Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
File: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft (raw, json)
Hash identifier: pejVxG7ByigM5ZEu+MNCqkRFXAQM8/CGUhyizmxgZiE=
Subject key identifier: 6B:D7:B8:DA:C8:19:A5:06:8E:8D:3A:B9:5D:E7:38:8E:23:B9:8E:C4
Authority key identifier: F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
Certificate issuer: /CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Certificate serial: 0199FFFE6C396D5D19984BC3073DC148640D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: 1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl (hash: 5GUCU+cZ2x6dMvnKwk6lI5QNn6eJ16kNJbq6OhKaA14=)
2: xCeuCdpHeZXyZn91vNpEgouKwNY.roa (hash: YgdYQ7c1msQKXeGAh4ZCZBOnjKpRZTljQq9qhsHOdSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6c:39:6d:5d:19:98:4b:c3:07:3d:c1:48:64:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f81f6ad0df383720d3a5d03ba88c193095c574ef
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=6bd7b8dac819a5068e8d3ab95de7388e23b98ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:78:8a:14:2d:3f:c2:43:dc:1d:9f:c0:79:95:
08:04:37:9a:ba:67:f9:cd:d4:49:1c:4b:8f:4e:af:
d9:72:73:91:22:a4:f8:d1:ed:91:ea:0f:7c:fa:d7:
d1:66:f9:01:82:57:6d:88:e7:22:8b:13:7a:2c:8f:
a5:83:59:d3:01:f5:25:28:6b:29:be:40:85:64:3a:
3a:c8:ad:84:a7:7b:51:eb:7e:90:ee:bf:65:04:7d:
47:0e:e1:23:9d:4d:13:68:33:19:45:3f:bf:f2:17:
44:49:5c:89:a2:68:68:33:45:9e:19:ee:56:2f:6e:
79:1d:88:4a:7e:c7:ea:2d:ca:0b:0c:b1:f7:54:b3:
0c:41:aa:f9:1d:72:4d:f4:d7:cc:4b:bf:63:bb:ab:
f6:19:b2:a2:ef:94:a3:d5:be:99:5f:19:4a:60:ed:
fb:cd:0b:f0:be:f1:b8:08:99:6a:b2:75:6e:cb:6e:
fa:ca:4d:01:34:f2:86:37:a3:c1:e8:83:7e:10:54:
d7:f1:11:86:b5:db:e7:47:30:a1:0e:fe:b5:26:68:
b7:19:12:c1:3e:ad:42:34:5e:59:d3:83:45:ce:a4:
00:33:4f:a5:eb:ff:ff:c8:df:d7:cd:20:89:fb:d8:
87:1d:a2:fc:c7:d3:3c:69:bf:31:f3:d4:18:b5:b3:
b6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:D7:B8:DA:C8:19:A5:06:8E:8D:3A:B9:5D:E7:38:8E:23:B9:8E:C4
X509v3 Authority Key Identifier:
keyid:F8:1F:6A:D0:DF:38:37:20:D3:A5:D0:3B:A8:8C:19:30:95:C5:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-B9q0N84NyDTpdA7qIwZMJXFdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e93e9f-8caf-49a0-868e-a8c4adf98721/1/1-B9q0N84NyDTpdA7qIwZMJXFdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:ae:ca:56:85:ca:64:06:b4:c0:c1:85:22:cf:f3:80:d3:c5:
73:72:30:68:ac:1c:b3:c2:73:5c:7f:04:e3:40:3e:75:0f:6d:
b3:a9:7e:80:10:48:5d:6e:48:79:bc:8b:2e:e1:00:40:99:26:
65:51:89:ac:ca:57:3c:1a:c5:fd:7e:6f:4a:b1:81:26:5d:db:
c4:0e:5d:67:ad:d4:69:74:76:7a:fa:57:57:fe:aa:cb:55:d1:
8d:b4:18:33:bb:fe:b6:27:c4:ea:cc:1e:96:c1:6b:f0:f6:7e:
e7:a8:9f:00:a8:7a:12:4f:11:89:26:16:2b:f9:f2:a0:ac:14:
a1:36:1a:b1:e1:2b:84:be:6a:3b:62:5a:8f:99:24:b3:70:f6:
98:b7:c7:e0:e0:51:58:ad:c9:70:39:d1:a4:b5:ae:03:14:8b:
c5:ac:fd:90:6f:c2:3f:e2:53:ed:bc:42:1a:82:77:28:7f:02:
4c:6f:a1:d0:e3:32:00:5d:04:e7:05:b9:67:11:b8:18:1a:7b:
ce:aa:00:b1:db:cd:68:9c:1c:7a:c6:1e:58:39:22:7a:f8:00:
f8:ce:09:da:d6:f2:de:34:b4:f2:d5:88:c3:09:2d:e4:f0:94:
17:d5:3d:c2:8d:2b:fb:58:46:e3:ef:af:cb:ef:69:c0:8c:6d:
ff:5c:00:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:31:20 2025 by rpki-client