
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: 8tb348ljNgrrDUKQM/fH3n8EYtsxQSnLhuz1yqd7Q1c=
Subject key identifier: 71:EA:36:8A:51:3D:2A:D0:81:7F:F8:9C:3B:5F:BB:49:80:6F:0B:9E
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 0199FB45CC132383710573C4808FFF511BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0E53
Signing time: Sun 19 Oct 2025 07:01:19 +0000
Manifest this update: Sun 19 Oct 2025 07:01:19 +0000
Manifest next update: Mon 20 Oct 2025 07:01:19 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: a5akNAiA1E6jEbssrNw39IdBeUFBnz0Cqkx9IXW1WiQ=)
2: X106OsUC0FAl9jkdnlr5gWlzbbQ.roa (hash: JYZSAqgEH1ZLu6PBGCZjtxMtu36xGzGi2+VOR9jTAy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:cc:13:23:83:71:05:73:c4:80:8f:ff:51:1b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Oct 19 07:01:19 2025 GMT
Not After : Oct 20 07:01:19 2025 GMT
Subject: CN=71ea368a513d2ad0817ff89c3b5fbb49806f0b9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:6c:de:09:b9:2b:19:05:49:da:e4:a2:99:
e1:7a:3e:a1:e0:12:84:00:57:1d:33:ad:ca:a8:03:
0c:2e:65:4d:40:75:27:15:9a:a4:01:2b:0e:d9:f4:
0f:07:1f:33:94:76:e2:01:60:15:37:91:10:65:ff:
01:6a:d2:bd:bf:a1:9f:12:15:ed:32:f1:90:11:98:
d2:30:d6:0b:ba:2f:b6:28:89:5a:f4:94:e7:05:18:
5c:a7:ae:95:3c:1c:c2:29:b7:e3:c0:e5:ed:41:a6:
6f:1b:00:c3:98:e8:8f:66:5d:d8:7d:dd:55:1b:b1:
ff:ab:56:b4:21:9e:3c:f1:a8:2c:7b:07:23:a8:dd:
84:a5:9f:dc:19:a9:c7:f6:57:c2:6f:1f:a6:21:d9:
db:d0:b9:76:bb:d8:d1:fb:3d:41:71:bf:8c:43:a9:
a1:ca:2c:fb:bd:e8:71:f2:57:fb:d9:d9:48:ab:b8:
4e:cf:38:a2:e4:f3:35:94:92:da:e6:25:07:a2:b1:
18:56:9a:e4:cf:fe:21:3e:a5:7a:80:1e:01:b1:f5:
6e:0c:3f:70:ab:65:53:43:3a:0b:a5:01:df:75:55:
bd:a8:6d:38:7a:57:58:d2:75:8a:fd:26:29:bb:40:
35:bf:e2:6a:0c:cc:44:e5:56:8a:8e:e0:fd:a0:12:
7e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EA:36:8A:51:3D:2A:D0:81:7F:F8:9C:3B:5F:BB:49:80:6F:0B:9E
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:02:e8:35:a1:9d:03:72:8d:9b:5b:40:cb:1f:cc:f2:b3:85:
db:76:46:6d:df:a5:26:4f:ba:61:8d:62:11:c3:79:5b:08:58:
50:25:ae:3e:d2:8b:23:68:4a:08:08:d9:db:f1:fa:53:ab:96:
24:13:8d:f7:1c:63:42:e7:0f:ef:9e:8b:a7:fe:ad:70:c2:15:
81:ab:54:af:b5:02:e1:81:cd:da:ab:29:9b:dc:4a:38:99:91:
39:ca:7d:60:43:8f:1a:17:45:74:4a:61:86:38:a8:a7:28:78:
f9:de:74:2f:57:08:e7:01:d6:2c:a1:d9:f6:76:fd:5d:1c:b5:
f3:e0:b3:9c:c0:d6:a2:8d:1d:ea:32:e1:27:d0:a7:4f:4b:01:
0e:b5:d5:40:0e:49:2e:d3:4c:cc:52:68:d4:a1:70:59:26:b9:
eb:d2:87:f1:a9:7b:be:e8:d1:3a:cd:6a:5b:88:a5:f2:13:22:
ef:4d:48:3a:6e:3a:71:12:9a:5c:d4:96:ba:17:61:57:d1:c3:
fc:26:47:04:c3:42:40:5c:b3:74:15:23:8d:3d:18:32:e7:14:
9a:75:d4:b2:cd:6e:06:97:50:6b:0c:d8:48:b2:bb:f5:cb:d7:
61:6d:55:23:12:22:60:1e:21:c8:5f:9f:08:0a:7c:37:de:e7:
80:cf:61:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:27 2025 by rpki-client