Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
File: f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft (raw, json)
Hash identifier: LGg0iQNZtYJYuLKZMUGZ5QTFqSMDejJsgFLwr2ZQLKI=
Subject key identifier: 8C:1B:6A:65:A4:69:87:ED:CB:65:58:F4:6F:A9:6F:9B:EE:45:66:6A
Authority key identifier: 7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
Certificate issuer: /CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Certificate serial: 019A00DA34945950C9B9A628DB1B75E87BD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
Manifest number: 145D
Signing time: Mon 20 Oct 2025 09:01:31 +0000
Manifest this update: Mon 20 Oct 2025 09:01:31 +0000
Manifest next update: Tue 21 Oct 2025 09:01:31 +0000
Files and hashes: 1: f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl (hash: K5Ss+iEF24OQ/CUH0C6+dnfAjVuohBE4iPYrII1UP2g=)
2: wiMZyenwx3I7xwOHgp4nhnMI51s.roa (hash: Qx/P/QV7oNsKOLP9lE01kMvoM8G9Aq9IlKHXWkjW/bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:34:94:59:50:c9:b9:a6:28:db:1b:75:e8:7b:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f58bc086412f4d2c54fa0702d92ce25496ce479
Validity
Not Before: Oct 20 09:01:31 2025 GMT
Not After : Oct 21 09:01:31 2025 GMT
Subject: CN=8c1b6a65a46987edcb6558f46fa96f9bee45666a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b9:7d:0a:04:fe:b1:49:ac:6f:02:7c:ec:2e:
24:cc:8e:c5:98:08:d3:57:37:e0:eb:c0:87:5e:46:
b4:b9:bf:e0:81:6b:16:2a:be:94:03:ea:54:94:d2:
19:d9:4c:76:0e:0b:52:b2:ab:e7:69:5d:cd:af:4d:
1e:24:db:f5:18:e0:cc:51:29:3d:bd:51:3b:bd:17:
78:27:6a:b3:0d:ae:91:48:e6:43:d7:fd:22:f0:08:
fa:f6:33:ec:12:c5:ef:9b:2b:75:24:8f:8d:48:f3:
0d:9b:12:6b:f3:ef:38:25:1d:55:00:a3:a9:db:77:
c2:e9:0e:8f:d2:e0:32:8b:30:25:b3:e8:4e:58:48:
3f:40:09:76:7c:f8:4b:61:0d:7e:0e:c1:f4:a2:c8:
3c:da:ff:d1:e8:04:84:48:05:53:04:eb:d5:85:f3:
bf:79:c7:e9:3f:53:6a:74:f3:77:d8:b7:ad:92:fa:
17:5c:66:0d:1c:d1:b0:9c:7f:f6:23:b6:d5:b3:c8:
b3:7a:5c:0a:17:65:e9:45:4a:c8:cb:48:78:18:a4:
87:be:4a:80:7b:a7:02:f8:e2:28:32:18:39:60:02:
b2:f1:cf:b2:49:db:cc:f7:5f:00:23:31:ec:ea:32:
21:2f:e5:91:cc:60:c5:e2:ab:bf:59:10:d5:db:e2:
e6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:1B:6A:65:A4:69:87:ED:CB:65:58:F4:6F:A9:6F:9B:EE:45:66:6A
X509v3 Authority Key Identifier:
keyid:7F:58:BC:08:64:12:F4:D2:C5:4F:A0:70:2D:92:CE:25:49:6C:E4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1i8CGQS9NLFT6BwLZLOJUls5Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/530933-5915-4ff2-b1f9-5010d05f99a8/1/f1i8CGQS9NLFT6BwLZLOJUls5Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:de:53:d9:0d:ed:2b:84:37:2d:1a:69:36:af:09:4f:e6:4d:
08:e6:30:12:08:53:dd:8b:bd:a4:22:60:8b:38:bc:d8:91:54:
18:e3:7a:20:f9:99:89:cb:e9:c6:77:62:6f:26:c9:f6:05:ca:
5e:25:e9:66:de:5b:a9:51:46:c3:a7:b4:0a:da:1e:dd:b1:9e:
ca:28:e2:c7:87:32:bb:81:dc:8e:48:6f:f6:79:47:71:e8:b3:
7a:e4:c6:63:f0:dc:d6:59:d9:5a:d2:f4:74:55:83:02:5e:ed:
86:39:71:a6:74:93:a2:aa:ea:5e:67:dd:d6:87:55:95:14:09:
e8:ce:79:6e:b8:af:93:61:dd:4c:db:67:13:f6:8c:b7:c6:53:
13:f1:12:98:9b:ee:07:7f:37:1b:2c:9b:9e:31:ca:2b:5d:75:
12:75:54:e3:42:7d:10:b2:7a:e0:ea:bb:df:b9:10:4d:03:d7:
b8:75:5d:38:cf:b8:7d:2b:fb:4b:43:df:2d:d7:08:96:37:6e:
ca:e9:9c:50:00:e7:20:45:5f:ea:a8:a2:bb:45:85:f0:12:56:
b3:69:39:6c:4f:71:d8:54:b1:b6:64:ab:91:7a:de:b5:50:60:
63:4e:4f:23:71:7e:7b:8c:e8:f2:41:ac:58:7d:ce:73:b3:cb:
a3:00:bb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:00:49 2025 by rpki-client