
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: oEdRfXRU4CoMsr//SX358vPrlY1aZhOT1ie1X+IyVG4=
Subject key identifier: C0:42:CE:5D:EE:1D:9B:99:AC:F6:17:A9:B0:9E:B9:F8:90:FE:F1:66
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 0199FDD8C898FC7848EA351E9688DBDD47DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 0198
Signing time: Sun 19 Oct 2025 19:01:06 +0000
Manifest this update: Sun 19 Oct 2025 19:01:06 +0000
Manifest next update: Mon 20 Oct 2025 19:01:06 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: tyir/dvFGrDR+oz/lxph/GZ05IRoYjHo08io7bcgVVo=)
2: aw0urpJM4p93PhWqM7da0_3Fozc.roa (hash: y+1M15neToXwBCTOLJI0dSNYHmOEXNHkxHoQ5Af6Zqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:c8:98:fc:78:48:ea:35:1e:96:88:db:dd:47:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Oct 19 19:01:06 2025 GMT
Not After : Oct 20 19:01:06 2025 GMT
Subject: CN=c042ce5dee1d9b99acf617a9b09eb9f890fef166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:3e:b9:ed:a9:bb:7a:6a:5f:1b:33:01:ff:e0:
8c:07:50:67:56:5f:fd:ca:bf:12:ba:ec:02:04:3a:
12:f1:c4:9d:31:22:f2:aa:72:07:bb:fa:86:05:38:
2a:72:f8:df:a0:7d:90:d9:67:e4:76:6e:f3:3e:00:
86:2c:b8:8b:58:db:4e:c8:5c:99:29:77:f4:d8:13:
47:b7:28:71:b3:9e:32:ed:99:3c:a3:e7:25:ac:20:
7e:1c:84:64:a9:c3:a8:9e:42:1e:5f:ba:ce:83:4e:
4c:32:c5:a8:6e:6a:1e:ef:b2:63:cf:f3:f5:ae:58:
f7:70:50:2e:53:49:d6:f4:36:16:40:4f:53:c0:32:
7f:71:23:b1:a8:29:95:e6:54:a1:67:9e:dc:64:04:
0c:88:57:0d:74:a4:f8:e2:2c:76:e8:ca:d0:e3:39:
08:a6:4f:18:80:3f:8c:40:b6:e7:45:86:3f:b3:91:
1a:81:da:a1:fb:f2:8f:d7:a5:31:8a:c9:8b:cb:d2:
f0:66:d0:e9:83:17:1b:83:f7:dd:54:05:91:0d:e4:
d7:4e:1d:d4:17:c9:9c:9b:87:60:fe:91:09:fc:68:
19:a3:87:5f:85:c7:c2:cd:de:3a:18:b8:ab:31:9f:
82:8a:7e:3d:4d:6d:76:33:85:d9:b5:da:44:69:4d:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:42:CE:5D:EE:1D:9B:99:AC:F6:17:A9:B0:9E:B9:F8:90:FE:F1:66
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:e4:cd:30:9a:05:6c:6e:8a:ca:7d:50:c9:78:a7:04:90:47:
ce:e6:77:ad:1d:a4:f3:03:bb:bd:3f:86:85:d1:79:ca:4c:4b:
62:fd:90:ba:04:5a:47:89:d4:8f:3d:98:db:ab:58:77:0c:a1:
b5:9f:23:d0:83:d5:e8:df:09:54:77:34:d2:0f:91:fa:f2:9f:
c3:77:d9:58:11:4a:0d:f2:08:cf:2e:cb:e8:da:93:1a:e8:4c:
2f:ff:08:38:70:1c:00:df:b6:60:0d:6c:98:42:d3:e4:30:8c:
4c:aa:0c:7e:41:a5:02:64:76:91:97:42:2b:a5:b4:a4:44:f2:
fa:25:26:b0:ff:6a:12:fc:da:e1:f6:86:9c:a6:5a:99:60:e1:
ac:74:72:a0:2e:f9:12:62:7c:fa:31:5a:97:f0:96:a2:fd:80:
68:e7:83:8c:dc:6e:65:43:fc:b1:90:bc:8a:26:f6:0a:5b:7f:
1d:ae:d9:d9:ee:39:68:d6:95:46:eb:b3:f4:a2:f8:fc:41:a5:
83:52:d4:25:e2:cb:f4:60:97:a3:44:fb:33:40:e3:cf:3d:5f:
a9:98:72:8e:4b:a2:e8:3c:01:59:f4:26:29:66:cb:0c:9e:29:
c1:8f:46:c6:5e:45:bd:fe:ef:04:39:26:45:1c:ce:69:d9:64:
cc:99:d7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:40 2025 by rpki-client