Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
File: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft (raw, json)
Hash identifier: 3ZDJBKrK+irJm8uek0HUnUHEuvSqveuD1tbmIPt21a0=
Subject key identifier: 05:BF:41:86:2E:C4:43:20:40:DF:65:EA:DA:E4:86:99:F8:FE:6A:08
Authority key identifier: F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
Certificate issuer: /CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Certificate serial: 0199FFC7D5CBE83CA1A5A2432D54FE9261BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
Manifest number: 068F
Signing time: Mon 20 Oct 2025 04:01:50 +0000
Manifest this update: Mon 20 Oct 2025 04:01:50 +0000
Manifest next update: Tue 21 Oct 2025 04:01:50 +0000
Files and hashes: 1: 1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl (hash: a8QuMm3h5H6x6+0+duf9uSfXeDHgL7jEKFKsGwMs5XQ=)
2: iAnZ5coAUkQIezSEoSc6B6_I7O4.roa (hash: 3KAUfgARN/Q5cvGPYfJlDhSfAV6Du1VfpKukfXJreCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d5:cb:e8:3c:a1:a5:a2:43:2d:54:fe:92:61:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9645c918ab294add19b267f48f3c7beb9fa0ceb
Validity
Not Before: Oct 20 04:01:50 2025 GMT
Not After : Oct 21 04:01:50 2025 GMT
Subject: CN=05bf41862ec4432040df65eadae48699f8fe6a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5d:4e:6a:4b:9b:19:f6:2b:a8:3e:04:01:1e:
04:5f:22:d8:56:37:a5:32:2c:ba:34:91:7e:47:1e:
87:48:22:80:fe:dd:1c:e2:e7:05:a6:d3:e5:85:18:
9a:72:c1:24:8a:1e:db:1a:03:24:51:0c:fb:96:a3:
3c:de:cc:21:31:d8:bc:a0:e9:e6:50:be:58:38:d1:
36:9a:00:95:64:2c:17:09:6f:e9:4c:95:c0:67:45:
03:62:e1:fb:e8:f4:19:eb:4d:5c:0d:d4:72:84:ed:
3f:dc:85:7a:a8:b6:d6:7f:d8:16:34:b7:ee:68:7c:
ba:d7:29:92:f2:1b:c3:55:d1:c8:42:12:98:0b:e2:
10:43:db:86:02:a9:03:02:fc:4b:2d:bc:fd:ed:64:
9a:5d:6f:05:04:ab:e5:43:33:b2:4b:13:e6:56:65:
57:a0:5c:aa:ec:bf:00:ea:26:29:31:23:91:f2:d5:
d2:a7:e4:66:b5:51:fb:ed:3f:b1:6b:d1:2e:41:e5:
8a:2e:67:7d:e2:4c:95:e9:e7:73:b3:50:42:b3:a3:
2d:24:fc:a6:f4:2a:4d:ef:da:d1:c1:ff:aa:dd:41:
a3:c6:6c:b6:08:cb:e7:29:0e:2f:3c:b5:76:1a:b6:
2b:71:47:ee:9b:ab:f5:ba:28:f1:61:21:18:ed:65:
a6:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:41:86:2E:C4:43:20:40:DF:65:EA:DA:E4:86:99:F8:FE:6A:08
X509v3 Authority Key Identifier:
keyid:F9:64:5C:91:8A:B2:94:AD:D1:9B:26:7F:48:F3:C7:BE:B9:FA:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WRckYqylK3RmyZ_SPPHvrn6DOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/5fffde-48c4-4140-84fc-19dbd6b42fb5/1/1-WRckYqylK3RmyZ_SPPHvrn6DOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:c2:c9:cf:15:be:db:fe:4c:c2:0f:94:e4:d7:4b:22:12:
0c:a8:56:35:4b:ec:bb:6e:23:50:dd:41:dc:e0:7d:f7:53:75:
0c:48:f1:00:d7:23:94:fb:ef:a8:a7:7f:76:0b:e7:2f:ec:fe:
59:46:66:29:ca:2d:97:47:aa:ea:48:85:44:c1:51:0f:ee:7d:
7c:1e:43:e3:94:39:d9:9c:03:5b:6b:87:8b:20:75:f3:8e:90:
92:0b:c0:b0:1a:f6:e7:a7:f8:71:eb:da:46:62:ca:04:dd:2f:
86:cd:94:1e:aa:d8:a5:31:d2:f5:a9:ea:95:9f:ea:b3:a9:b9:
4a:5f:08:2e:9c:88:86:63:d4:2b:fa:8a:a0:b6:d8:43:bd:e8:
c5:5e:9d:a2:67:e1:ae:dc:8a:a3:1f:3b:16:3c:d3:32:97:d5:
1f:06:8f:7f:f1:a3:e2:59:72:0c:23:91:fe:d3:fc:bb:b8:99:
41:2d:b3:83:ca:2b:cc:34:77:11:2c:eb:22:9b:c5:9c:b7:bd:
ca:75:00:f7:22:68:84:05:5a:6e:c9:71:b8:05:6c:5a:b1:6b:
6e:d9:48:de:86:fb:43:86:c3:66:ed:8e:eb:0e:ba:9c:29:1a:
29:d1:20:0c:5d:ae:b3:1c:36:a5:89:42:39:4e:1a:5c:a0:40:
0f:51:d7:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:47:39 2025 by rpki-client