Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
File: 1vgHZgvyzZKu45FEKlNDr3GMGMc.mft (raw, json)
Hash identifier: E2qRXYH693S4/GEC08f35Pgf4UROwlFf9Dlz2kssqUU=
Subject key identifier: 93:EF:1A:E1:13:8F:D4:E5:EB:CD:AF:45:C1:B9:E2:43:A9:C3:5F:C2
Authority key identifier: D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
Certificate issuer: /CN=d6f807660bf2cd92aee391442a5343af718c18c7
Certificate serial: 0199FCFD865146FAA6B5F39B30437148AC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 15:01:37 +0000
Manifest this update: Sun 19 Oct 2025 15:01:37 +0000
Manifest next update: Mon 20 Oct 2025 15:01:37 +0000
Files and hashes: 1: 1vgHZgvyzZKu45FEKlNDr3GMGMc.crl (hash: RcFlZGLHku1TREuvHH4qPY9BL676JVJeJhXQZ0rttpU=)
2: KWwJmTARHeAHpXQEJKYr4FNXsos.roa (hash: 1063ws7p1tPR9qPGeDgdtnc+pragLeBe3JdEiKbe844=)
3: axQ4QcGTmWCvhs7XYE0LSyL0bR8.roa (hash: jnmoj5c8hE+D/ASpXs+Aut4m2SL0NpIhMDG7HImlpO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:86:51:46:fa:a6:b5:f3:9b:30:43:71:48:ac:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f807660bf2cd92aee391442a5343af718c18c7
Validity
Not Before: Oct 19 15:01:37 2025 GMT
Not After : Oct 20 15:01:37 2025 GMT
Subject: CN=93ef1ae1138fd4e5ebcdaf45c1b9e243a9c35fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:30:28:32:c5:15:e4:73:e9:b5:2a:e5:c4:6a:
55:17:f9:9c:a4:8f:e3:53:79:55:29:2f:1c:3b:fa:
d3:3a:88:3f:88:92:47:2f:f3:17:14:7e:1c:e5:f6:
7c:43:3c:c4:46:0e:75:06:3b:1f:f3:4c:bf:02:3f:
51:8b:8b:e2:81:94:fc:a2:9b:49:c8:e0:98:e3:7b:
85:e4:72:aa:e4:99:f7:d4:92:29:a2:9b:82:e9:44:
33:55:3c:92:0b:ce:bf:e4:6f:09:11:27:1e:2c:29:
29:90:d1:6f:e0:aa:b2:b7:ec:ea:cc:43:7d:df:bb:
2a:9d:8f:a6:79:87:70:1f:51:3d:4b:a8:b4:d4:7f:
88:47:f1:ce:c4:eb:ff:8f:36:52:ab:e9:e5:b1:b3:
61:d8:a2:c6:4b:c8:2b:03:61:0e:e2:54:b4:c4:9f:
67:e5:c9:27:56:b3:cb:37:a7:a0:0e:07:31:5a:b3:
1a:3e:e5:20:0d:c5:33:7e:66:ac:b6:4d:eb:53:92:
36:8a:fb:74:6a:c9:b1:44:f0:a6:eb:a0:8f:52:d0:
4c:e8:b6:f3:ec:55:37:48:d2:f2:5c:fb:cc:4a:f5:
a1:39:c2:cd:c2:41:af:e8:63:6d:92:32:93:ac:a4:
a6:8c:11:42:5a:5b:65:3c:ef:8d:a1:02:12:61:44:
cc:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:EF:1A:E1:13:8F:D4:E5:EB:CD:AF:45:C1:B9:E2:43:A9:C3:5F:C2
X509v3 Authority Key Identifier:
keyid:D6:F8:07:66:0B:F2:CD:92:AE:E3:91:44:2A:53:43:AF:71:8C:18:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vgHZgvyzZKu45FEKlNDr3GMGMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b75d64-9a55-490c-8c58-3fe17481f608/1/1vgHZgvyzZKu45FEKlNDr3GMGMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:7c:e0:e5:0b:3e:11:5f:a9:52:6e:3e:7e:d7:07:7f:9e:
dc:a8:0d:60:2b:56:6d:8e:19:23:98:d6:9f:17:4e:fa:22:b9:
5c:74:1e:b3:95:57:27:17:cd:c1:29:eb:d6:df:ae:9e:cc:7c:
2a:fe:93:f8:a2:f4:42:34:64:d3:c6:2d:33:1a:92:6c:27:58:
13:38:77:8d:48:a2:09:9e:6c:63:df:73:50:90:fd:40:f5:0a:
6f:05:8b:f6:10:10:37:5d:c4:a3:3b:6a:24:ba:a9:be:a6:7b:
20:a1:15:53:c2:71:c7:ed:06:d4:d7:18:ff:1f:1a:7d:68:ef:
a5:33:05:67:86:2e:66:5f:9e:d9:cb:10:44:63:03:1b:79:8a:
9d:a0:44:ce:7a:bf:4d:d2:81:b0:e0:aa:fe:d3:0c:de:53:a3:
b7:9f:f5:d6:41:cc:2e:9e:69:9b:dc:54:70:1a:ff:a7:dd:e7:
b9:d5:99:86:6f:69:fd:2d:d7:f5:f7:13:5e:0a:6b:ed:70:98:
07:5b:29:f9:ba:1c:d7:9b:bd:a9:70:e3:d2:ba:84:6d:23:bc:
dd:0b:7e:6b:78:86:25:4a:87:c8:7c:e4:9a:5e:a6:a7:f7:65:
60:f0:24:1c:dc:51:64:05:12:1b:18:b5:cb:75:75:5d:14:f3:
81:4f:76:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:01:52 2025 by rpki-client