Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: o0GGU6clJp0zJTDyWm5WNdM30O/IZ7W9n5F0/ioKj88=
Subject key identifier: 47:1B:0E:8B:98:24:A4:57:C8:42:6A:49:6A:61:4F:30:12:92:00:F7
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 0199FA6A4887A925BE8F378B5E98F9B52914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 03:01:33 +0000
Manifest this update: Sun 19 Oct 2025 03:01:33 +0000
Manifest next update: Mon 20 Oct 2025 03:01:33 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: b4O+8SDJTJYpn576GIzQgLWiN67qSvi1Mz84Xbz4oq8=)
2: ApRmxFrIHgDq0uE514jDIHsfIeg.roa (hash: wwR59HFeyAkBUrzznAPWkLGe9T2sf1JpKPVH96BNgPU=)
3: LDvMOjEUxjVrAxBBKwXZ2WWq0ic.roa (hash: lSJbEniX1S5iq6pQApVmxDosGfWL1zz6nfIQW1JNw3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:48:87:a9:25:be:8f:37:8b:5e:98:f9:b5:29:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Oct 19 03:01:33 2025 GMT
Not After : Oct 20 03:01:33 2025 GMT
Subject: CN=471b0e8b9824a457c8426a496a614f30129200f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:9c:cc:cf:88:cf:b4:0b:37:4f:30:9a:3c:
f9:3d:15:70:46:69:3d:73:92:51:ad:5d:6f:03:78:
f8:0a:fb:12:60:50:8f:21:a6:18:c6:88:91:c2:8a:
ca:0c:7d:3a:a4:7f:a7:79:6b:88:1c:37:39:65:49:
65:8b:5d:38:1e:7e:10:b4:3f:ec:a9:aa:a1:c8:8d:
08:01:7c:6d:d5:76:08:6c:e8:4a:12:1b:6e:7f:48:
4d:96:32:a3:1d:61:39:d2:2e:8f:49:7a:bc:4c:40:
0b:49:18:d2:b3:84:a1:ff:da:74:d8:82:fc:5b:5d:
8f:ec:3f:31:e4:92:e8:0f:52:c9:a4:f7:6e:69:b4:
0c:50:fd:7f:30:81:20:24:b6:60:d1:b5:90:54:59:
ec:ef:77:04:db:42:6e:f0:12:06:82:0e:48:e0:f6:
49:72:ca:ad:d8:53:a5:ed:d4:da:b5:31:fc:44:00:
26:0e:8d:17:fe:b5:e2:b5:31:6c:ac:e3:b3:69:79:
5d:91:ed:59:a6:c9:fe:93:a1:ca:83:ef:16:7b:2f:
55:99:e7:31:f9:ee:13:e4:c5:3e:88:62:a2:9f:28:
dd:15:d4:a9:85:18:6d:29:cf:b8:78:e5:72:a9:29:
77:fc:b2:d4:48:86:33:06:19:d3:bf:8c:21:bc:6e:
b8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:0E:8B:98:24:A4:57:C8:42:6A:49:6A:61:4F:30:12:92:00:F7
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:61:25:a8:eb:dc:26:d8:ae:e1:51:40:22:2b:8b:bc:86:2f:
3f:85:bd:35:43:39:b6:1b:30:bc:86:9c:5f:21:fc:6f:00:b9:
84:9c:17:74:e7:51:90:de:14:67:a5:cc:90:f5:ac:e5:f0:ee:
7f:d9:25:22:07:2e:56:92:c7:f2:d9:57:d2:42:ee:06:dd:5c:
21:af:36:b5:63:b8:c1:db:5e:30:15:c0:e0:13:21:d0:d9:87:
b2:99:ad:19:77:13:8f:20:dc:46:37:51:a3:7b:8a:7e:38:0c:
a3:01:30:41:30:78:2a:f2:80:c5:2d:b7:d0:f3:a4:d1:c9:df:
e3:1b:a2:7f:31:08:21:18:1f:b5:a4:b1:3f:ed:ce:a2:57:8b:
f7:3b:6b:60:cd:e1:b4:c5:32:11:35:32:ec:57:1e:79:16:0b:
01:06:64:97:bf:96:eb:53:1b:ac:75:7c:52:c2:68:a4:6a:d3:
ea:75:28:93:df:34:58:32:ca:f6:ba:d4:06:64:93:f7:d2:06:
d1:a5:bc:97:05:9c:82:50:38:65:ea:68:31:d4:96:1f:8e:18:
f1:04:89:8a:21:2c:bd:f4:b2:4f:6e:59:f2:a2:04:0c:38:bd:
0b:2c:c2:ff:ce:0d:c8:c5:29:5c:5b:a7:2e:04:77:8e:71:03:
bb:0e:9b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:56:59 2025 by rpki-client