Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
File: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft (raw, json)
Hash identifier: CnhG6nqTxdjFlar+36Agef5cpph94l0XXwglxVV73J0=
Subject key identifier: 77:A1:5B:D1:90:B2:1E:C0:C0:65:9D:D4:02:FE:65:6B:24:11:EE:58
Authority key identifier: D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
Certificate issuer: /CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Certificate serial: 019A0448681B36881EFE2CC4C0F3BDBC011E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
Manifest number: 1675
Signing time: Tue 21 Oct 2025 01:00:45 +0000
Manifest this update: Tue 21 Oct 2025 01:00:45 +0000
Manifest next update: Wed 22 Oct 2025 01:00:45 +0000
Files and hashes: 1: 1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl (hash: NQqV3KF0mzlWnzQ8bRA8FrtXYf2uTzNKVtouVnoTjNk=)
2: fv18O4bn8ClOlAw3EqxhUtMaRVY.roa (hash: MbAls5bVgABIPeLPzkQqKtmDDsHJg+H22oDVZlLG+lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:48:68:1b:36:88:1e:fe:2c:c4:c0:f3:bd:bc:01:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6eea5fb35b512f910094dc62459c1679b583e3f
Validity
Not Before: Oct 21 01:00:45 2025 GMT
Not After : Oct 22 01:00:45 2025 GMT
Subject: CN=77a15bd190b21ec0c0659dd402fe656b2411ee58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c7:cd:ba:2b:72:5c:52:5a:74:ba:fa:94:5d:
90:31:d2:11:e2:af:d8:c6:38:51:ea:e6:94:65:a1:
8b:c9:7d:7e:80:b3:57:96:db:31:b3:7c:31:b6:22:
bc:d7:a8:34:a6:ec:29:48:1d:57:6c:d1:3a:27:34:
ab:ac:61:f6:22:1f:04:7a:67:2b:e8:3f:cd:20:57:
64:6d:c7:b6:82:00:0a:cd:94:07:2a:18:61:81:28:
5b:a7:fe:99:03:f9:03:65:af:98:98:92:37:79:d2:
ae:8b:9a:11:f2:d8:ed:5c:0c:6c:f0:e5:6d:ab:24:
93:d6:8d:23:2f:68:e3:12:7a:ba:5b:e4:8d:27:be:
b6:28:82:35:69:5f:e9:08:6c:40:5c:ad:a0:08:8c:
17:08:20:2c:e7:05:31:18:08:e5:f5:b8:89:4c:12:
20:5b:bb:c7:70:cb:2c:94:7b:54:1b:d4:8f:77:94:
bb:15:06:0b:08:0c:d5:f4:d0:23:aa:e5:b0:93:a7:
3e:f0:b7:7c:0c:26:90:25:94:43:a3:58:06:e1:50:
1a:55:de:96:10:26:da:6b:e7:eb:ef:85:fc:23:4c:
22:00:71:ab:7d:6a:ea:5f:f4:b1:53:2c:cf:f9:9a:
7a:ec:69:b5:a1:2b:6e:77:79:64:0b:5f:1b:32:d0:
68:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A1:5B:D1:90:B2:1E:C0:C0:65:9D:D4:02:FE:65:6B:24:11:EE:58
X509v3 Authority Key Identifier:
keyid:D6:EE:A5:FB:35:B5:12:F9:10:09:4D:C6:24:59:C1:67:9B:58:3E:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a23562-34df-49d5-9bf4-58fc94d0d414/1/1u6l-zW1EvkQCU3GJFnBZ5tYPj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:08:88:81:e5:d1:10:85:98:b9:90:11:52:56:e7:0d:a0:80:
2c:47:b3:59:49:52:31:5b:9f:55:6d:33:c0:e0:09:66:08:a9:
19:90:4e:ee:8f:91:b5:f6:6e:81:e8:de:28:ce:2b:44:f1:9e:
07:6e:d8:d8:42:9c:5f:fd:74:41:57:ee:ca:13:10:b2:2c:5b:
5c:fc:bb:2f:06:3c:10:c2:9f:16:e3:c6:49:ec:41:bd:83:9e:
e9:5b:db:0d:3d:ca:3a:34:e4:1e:34:ce:51:24:5b:57:41:4e:
58:d9:e8:cf:9a:da:a3:23:42:4d:26:be:27:08:ac:59:76:b6:
cd:8a:30:09:5c:e2:59:3f:03:91:a0:1e:d2:ee:79:6f:d9:e3:
97:49:1d:a5:f9:2e:c0:81:cb:6a:0d:26:7f:12:2a:d0:3d:a2:
a9:38:e3:44:17:db:88:a2:e4:7a:64:9e:29:ea:42:7c:07:9a:
55:76:74:ae:bf:04:00:c7:d1:6d:9c:14:da:07:58:e9:13:1a:
d1:3c:1d:84:ca:8f:2b:e9:36:81:8a:a6:3f:ed:31:50:01:05:
d1:5c:09:35:42:56:07:7f:e8:98:2f:b4:c8:18:5b:e6:cc:d8:
77:7b:9f:c8:a0:7b:79:22:66:27:db:d2:bb:96:42:ad:43:2b:
7e:18:5f:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 03:06:19 2025 by rpki-client