Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File: 1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier: 9mCD9YtlkLdJdNCAPhXa88mkyZxSncNaQuuzAzHaFUA=
Subject key identifier: 2C:11:F1:27:C7:9C:93:2C:9C:F0:3A:CF:50:66:12:4A:2E:5F:6C:07
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 0199FE468D7AB8ACFF0CEE793634F17AB682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number: 1173
Signing time: Sun 19 Oct 2025 21:01:00 +0000
Manifest this update: Sun 19 Oct 2025 21:01:00 +0000
Manifest next update: Mon 20 Oct 2025 21:01:00 +0000
Files and hashes: 1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: fL98/RRbckYeNuukoSKtuthQSlYcF+RtlmBRQ/qU39g=)
2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:8d:7a:b8:ac:ff:0c:ee:79:36:34:f1:7a:b6:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Oct 19 21:01:00 2025 GMT
Not After : Oct 20 21:01:00 2025 GMT
Subject: CN=2c11f127c79c932c9cf03acf5066124a2e5f6c07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:be:30:6a:57:4f:06:a7:50:2c:9c:83:e7:d3:
3c:5c:b9:38:e9:fc:26:c2:a9:d2:70:5e:81:72:1e:
1c:af:57:2a:54:86:f0:d8:df:04:e8:87:37:71:a7:
8f:10:e2:ab:fa:06:e0:e3:f3:15:80:c6:97:df:bb:
c8:2a:b7:b5:1e:9c:3d:b8:a9:9c:51:70:9c:02:23:
81:4b:f8:89:5c:0a:c3:f5:c2:d9:62:8c:10:41:2e:
5e:37:fc:5e:9b:3d:20:4c:78:6d:d4:c4:c5:60:f9:
c2:c1:e7:6e:f1:12:d0:97:ab:06:ca:9f:03:96:d1:
e5:95:53:72:7d:d8:84:d4:11:ad:f0:3a:dd:2b:8b:
3f:dd:af:ac:a0:d6:a3:66:c8:55:66:29:b0:cc:9e:
c1:92:fd:fe:8d:c5:f8:e4:33:a3:73:d5:18:19:3a:
79:ae:33:50:c0:55:26:d6:f1:a6:06:ed:f8:bb:7b:
3a:98:1c:a0:60:64:a2:3e:02:c1:89:9b:48:66:ed:
89:4a:83:46:76:9d:56:b5:51:aa:44:32:8d:6f:1f:
ab:19:f2:16:82:7b:97:90:da:69:40:32:f6:d8:5e:
4e:e1:29:fa:e9:4d:e5:2a:1f:d0:54:18:9e:d1:12:
f6:76:ec:78:06:88:ef:ec:5c:13:b8:38:af:8c:b3:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:F1:27:C7:9C:93:2C:9C:F0:3A:CF:50:66:12:4A:2E:5F:6C:07
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:02:33:02:ae:bb:e6:5a:27:bd:77:db:91:f3:5f:e0:ef:59:
af:27:a8:37:ec:1f:8a:44:7a:c0:9b:bb:c9:93:f2:20:bc:50:
5f:84:6a:c2:ca:c9:90:4f:5f:89:41:bb:b3:e4:bd:08:b8:71:
10:95:88:35:15:a7:b1:be:63:ba:91:ed:70:cc:b1:8a:4a:89:
d6:d4:17:af:10:c0:23:38:d7:d0:bc:ba:9d:b2:77:f3:d7:da:
1b:40:25:f2:ba:b6:bd:ff:73:c5:32:12:08:da:d9:d2:8d:0b:
e7:a4:4d:8b:8e:fa:24:89:f0:2c:76:e2:9a:95:66:46:01:f5:
31:bf:17:45:09:f6:81:ff:6e:0e:8f:f6:09:e2:47:38:a5:13:
db:92:aa:57:7c:1e:2e:f6:a0:da:5c:2d:6d:4e:e9:96:11:cc:
20:0f:d9:f2:72:7e:54:16:a6:83:88:71:00:64:a4:0d:0b:07:
0f:95:6b:0e:74:de:4a:88:b1:b2:4d:11:2d:ff:5e:ea:e6:a0:
80:71:d0:40:9a:77:57:69:26:dd:c0:d2:e9:d9:2e:73:74:06:
30:bb:66:f5:e3:0c:3c:e5:c8:ec:7a:6d:6d:0b:31:2e:46:f3:
fe:3c:d4:1c:75:fe:78:82:67:a9:9e:e0:85:42:18:10:9d:be:
ba:a1:b0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:15:12 2025 by rpki-client