Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: baouAvPNdxS289cY5lABfhEmoR8MO9g8MjssFjhcUG0=
Subject key identifier: 7F:CE:E0:DA:17:C8:02:0D:1B:FA:F5:32:B3:2C:B2:D3:07:F9:9B:32
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0199FB0EEB98F3787C8A1587B4DCB311547F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 1156
Signing time: Sun 19 Oct 2025 06:01:22 +0000
Manifest this update: Sun 19 Oct 2025 06:01:22 +0000
Manifest next update: Mon 20 Oct 2025 06:01:22 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: qLlWbkMPaRuTa9OLZ5WcymbghdSJJanv1KqEFh5ImHM=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:eb:98:f3:78:7c:8a:15:87:b4:dc:b3:11:54:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Oct 19 06:01:22 2025 GMT
Not After : Oct 20 06:01:22 2025 GMT
Subject: CN=7fcee0da17c8020d1bfaf532b32cb2d307f99b32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f1:91:76:e9:91:25:86:34:b9:45:07:be:ef:
45:a5:20:ce:10:2c:70:62:72:7b:92:43:d2:15:30:
5e:b3:42:5c:82:f2:d2:5a:b3:8f:af:5e:ab:6b:27:
3d:12:ff:e3:fb:e3:c0:d2:ab:9e:3a:7d:79:30:d7:
8b:11:fe:0a:8e:5b:9d:c3:4b:7a:4d:13:d3:3b:53:
a1:3d:01:60:4c:50:3d:2e:e4:ea:bd:7a:9a:48:f8:
16:7b:f0:a2:05:40:c1:94:c6:b0:27:cc:0b:a4:10:
c3:16:96:25:fa:17:c7:45:d9:c4:94:c4:a4:9d:8c:
b8:7a:0f:56:49:b6:80:b7:a8:62:a9:20:ac:4f:73:
42:4c:a7:6b:4d:2b:46:d3:e9:09:da:cb:32:04:07:
ee:40:fa:0d:21:88:25:7f:7e:1b:43:c8:b6:7f:10:
84:59:83:a7:b2:c9:3f:01:d2:4b:77:c5:7f:c6:ae:
f8:0b:7f:ed:0e:f3:e4:2d:2e:f8:94:61:86:be:53:
97:1b:0d:a4:ca:4b:13:b3:b1:31:42:f3:7c:f1:5b:
88:d7:93:d1:57:88:78:dd:dc:1c:11:da:31:6b:7f:
6f:0f:08:86:93:1f:e5:66:e7:f2:04:e2:e0:d1:b3:
67:83:df:d9:76:a8:d4:2e:18:8e:29:c6:d8:ac:79:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:CE:E0:DA:17:C8:02:0D:1B:FA:F5:32:B3:2C:B2:D3:07:F9:9B:32
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:af:16:bd:2c:cd:ba:83:05:ec:09:cc:0f:cf:b0:da:e8:98:
58:57:33:37:f2:73:4e:e4:95:0d:18:66:9c:6a:86:73:0f:80:
a9:94:e7:43:86:eb:bf:10:1c:52:a7:71:c8:81:43:fb:95:73:
7a:37:95:3d:4e:52:e4:2e:52:79:31:d2:05:83:51:22:c0:60:
7d:20:fe:08:14:b6:f0:e4:da:7b:db:98:6d:f4:2d:c0:bc:30:
d1:15:60:56:92:ed:0c:84:3f:73:79:16:52:e0:90:de:09:1b:
b2:7d:60:f3:dd:e1:86:9b:05:d7:59:ea:e8:99:63:36:a1:ec:
fd:86:31:31:1c:5a:bd:be:f0:8f:d2:9d:8b:3a:cf:1b:b5:51:
09:89:a3:a1:b6:43:e4:07:a8:cd:08:5e:c9:cc:8a:55:4a:4a:
3c:00:8f:3d:83:21:2a:36:ea:dd:0b:45:a2:4d:f0:07:be:45:
8f:59:8a:f3:80:0a:7d:75:83:a9:ac:64:c0:e3:59:5d:47:05:
c3:be:2e:0e:c2:ed:67:fa:a5:f3:56:da:8b:ed:99:00:dc:ff:
89:88:96:f6:c7:10:1e:74:1d:91:49:f4:85:a3:0a:38:57:2a:
02:25:fd:bc:4b:26:5a:d1:a9:4e:1d:4e:e3:7e:13:23:55:40:
13:3a:18:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:20 2025 by rpki-client