Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
File: 1flHhtA2aFRAkBo9zlozTPEycqA.mft (raw, json)
Hash identifier: lf4c6dg5oz1tzfBSxwE/lGGVGE6tfhzdGwveE4bcijQ=
Subject key identifier: 5D:9D:6F:2C:6E:E8:14:DD:58:72:30:DE:F4:5F:F0:DB:1D:F4:DA:7D
Authority key identifier: D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
Certificate issuer: /CN=d5f94786d036685440901a3dce5a334cf13272a0
Certificate serial: 0199FC8F1373FC9AE5328DD4956988BC70AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
Manifest number: 0B33
Signing time: Sun 19 Oct 2025 13:00:59 +0000
Manifest this update: Sun 19 Oct 2025 13:00:59 +0000
Manifest next update: Mon 20 Oct 2025 13:00:59 +0000
Files and hashes: 1: 1flHhtA2aFRAkBo9zlozTPEycqA.crl (hash: WIsL60kG0RFRLv/YRkud524UVe08LZ/6U8kyZpXdisg=)
2: D9KqMTAksNO2iOKAwulZkRCL4Fw.roa (hash: x9me+db9iBftpJ/9nLLqbm0SGnpLl+KbaGJCrguqqhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:13:73:fc:9a:e5:32:8d:d4:95:69:88:bc:70:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f94786d036685440901a3dce5a334cf13272a0
Validity
Not Before: Oct 19 13:00:59 2025 GMT
Not After : Oct 20 13:00:59 2025 GMT
Subject: CN=5d9d6f2c6ee814dd587230def45ff0db1df4da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:65:8b:34:54:dc:41:95:00:dc:37:55:09:
76:83:b2:2b:47:85:e5:ee:c4:e5:0c:c1:81:78:fa:
2b:5b:64:15:ae:e3:86:45:e6:f7:13:52:2b:3b:f1:
e5:27:9c:56:d8:f1:49:91:67:86:65:2c:d5:f4:6a:
29:7c:10:69:0d:33:3f:23:56:4f:14:c0:8a:a1:56:
0c:c0:d5:70:95:ca:bd:dd:a7:1a:ea:19:8e:f5:54:
3d:4a:28:cc:a8:1a:f3:23:82:ea:d1:cb:87:f7:05:
75:a5:ef:ad:a2:99:7d:68:27:b6:7d:bf:71:dc:05:
d9:e5:0d:de:c8:d9:ba:90:40:5e:c5:62:3c:c9:6c:
fa:93:1e:60:3d:05:db:f1:f5:61:c8:ed:98:90:f2:
dc:fd:23:99:0f:95:90:ef:24:ee:f8:f3:e8:68:38:
3f:2d:06:59:89:e8:1a:c8:6b:89:a5:12:f1:ac:0b:
2e:07:5c:62:22:65:1a:1a:6a:f3:13:e7:5e:b8:ca:
2b:85:44:91:b2:74:29:e6:f8:57:1a:3e:fa:de:f6:
34:4f:ce:42:85:72:32:c0:ec:3b:41:d4:20:d0:1d:
f2:b0:91:07:f7:82:37:16:df:3f:88:ea:b2:5e:46:
74:71:c0:56:ff:94:2b:77:8e:99:d9:7a:b7:d3:a5:
0a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:6F:2C:6E:E8:14:DD:58:72:30:DE:F4:5F:F0:DB:1D:F4:DA:7D
X509v3 Authority Key Identifier:
keyid:D5:F9:47:86:D0:36:68:54:40:90:1A:3D:CE:5A:33:4C:F1:32:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1flHhtA2aFRAkBo9zlozTPEycqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/70496c-63b8-47c8-a769-c9a69683a8e8/1/1flHhtA2aFRAkBo9zlozTPEycqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:fd:e9:d2:70:88:70:4e:76:28:83:b9:82:e3:80:54:a0:56:
5e:79:07:a9:68:55:03:71:d1:a0:2a:f0:b4:0a:64:cf:6c:d2:
2c:e1:07:68:01:fb:ec:9d:9d:43:59:86:16:01:4c:cc:97:dc:
44:fe:7a:8c:e7:a4:1e:45:dc:53:a8:83:44:2b:51:35:3e:35:
99:2c:e3:c4:13:f8:ed:ba:cd:9d:42:cc:0c:af:32:f8:00:64:
0f:f6:e7:e7:1a:b4:6d:da:43:d1:20:a8:f2:99:40:66:9d:17:
9f:61:fa:da:44:9c:56:2b:28:4c:bb:61:bb:c5:95:10:33:ba:
ad:41:77:a0:90:33:7e:88:01:08:49:2a:87:69:21:b4:38:f3:
d4:90:6f:c4:69:8d:c2:f4:f1:89:5f:e8:1c:bf:cf:a8:5a:31:
34:c4:c5:84:57:45:90:64:4a:06:84:b0:2f:80:d8:d2:9a:0b:
27:0d:5a:4f:af:df:9a:94:06:0a:b0:4e:fa:a4:67:50:8a:4c:
d2:ed:91:75:ef:21:36:e4:25:05:7f:f2:61:10:2a:57:bb:05:
87:98:bc:19:7a:2b:f1:dc:84:7e:eb:3b:37:15:19:a1:49:56:
3d:22:e8:86:13:57:44:4e:09:b1:12:7a:eb:f8:61:82:58:52:
18:34:f4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:21 2025 by rpki-client