:50:20:
f5:bb:e1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:35 2025 by rpki-client