Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
File: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft (raw, json)
Hash identifier: zLT7mfIPsa6qAe9CC4ivp4l5qEo9mztfL4hOzQ0SHPM=
Subject key identifier: 0B:72:A1:99:33:00:49:2A:09:E8:06:18:88:3B:62:60:82:0F:F9:F1
Authority key identifier: FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
Certificate issuer: /CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Certificate serial: 0199FB7CB90DFAF58F5B498E5022B02E0FE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
Manifest number: 108D
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl (hash: RPUXMReIqmGc6JwyG0CLrI3lR8sP/Tv5VNNkLEyRSbA=)
2: TcLtt8MW6k1lXpNgBVH9jdy5v60.roa (hash: wy80lGUvnlcwv01nCG8qqLZ0l9j+IjMXtN6aRV+obm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b9:0d:fa:f5:8f:5b:49:8e:50:22:b0:2e:0f:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb95e6594dc37053ce98bd5889063591b35e2d80
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=0b72a1993300492a09e80618883b6260820ff9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:35:18:99:50:a1:08:ed:c7:11:c2:9a:55:14:
b4:01:f7:48:47:f9:7c:37:ad:8c:70:83:59:93:21:
9b:cc:12:6c:5f:8e:92:42:6b:c0:c5:0e:9a:6e:ea:
aa:0f:a3:cc:5e:43:fa:be:b4:d2:b5:6f:5f:df:c2:
99:58:9e:1a:69:35:7e:90:20:e0:55:06:33:7b:81:
f1:2c:1c:ad:f3:cb:c3:49:2a:73:3f:2b:bd:54:14:
13:35:4e:02:8e:f5:d9:59:9e:67:82:4f:d9:cc:fc:
e4:e7:df:ee:1f:01:78:4b:5e:75:4c:cb:73:c6:ea:
ee:6b:c8:52:94:ab:fb:5e:20:95:39:18:77:b0:58:
a2:2d:70:11:29:54:f9:2b:44:16:21:b4:cd:76:63:
46:8e:34:7a:be:5c:e4:2f:a8:b5:a7:21:bd:b4:c9:
40:2e:9c:46:02:16:ff:59:7d:85:f6:27:93:f9:7e:
1a:f6:98:6f:52:0e:e4:60:6e:57:cb:ec:6a:01:ca:
ac:73:3a:e5:9b:36:6a:0c:b9:38:28:43:95:51:9a:
d5:9d:64:4b:c3:04:93:91:5e:20:d2:88:77:f6:78:
37:85:f6:47:e2:af:32:db:df:ee:4d:da:45:0d:27:
14:cf:a5:ee:11:75:d3:ae:62:6d:bd:61:1b:ff:6a:
71:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:72:A1:99:33:00:49:2A:09:E8:06:18:88:3B:62:60:82:0F:F9:F1
X509v3 Authority Key Identifier:
keyid:FB:95:E6:59:4D:C3:70:53:CE:98:BD:58:89:06:35:91:B3:5E:2D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/78178f-2199-48e0-901d-bda215b81636/1/1-5XmWU3DcFPOmL1YiQY1kbNeLYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e2:ec:af:79:6e:2b:80:12:bb:3d:2d:c7:53:94:a2:ee:eb:
83:5f:60:d0:ae:bf:f3:33:e6:7b:b6:87:88:6d:12:6a:40:4a:
a1:db:05:d1:d6:9a:00:42:11:2f:c6:31:34:67:fb:16:b7:db:
6f:e4:a3:6d:6f:20:7b:60:95:b3:dd:0f:f9:12:03:78:8c:a4:
cc:ee:3b:91:83:30:81:73:60:f9:00:c6:08:cc:cc:a8:aa:e6:
e8:7b:9f:7c:ff:1a:c9:75:c7:5b:b5:e7:13:0d:f6:13:eb:e8:
f1:bf:a3:9c:8b:84:00:f8:9c:81:39:73:ed:06:e9:7e:50:30:
3b:b3:ab:67:65:6a:cc:fe:5d:26:0d:f7:29:e0:e9:e2:23:91:
6c:84:84:98:89:b3:91:93:0c:3e:0e:e6:e5:3d:cc:79:9f:71:
5e:64:cd:62:91:84:06:8d:8c:a3:c0:22:5b:5a:cc:bb:eb:b1:
23:d9:3f:a9:b8:b4:4a:e5:85:53:2b:f8:07:49:89:9b:9f:9e:
74:ba:df:c4:49:98:64:fb:65:7a:92:9c:3d:44:12:73:b5:f8:
03:93:e1:2f:ea:ed:88:47:1a:a5:f1:fa:d3:5d:0a:91:f0:fb:
ac:e9:80:7b:09:ff:51:9b:ca:cd:2e:72:77:18:0e:ac:4e:5f:
44:e2:8f:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:30 2025 by rpki-client