Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
File: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft (raw, json)
Hash identifier: NOcGFWlYw2hcJ+ydV0cE634wKQe8tDwg687fIL/Y0RU=
Subject key identifier: 73:A2:01:AE:B3:29:8D:06:D5:80:5B:D7:74:E8:62:CF:50:AD:3A:2F
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 0199FCFDA7C1468CF951BA73FD56D6D558CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
Manifest number: 0475
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: 1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl (hash: DCsC7jZCDfoI5GrcLnbNzyy1FZLL9W8KJQw9diFMW8c=)
2: 8aAYV7l49GD-ZGSs5sQoL9HgMkI.roa (hash: D9xl0kFJAWKH2xA+S2m21lyse1ulC1gNGZHY3WDEYOY=)
3: KI3V-Dqox_RP-IrhT4OI-uI43p8.roa (hash: orZRl+1ZfvhmNjNIuH/XpcJiUoUbYgZ+2tdOL/2fIOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a7:c1:46:8c:f9:51:ba:73:fd:56:d6:d5:58:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=73a201aeb3298d06d5805bd774e862cf50ad3a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:05:2a:05:32:d8:f4:77:48:0e:b5:49:73:
b0:29:96:5d:6e:8a:95:7e:1d:5e:a7:8b:34:d7:ab:
fe:99:6c:6e:00:66:8c:b5:a1:ab:38:07:53:ff:e2:
80:68:73:be:d6:37:9e:4e:2c:72:5c:bf:d0:63:79:
89:e0:88:c4:44:5d:5f:29:70:6e:77:d7:34:1a:b1:
61:dd:e5:8e:fe:11:45:3a:21:8a:6d:6c:cf:03:5a:
ba:21:78:27:96:6f:88:19:82:d0:9f:ad:dc:b1:6e:
95:1b:4f:88:9c:9f:43:2f:91:79:0a:94:6e:ed:77:
dc:ad:58:17:63:0b:b5:a1:51:ef:8b:a0:e9:a0:64:
3d:5a:71:53:d1:dc:77:a1:d4:a9:9c:90:58:86:df:
65:0c:3c:21:6c:a2:4d:2a:dd:22:c2:81:7e:62:c1:
43:3d:74:08:8f:7b:45:3b:96:53:c6:7a:df:5d:97:
34:b5:fe:f2:25:ac:f1:5a:5c:f8:18:c6:a5:2f:d4:
24:57:56:4b:eb:d0:08:d7:7d:54:25:31:6e:11:0f:
37:8c:82:f9:14:06:6a:5f:d9:2f:3b:f4:8e:e4:71:
61:ac:93:45:8d:0c:14:59:e8:dc:63:5d:fc:e5:96:
6c:4b:b7:fd:fb:55:b2:21:db:fc:8a:fc:76:bf:3b:
c7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A2:01:AE:B3:29:8D:06:D5:80:5B:D7:74:E8:62:CF:50:AD:3A:2F
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:19:12:ba:9f:b8:54:bf:74:d2:8a:69:5a:67:03:b4:3b:4f:
83:03:6e:ae:c1:bb:8d:0f:76:86:de:66:ef:ac:c1:20:2e:1c:
98:84:4f:28:54:45:9d:16:64:de:96:6e:33:e7:1f:2e:e9:57:
04:9f:14:84:86:f7:5c:f7:49:fa:09:b0:64:1e:de:2e:a6:ce:
40:df:62:9f:fc:e0:c8:eb:de:a6:6b:be:9c:48:3f:90:42:8f:
b1:f6:e7:15:0b:4f:91:58:c9:71:b9:95:b9:d3:e2:78:b9:c8:
62:8c:fa:80:ff:1f:28:84:0a:f0:6b:ce:2a:05:33:ed:33:a9:
74:0e:f2:97:9b:9f:ca:49:34:fb:dd:7a:6a:3c:70:67:f8:c3:
4f:47:f8:38:e6:c6:36:de:05:82:fe:28:61:1e:ec:4e:c1:c9:
23:2e:1e:9a:63:0e:2c:8c:9b:e2:fa:f1:70:38:f8:96:4e:91:
96:e0:8e:0c:67:f5:38:5f:c9:ad:83:df:b6:f3:d1:36:49:a7:
38:e1:f3:37:6c:23:4c:f4:f4:e8:97:53:4b:54:97:10:3d:bb:
db:6a:84:0a:17:4e:e6:7b:15:33:48:cd:32:b5:89:2e:7c:b6:
33:d9:13:d5:cf:69:8b:68:f9:b7:2c:bb:b9:73:6e:5e:eb:b4:
72:2f:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:09:32 2025 by rpki-client