Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
File: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft (raw, json)
Hash identifier: FgxltT6fMR6MhdYoj/wJiC9y1xYcehqx9Huac7a6xoY=
Subject key identifier: FD:79:9A:CF:C2:68:3D:1E:E3:9F:2A:B9:BD:E7:77:68:BC:9B:D8:9D
Authority key identifier: D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
Certificate issuer: /CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Certificate serial: 0199FCC61CA91150BCE4B913AD91C5AD2541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
Manifest number: 0EC4
Signing time: Sun 19 Oct 2025 14:01:05 +0000
Manifest this update: Sun 19 Oct 2025 14:01:05 +0000
Manifest next update: Mon 20 Oct 2025 14:01:05 +0000
Files and hashes: 1: 1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl (hash: aPHA10k96zqnwRyWmNzd3XG+IoSVs1V2J7n+zKgHl30=)
2: ZrVj2s197OVZslr8l0eL6BOnr3w.roa (hash: MfbdU/hx9JIBrv7/G68X/y0zTkmoV59GNKmYnsQV+5o=)
3: mwni58KyYHbpUQER4Pt8qtMcan4.roa (hash: 1zAR9iZ3h0/evzy5xE5e6DnfwvHvR1HUWm8sNJWcti0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:1c:a9:11:50:bc:e4:b9:13:ad:91:c5:ad:25:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d538d7726a5f1f33da15d87e5c8b0e48f50281bf
Validity
Not Before: Oct 19 14:01:05 2025 GMT
Not After : Oct 20 14:01:05 2025 GMT
Subject: CN=fd799acfc2683d1ee39f2ab9bde77768bc9bd89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ac:00:52:2c:2a:d6:4c:1b:11:6f:a2:fa:e3:
96:8b:28:5d:76:11:82:f5:ec:63:01:d5:d9:22:a8:
7a:75:7f:64:5e:fb:8c:1b:eb:f5:2f:98:ed:f8:db:
a6:97:af:f2:f2:10:7e:99:65:0d:50:69:c7:e7:f8:
9a:97:40:9d:a8:34:73:49:b5:20:88:eb:72:cf:d2:
c3:c8:56:9e:6c:ec:1e:fb:79:12:9e:1e:38:f2:19:
b5:7e:2d:70:ea:d8:c5:9c:61:c0:75:33:79:3e:df:
14:aa:b6:29:ef:d4:28:5b:3c:cb:85:f4:63:58:fd:
ed:8d:64:a4:24:1c:03:70:f0:b2:e2:3c:69:6a:69:
3a:79:82:e0:5b:da:c7:29:0b:cd:6d:b2:ad:bd:e9:
e5:c2:0f:91:81:b1:2d:62:0a:07:13:55:1f:4f:39:
bb:b2:ca:80:8d:b4:26:9d:fa:b3:ac:5f:02:b1:0e:
bf:b3:44:cc:dd:ff:33:71:53:48:84:68:42:69:66:
35:aa:29:7c:c6:23:83:92:9b:83:dc:15:aa:ba:17:
93:7a:72:da:23:5e:49:17:8c:09:13:9f:e3:a2:90:
6e:2e:7e:2b:bb:d4:86:88:ca:88:ae:70:e8:82:a9:
3e:3b:c3:3c:11:7a:fa:47:25:4f:b2:9f:57:49:b4:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:79:9A:CF:C2:68:3D:1E:E3:9F:2A:B9:BD:E7:77:68:BC:9B:D8:9D
X509v3 Authority Key Identifier:
keyid:D5:38:D7:72:6A:5F:1F:33:DA:15:D8:7E:5C:8B:0E:48:F5:02:81:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TjXcmpfHzPaFdh-XIsOSPUCgb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/43c451-e4e9-4859-b985-2d9df4ef5f50/1/1TjXcmpfHzPaFdh-XIsOSPUCgb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:68:94:f2:68:36:b8:49:27:78:05:b2:5c:2b:31:5d:01:ed:
89:4c:87:dc:a4:e0:24:99:c5:5c:38:ba:45:be:f5:46:0d:11:
5f:33:b5:54:22:9b:cb:11:a9:ac:12:e4:cf:9b:78:20:f2:d3:
8a:3b:49:33:14:0e:f7:d3:35:5d:82:ba:41:b2:5c:75:a4:35:
17:85:83:cf:d1:1e:a9:6d:ee:4e:e2:7f:ef:5d:b5:3f:d0:d4:
c5:15:4d:51:bb:d0:8e:6b:c3:fb:7f:fc:66:a1:90:e3:c5:e1:
6d:8f:17:46:29:4b:0c:c2:e9:a7:ba:0c:4e:6f:68:ba:31:94:
c8:a2:f3:d7:6a:e0:9b:95:f5:90:70:15:69:7b:9b:20:88:3f:
d0:d4:8c:23:ea:69:ae:56:1d:99:dc:c1:15:59:43:bb:55:9e:
12:95:3d:f0:88:2b:04:98:a5:72:85:9c:18:c3:ed:7e:f9:f0:
54:fd:98:75:4d:3f:69:e5:09:01:c7:1a:34:ba:cd:45:41:ea:
3b:6d:73:43:49:c2:83:dc:d3:4e:36:c4:66:3a:cf:59:3a:9f:
6b:76:7d:48:e4:7d:56:7f:de:58:6a:1e:14:11:8b:ea:c1:21:
9e:2c:84:94:31:29:36:23:a4:05:41:e0:15:e5:ee:cf:c7:3f:
52:d8:8d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:17 2025 by rpki-client