
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
File: 1zeCTg_6efGLn8SdbLDdgcmmyig.mft (raw, json)
Hash identifier: +p50IdXldixtYt74agvib9ji3+D7h9tDolgkg9ON83M=
Subject key identifier: CF:A9:8E:57:D7:8F:F3:76:9B:4F:67:EB:FF:C6:BE:10:2A:A3:7F:53
Authority key identifier: D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
Certificate issuer: /CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Certificate serial: 0199FC8F5E616E7A9E355B30161724FA4714
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: 1zeCTg_6efGLn8SdbLDdgcmmyig.crl (hash: o9/q+Tk3pShqRjaQAQjD3Ul8LnmYuWXpL8Gsjey3vhQ=)
2: gx5eiwrC9QRov09jLW6Ry8a41tM.roa (hash: +LsTPMN/8+zCvgXobio7naaWnMZxaGw5toiq6o6GEUA=)
3: kdM69EkWu9GxJCcShuJ7ttDKH4Y.roa (hash: vxcNPrB9DwOKLJbClf/tkagm/g99z1Vy26rmuXa9BjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5e:61:6e:7a:9e:35:5b:30:16:17:24:fa:47:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d737824e0ffa79f18b9fc49d6cb0dd81c9a6ca28
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=cfa98e57d78ff3769b4f67ebffc6be102aa37f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:68:17:55:0c:b3:a4:79:96:7a:ac:fe:d0:de:
82:0f:ca:4a:92:04:32:ee:da:38:41:6b:25:70:c0:
33:de:8d:5a:eb:e3:b4:d6:de:66:ba:9b:88:17:2f:
a2:32:64:ad:9b:01:e6:ba:f6:94:3d:eb:56:77:80:
97:fd:55:8d:62:fd:bb:58:6a:fd:fe:09:cc:00:41:
de:d2:d4:39:3c:c5:31:28:09:91:09:94:71:df:db:
9f:57:38:f7:65:be:b8:4e:33:80:c4:3f:de:bc:1a:
dc:f2:9a:31:64:78:1b:89:75:71:29:58:60:02:12:
a5:f0:81:a9:28:c4:2b:ef:33:ee:08:f4:0f:20:1d:
0c:1e:bf:5d:da:0b:f4:cd:de:7c:d6:47:24:9a:df:
c9:c8:fe:68:8f:43:fc:a8:8d:97:56:6f:78:84:96:
ec:bb:21:b7:5a:9b:b5:53:f9:fd:94:72:2d:b8:70:
3f:4f:49:dc:49:80:2a:b2:4c:47:af:af:55:a1:3f:
62:83:a3:d3:ea:0f:9a:50:27:af:7e:08:fa:52:c0:
a5:1e:74:32:3d:36:88:72:22:f6:f9:d4:72:9f:2f:
bc:5d:36:86:59:a4:e8:4d:af:f8:10:b9:69:5b:60:
99:70:4f:ae:45:4b:d2:e4:e7:74:70:3c:76:54:c7:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A9:8E:57:D7:8F:F3:76:9B:4F:67:EB:FF:C6:BE:10:2A:A3:7F:53
X509v3 Authority Key Identifier:
keyid:D7:37:82:4E:0F:FA:79:F1:8B:9F:C4:9D:6C:B0:DD:81:C9:A6:CA:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zeCTg_6efGLn8SdbLDdgcmmyig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/446d40-5782-4de0-a2c5-b68f5d8f651a/1/1zeCTg_6efGLn8SdbLDdgcmmyig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:08:10:26:58:7a:61:b1:05:57:78:4d:84:9b:f7:42:45:51:
64:9d:43:92:37:19:7a:c8:fa:0b:a9:fb:18:1d:e8:0f:28:b7:
fd:71:ba:17:45:db:34:18:1b:01:fb:8b:0b:85:b8:94:4c:1c:
b7:d4:69:38:dd:9b:19:9a:36:bf:03:07:1e:76:17:8c:27:97:
bd:34:43:23:a8:a2:a3:1a:e2:89:09:2e:74:c8:12:68:1d:e2:
12:71:ef:36:06:8f:f6:65:88:bf:1c:99:15:d0:bb:54:06:16:
dc:96:a2:ec:8a:1a:13:6c:f8:4c:de:7e:ab:ad:d6:ba:88:ea:
3a:68:6d:70:3c:31:b2:b1:1c:78:62:f3:42:78:f9:24:4b:62:
17:f8:7d:6f:86:7d:dd:77:8e:45:41:ca:d4:c4:63:6f:c3:2c:
9c:29:4e:c4:3d:59:52:37:f3:e3:3f:56:3b:b6:01:49:b4:a0:
0d:d6:40:72:09:4c:66:07:dc:8d:75:8f:03:f6:f0:00:d4:3e:
9a:bd:f8:c1:a4:ca:b6:35:af:5d:a8:f3:01:87:41:a2:99:dc:
c1:bf:8c:63:47:7a:51:f6:35:f0:4f:9d:ab:1c:b0:3d:1d:72:
87:1e:7a:d8:2f:aa:d1:bc:92:4d:0f:b5:68:8a:e3:0b:8f:3d:
0c:55:18:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:03 2025 by rpki-client