Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
File: mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft (raw, json)
Hash identifier: 4tVocdV0EWrFf+1v00W76DGdA05bF5N9ywUwl5zYgzw=
Subject key identifier: 19:02:7E:39:81:44:06:24:39:29:A3:A7:5B:CF:C6:E2:F8:EC:99:A1
Authority key identifier: 98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
Certificate issuer: /CN=985d472fa538204f1c23e8b6a758073b80cfc199
Certificate serial: 019A0035C3AB26E8C1FB107ED7496E1ACE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
Manifest number: 12B6
Signing time: Mon 20 Oct 2025 06:01:54 +0000
Manifest this update: Mon 20 Oct 2025 06:01:54 +0000
Manifest next update: Tue 21 Oct 2025 06:01:54 +0000
Files and hashes: 1: AzENH95bt8URAYkHoVsIpFCsCKo.roa (hash: AH2b85dRr2FxufgtlMVISLL90V2KJDLxN1PjWzu3Llc=)
2: mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl (hash: Ze1I8H9b0OKpQBWWyftJ5rKy7cZE9AV4NHKnf4NfxWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c3:ab:26:e8:c1:fb:10:7e:d7:49:6e:1a:ce:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=985d472fa538204f1c23e8b6a758073b80cfc199
Validity
Not Before: Oct 20 06:01:54 2025 GMT
Not After : Oct 21 06:01:54 2025 GMT
Subject: CN=19027e39814406243929a3a75bcfc6e2f8ec99a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:77:40:c7:4c:b6:b8:80:75:11:19:db:55:99:
78:db:ec:3b:c3:86:c4:bc:da:cd:85:b5:22:aa:64:
9d:1a:7d:10:6c:57:dc:e5:2c:89:d3:06:52:fd:f2:
9d:5d:ad:a8:1d:8a:70:76:53:e0:9d:8e:68:c5:ee:
14:a6:e2:5d:1f:a5:a9:8a:0a:26:ef:ff:00:e6:a9:
bf:29:65:1b:72:36:87:a2:58:57:b7:7f:da:c8:36:
a0:cf:11:6c:27:3d:0b:55:b3:5b:24:18:86:74:30:
5e:e1:f7:78:b2:e8:1b:e5:78:c7:f0:81:05:94:73:
bc:a8:00:b2:a8:a7:e1:09:ef:2b:5f:f7:a2:9b:6e:
39:c0:e5:0d:f4:b7:44:68:a5:f3:61:4b:ae:c4:fa:
81:52:8a:82:0f:cb:b9:6d:5b:3a:49:2c:b9:26:36:
01:ce:c8:20:58:0b:78:71:34:e4:d2:db:eb:35:c1:
a3:a9:e1:8f:98:89:8f:04:5b:99:35:4c:0e:99:aa:
93:30:95:8a:43:cb:18:d5:35:fd:21:53:8e:fb:04:
a5:b7:92:02:fc:ca:ec:48:d6:c0:60:82:5e:da:ce:
88:e4:83:27:b5:07:29:59:21:a9:4d:99:12:4d:5e:
d6:5e:d4:6f:b6:f7:70:c8:4d:38:fd:e2:4a:09:ee:
1f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:02:7E:39:81:44:06:24:39:29:A3:A7:5B:CF:C6:E2:F8:EC:99:A1
X509v3 Authority Key Identifier:
keyid:98:5D:47:2F:A5:38:20:4F:1C:23:E8:B6:A7:58:07:3B:80:CF:C1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mF1HL6U4IE8cI-i2p1gHO4DPwZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/c28ebc-749f-48f6-89a2-edc316222644/1/mF1HL6U4IE8cI-i2p1gHO4DPwZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:07:e5:52:ea:1d:9b:5d:d2:b1:da:70:d3:a6:c4:33:59:87:
7f:23:c9:97:9a:a8:b6:29:72:ba:76:47:32:cd:45:86:bb:03:
ad:3c:b6:f9:68:90:a8:37:90:5b:4d:8c:99:bc:ea:7a:88:32:
90:6a:7c:da:ae:c1:93:f9:69:47:1e:ff:b8:8d:6d:a2:23:0d:
5e:f3:f2:5e:d7:15:75:bb:c6:d9:07:0e:a8:3a:20:8a:d4:5c:
6c:84:91:9c:5c:48:04:8f:5f:43:10:6e:1c:b9:89:cd:cd:df:
8c:30:6a:00:c9:22:b2:89:74:3b:8b:09:b6:cd:24:85:a5:b8:
a6:08:27:13:15:9e:44:1d:78:ca:84:83:ba:ff:5e:a7:66:75:
ef:a9:46:33:ff:0d:2f:60:30:da:3e:4e:12:b3:50:fb:9e:cf:
67:dc:9e:bb:c3:52:eb:00:ed:63:50:aa:54:55:d0:db:e2:ed:
d0:11:b5:98:0c:83:ca:e7:51:af:16:e1:7d:72:1f:b8:71:ae:
cb:dc:ea:1d:de:d9:5d:62:eb:ac:2d:b1:0e:cb:eb:c0:0f:77:
91:9c:5a:de:8c:c5:03:81:dc:77:e7:9e:24:2d:94:b3:c7:44:
14:0d:c1:7e:3c:70:0f:0b:71:41:e7:fb:4d:3a:f3:9d:cf:38:
7f:91:ee:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:33 2025 by rpki-client