Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
File: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft (raw, json)
Hash identifier: NggxPtdpHxcBl4C2yogTHkvYBTFRP306RLWU+jb6lGA=
Subject key identifier: 38:B4:CF:33:83:22:0B:F9:62:ED:E7:B2:F3:53:C1:86:B1:08:5A:FD
Authority key identifier: D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
Certificate issuer: /CN=d70af942465ff265b896f0d1b762490f27dc322c
Certificate serial: 0199FCC6182A8293316B38E27E8FE1F2FD10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
Manifest number: 138D
Signing time: Sun 19 Oct 2025 14:01:04 +0000
Manifest this update: Sun 19 Oct 2025 14:01:04 +0000
Manifest next update: Mon 20 Oct 2025 14:01:04 +0000
Files and hashes: 1: 1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl (hash: ZyDhNcXqLV9ZwmmOGCp1b3bt4mxxLVOtS7yjennePl8=)
2: do1YRGxwXBzhu7NScxWRh1sCTkI.roa (hash: tvb6mnRRTkKS3vhIPuaGGEBZgzp8Y6OmqBEm+R+Kc5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:18:2a:82:93:31:6b:38:e2:7e:8f:e1:f2:fd:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70af942465ff265b896f0d1b762490f27dc322c
Validity
Not Before: Oct 19 14:01:04 2025 GMT
Not After : Oct 20 14:01:04 2025 GMT
Subject: CN=38b4cf3383220bf962ede7b2f353c186b1085afd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:98:34:6e:b6:db:1b:4f:05:53:34:53:e0:
96:80:af:b4:55:f3:7e:a1:4c:18:d7:ed:a1:67:de:
79:e3:f9:38:cf:43:af:69:03:d6:e0:26:fb:13:f1:
d6:c7:47:3e:84:3f:ec:3f:b0:85:4a:69:8f:02:17:
89:3a:01:82:33:0b:8c:b0:d2:c2:09:45:f1:7a:7f:
65:a7:44:0c:0d:a4:59:a8:64:2c:5f:86:e4:0b:b5:
46:8c:5e:a6:64:c2:f8:ae:94:fc:1c:c0:1d:79:b9:
0b:51:d1:69:66:88:2e:08:fd:98:c9:6d:c4:37:29:
14:49:a7:3c:7e:84:40:a6:f7:cc:d8:9a:63:98:c4:
65:a6:c6:da:83:94:0a:09:6b:af:59:22:0a:5c:5a:
d9:68:75:f8:c1:b3:7e:7f:fa:db:93:a3:45:5f:98:
44:00:94:24:99:16:ce:a9:65:2f:3e:9a:d8:b5:82:
0d:8f:2a:7f:da:cd:12:ac:a7:80:56:ed:e6:b0:b8:
3b:fb:9e:53:a8:8c:dd:78:96:1b:02:10:ca:ba:6a:
d5:f6:c6:75:66:0b:56:90:b1:a1:a9:55:99:75:9e:
2a:55:34:71:d6:83:ce:84:d3:93:ba:2f:dc:95:bd:
d7:5e:76:8a:00:86:7f:81:95:ac:7a:05:11:d0:83:
6a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B4:CF:33:83:22:0B:F9:62:ED:E7:B2:F3:53:C1:86:B1:08:5A:FD
X509v3 Authority Key Identifier:
keyid:D7:0A:F9:42:46:5F:F2:65:B8:96:F0:D1:B7:62:49:0F:27:DC:32:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wr5QkZf8mW4lvDRt2JJDyfcMiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/e9203d-cdcf-4f23-a3bf-f449bad29855/1/1wr5QkZf8mW4lvDRt2JJDyfcMiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:b6:d3:d4:80:bd:24:87:8d:ba:29:83:59:52:92:2e:1d:63:
97:74:01:03:6f:ce:da:46:ce:52:4d:3e:a1:34:00:ca:ae:92:
dc:38:8b:23:37:0a:3b:ed:1c:53:3a:41:95:36:96:49:d8:fc:
df:04:63:33:f9:aa:76:50:9a:a5:f0:64:6b:c5:7e:a7:87:00:
1c:fd:60:af:32:a5:42:a2:77:f1:81:53:02:76:89:f7:10:51:
b1:9c:9b:a3:e5:fe:f3:de:61:e4:bb:ec:6c:f5:73:d6:5a:46:
e7:1d:a8:27:71:1d:98:3f:57:e0:d1:50:7c:0e:da:81:3a:89:
2c:f4:80:ec:a4:54:e3:0b:5f:38:2c:19:7f:70:ab:62:65:f7:
57:2c:c1:23:87:82:ff:50:49:c1:e2:da:eb:60:f8:55:c4:a4:
4a:11:91:91:23:91:cb:ca:83:5f:31:17:b3:23:96:d5:52:b9:
61:7e:3d:d9:b5:9c:f3:cb:62:3f:74:ff:93:bf:4c:0f:d0:59:
4b:9d:80:dd:f3:e9:dd:3a:9d:d1:77:fd:6d:b9:54:b8:28:a2:
01:32:ae:78:e4:10:3b:ee:0b:ba:fd:fe:9c:3f:e0:40:7b:be:
0f:cb:4a:5f:06:12:bf:3a:e8:3b:f6:87:1a:dc:9c:12:54:92:
cf:65:9f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:58 2025 by rpki-client