Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
File: 1FRz0ejN9J49mPjXcKrBSNLyiyM.mft (raw, json)
Hash identifier: ljs0a+yEol7qBHDQxUhpvdscoyXX38nRvvSyG4fRe6U=
Subject key identifier: 99:60:24:F8:44:0A:08:50:30:CE:27:B7:8C:99:2B:C5:1E:5A:D4:65
Authority key identifier: D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
Certificate issuer: /CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Certificate serial: 019A04B637357F6A305C1B693B9551AA8E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
Manifest number: 1064
Signing time: Tue 21 Oct 2025 03:00:41 +0000
Manifest this update: Tue 21 Oct 2025 03:00:41 +0000
Manifest next update: Wed 22 Oct 2025 03:00:41 +0000
Files and hashes: 1: 1FRz0ejN9J49mPjXcKrBSNLyiyM.crl (hash: anH1Bd4FEE7AhaQamK6MrJ1RxPYwpGyxj4EqUQFZSbg=)
2: xmpcwINBwhfOQ2qyibBKWtgFhyc.roa (hash: RM0GiW910PS4/kJDIOZ/RJgcd9jsdiuKg4ZQlvkwZTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:b6:37:35:7f:6a:30:5c:1b:69:3b:95:51:aa:8e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45473d1e8cdf49e3d98f8d770aac148d2f28b23
Validity
Not Before: Oct 21 03:00:41 2025 GMT
Not After : Oct 22 03:00:41 2025 GMT
Subject: CN=996024f8440a085030ce27b78c992bc51e5ad465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:b2:cb:a9:01:d7:0b:d2:a7:14:4d:62:8b:
73:ac:94:49:d1:88:f0:63:ba:ea:89:8c:35:92:cd:
27:1d:b5:db:2b:7d:d2:28:66:b0:85:d0:d4:ff:8a:
fc:d9:11:e8:50:4e:09:0f:2e:ac:76:30:3b:dc:e7:
c8:d5:ad:bd:61:26:b6:ff:72:2e:89:28:51:26:b6:
e0:c2:f1:01:b6:74:0e:d4:03:5b:95:81:56:bf:75:
6e:ba:03:bf:40:b4:8e:8c:22:d3:71:cd:d0:37:67:
64:5c:89:09:a2:92:d8:f5:2b:b8:12:ae:c4:83:73:
73:0c:c0:f3:7d:b9:8e:24:99:0d:7a:b3:3a:3d:46:
cc:ac:13:9b:7f:b8:62:01:2b:ad:0f:f7:af:8c:b6:
aa:73:40:43:2e:b3:2f:b0:a1:c9:a0:3c:9d:28:c5:
b4:b0:2a:8d:ac:e3:b0:b9:af:ba:3c:e9:7b:f6:f1:
29:dd:26:51:9b:89:a0:5f:2e:6f:3f:40:c1:1e:2e:
25:f4:9c:22:1f:b0:42:44:d6:dc:d6:80:8b:22:a8:
84:e8:ef:a7:e5:85:94:72:73:6f:42:35:14:f7:2c:
7b:97:97:f9:6d:09:cc:ba:b0:38:72:d8:a8:7c:23:
52:b6:6b:83:d2:c8:8b:fd:b6:c8:d6:22:19:08:8c:
23:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:60:24:F8:44:0A:08:50:30:CE:27:B7:8C:99:2B:C5:1E:5A:D4:65
X509v3 Authority Key Identifier:
keyid:D4:54:73:D1:E8:CD:F4:9E:3D:98:F8:D7:70:AA:C1:48:D2:F2:8B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FRz0ejN9J49mPjXcKrBSNLyiyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/91d6ce-1a6a-4d13-a2e2-a7eb46b37d72/1/1FRz0ejN9J49mPjXcKrBSNLyiyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:37:e8:40:8c:52:f7:94:52:cb:20:bb:b6:de:00:e7:f5:bc:
47:b7:cd:7c:a6:c3:33:dc:ed:2a:07:34:b2:28:d7:95:c5:08:
d8:af:de:b5:a2:aa:96:a7:d2:6a:d3:ff:b9:e2:31:2f:10:e2:
ec:b3:0a:7a:1f:20:a3:28:05:2a:cf:58:6d:35:b5:0e:0b:08:
52:ad:f4:f4:15:65:50:18:0e:60:e6:d0:7c:51:19:fd:3e:2e:
7d:7e:4e:6d:b4:a6:88:b3:ec:20:25:3e:57:3b:d9:7d:d4:f2:
8a:b3:2f:06:bc:3d:80:c3:6a:12:26:7e:fe:af:d7:10:c4:d5:
18:9c:4f:83:8b:54:99:dc:58:2c:63:4c:2f:08:21:19:ae:9a:
59:44:d1:7a:78:98:c6:e2:39:31:8d:be:07:1d:0a:94:b6:a8:
30:b5:a3:cb:81:24:5c:7e:1b:a1:0e:1b:ca:a7:b0:8a:aa:90:
79:18:41:7c:b1:77:4e:6e:f0:e0:4d:44:59:ab:74:f6:71:66:
94:6d:7f:27:fb:57:2e:07:e6:5e:3f:6d:43:ce:d7:51:77:34:
0c:5e:9f:94:b9:89:4b:76:aa:0c:8b:54:4a:00:fe:82:57:9e:
48:db:7e:3c:07:f8:35:c7:17:5b:04:d4:c1:9c:f2:e6:7b:36:
29:4e:22:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 06:28:06 2025 by rpki-client