Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json)
Hash identifier: mTO+bQCZY2XC2fq9wR1RBI5QhyQVEQJGZyRRdxKZVDg=
Subject key identifier: 38:88:1C:27:31:73:63:95:15:15:53:8D:A7:EA:5A:48:FA:33:DC:04
Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Certificate serial: 0199FCC696BD524EB560720E74E43246DE9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: uaXpCipQDwax+aK7s84k3mJjsJMVhb4GFHm7UXQa3xk=)
2: YeNb4uILFMttwTAEJ0OqaURJezM.roa (hash: TrCAXhjpMq5IYAz3anoVsFKGrU1fVwfTtHHZACZFwhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:96:bd:52:4e:b5:60:72:0e:74:e4:32:46:de:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=38881c27317363951515538da7ea5a48fa33dc04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fd:64:ec:47:cf:71:9c:77:57:71:9e:46:75:
a9:94:0e:c7:37:25:a7:a9:af:04:e8:44:fe:b6:ad:
79:ac:24:45:d0:ad:b2:87:91:e7:3e:df:a5:9e:42:
1a:f9:71:f9:9e:f8:00:2c:3f:f3:18:75:22:9c:fd:
3b:91:06:69:fe:7f:53:43:47:f0:95:ae:e5:90:d0:
b0:2a:1a:0c:19:4b:88:74:b4:d6:35:e3:29:66:55:
a5:75:19:1b:ab:e5:f5:cd:4d:39:68:8a:09:45:b9:
53:07:99:c1:cb:5f:06:c6:00:8e:4a:4f:aa:26:4b:
9d:e7:64:20:25:0f:e7:31:93:3e:5c:db:8a:4d:e8:
96:1c:b8:29:68:ca:03:61:f1:3d:73:4d:1c:0e:1f:
aa:bf:c5:6e:77:3c:e6:8f:67:2c:db:c7:53:e8:97:
77:a6:78:b6:bc:42:a5:a8:f7:07:36:81:15:bb:33:
c0:5c:c3:d8:71:47:d9:51:e5:39:8a:4b:f5:37:83:
06:8e:19:83:cd:27:df:7e:cc:08:cd:88:10:bf:da:
ba:dc:58:03:a9:90:0a:fb:d8:50:70:a8:b8:87:52:
33:7a:f6:04:16:3b:68:49:b5:62:9e:e0:d9:55:97:
35:6b:f4:f7:f2:d8:d0:94:fd:a8:2e:b4:b2:09:ec:
d0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:88:1C:27:31:73:63:95:15:15:53:8D:A7:EA:5A:48:FA:33:DC:04
X509v3 Authority Key Identifier:
keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:cc:8a:bc:20:a6:7c:36:0f:4f:d2:6d:9d:ac:28:d7:8f:67:
20:43:77:93:56:a9:5f:53:aa:61:0d:ae:42:d7:4e:54:bb:72:
e8:02:36:28:55:91:5a:32:26:f0:dc:f4:83:1f:20:b0:f9:5d:
0e:1c:dc:b7:a4:50:8e:78:6a:23:fb:a5:5a:19:4d:53:4d:eb:
ae:6b:a6:1e:dd:f4:12:93:74:ab:95:90:87:62:61:cd:6f:4f:
3b:89:a8:b9:99:fa:37:3d:10:da:53:1e:c3:ef:8a:c7:f5:14:
6f:1f:82:42:58:b1:5f:df:3b:26:cc:81:8c:3e:98:40:74:1f:
99:7e:e4:2f:91:fa:b1:23:a6:cb:30:77:41:41:87:5b:cc:54:
ba:60:4e:5b:65:8c:b5:f2:10:7c:a6:85:da:e0:42:ac:d6:f6:
ed:ae:46:e1:7e:d5:97:20:fa:2d:0d:45:18:b7:ec:72:dc:86:
32:70:21:ae:6c:92:7f:88:7d:50:b5:c2:9a:4f:63:30:4f:77:
37:20:25:03:d2:3c:78:60:13:c0:32:0d:30:22:33:ed:6e:6f:
75:b5:ef:6e:e9:88:4f:18:3c:3b:85:1e:7f:7c:bb:ec:d8:4d:
9e:32:b1:d7:6a:4b:33:20:e1:07:2c:17:1c:7b:33:c3:89:8a:
63:56:7a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:02 2025 by rpki-client