Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File: 1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier: rUb0kDodD47OtIYnIS8MEnicDSv8D0Ks+3vXYhjAeEI=
Subject key identifier: 53:22:39:18:36:12:1C:9E:37:56:79:55:3B:5F:AB:10:48:C1:62:DD
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer: /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial: 0199FC8FC5964CDA84B9422774E2C7212492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:44 +0000
Manifest this update: Sun 19 Oct 2025 13:01:44 +0000
Manifest next update: Mon 20 Oct 2025 13:01:44 +0000
Files and hashes: 1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: TZYvAVujwf4gLlhuPIZm0ESljYt7ii3IAQhTJCrCaFg=)
2: J2pjS99ea6SMp7lb4ewsQffNh8c.roa (hash: 704wqH0ujui7TKq+2h1aj9AcNsB+Fn+EgZ7FOUmvebI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c5:96:4c:da:84:b9:42:27:74:e2:c7:21:24:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
Validity
Not Before: Oct 19 13:01:44 2025 GMT
Not After : Oct 20 13:01:44 2025 GMT
Subject: CN=5322391836121c9e375679553b5fab1048c162dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6e:18:2b:81:58:82:a0:9c:1d:b7:d1:c9:1b:
08:ba:cd:42:c8:72:8f:95:3b:c2:2c:06:1a:ba:4b:
7b:e8:7e:e5:05:bc:ef:b1:cc:8b:7c:6e:49:07:73:
65:37:dc:b8:38:10:f7:01:46:54:dc:ec:bd:63:b7:
9b:4a:cf:12:72:bf:73:07:94:86:c9:92:a9:dd:da:
24:65:7c:50:2a:6c:86:c2:5b:55:c9:91:e3:46:61:
e4:e9:29:76:9a:30:bd:2c:a4:65:60:35:27:9b:b4:
c3:b4:ba:54:01:c8:48:c4:d5:60:d6:1d:63:75:7c:
52:6a:b3:02:72:29:3e:c8:a4:ea:cd:77:7a:88:53:
3e:c2:91:ed:22:52:1e:64:47:62:b3:19:46:ce:be:
1d:38:e5:27:0a:b0:43:9d:ca:14:d6:dc:a8:e2:1d:
3c:2f:bb:82:5a:ab:29:7c:2a:9b:a4:e8:d5:84:cb:
95:f6:93:85:1c:18:1f:12:63:44:08:23:2c:3e:75:
ac:ab:d8:39:a2:fd:d5:0a:a5:5e:be:84:22:49:cf:
92:58:69:5f:7f:cf:ee:1f:bc:31:fa:30:7d:03:2a:
27:c5:a5:90:35:6f:0c:40:a8:de:0b:d2:c8:d9:fa:
6c:de:c3:8c:09:c6:a8:1c:34:02:6e:c8:3c:ac:a7:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:39:18:36:12:1C:9E:37:56:79:55:3B:5F:AB:10:48:C1:62:DD
X509v3 Authority Key Identifier:
keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:03:2d:a4:4d:46:b7:ad:c1:10:90:eb:81:4c:b2:af:8a:4a:
e8:ff:d0:d2:21:de:e8:9b:8c:90:ad:c1:1e:dd:15:bf:4d:b4:
28:82:92:b4:19:57:b8:28:e8:7a:64:db:fd:9b:09:35:cd:79:
f2:78:38:28:0e:6f:64:14:3a:2d:1b:ad:12:33:eb:c1:1f:70:
6a:5a:2a:d4:eb:1e:77:58:e2:76:42:ef:f3:0f:c2:18:48:0c:
45:8d:91:66:1a:e0:c6:08:d2:0e:71:ab:d4:a6:db:5c:26:e5:
a0:0b:10:9c:29:ca:33:40:08:9e:52:e2:41:83:78:de:f3:12:
de:d3:2b:b7:a2:12:29:9d:3c:98:f1:1f:d9:4c:d2:15:ea:33:
4d:3c:28:93:1f:e4:f9:fe:48:a3:4b:8b:20:6f:7e:e8:a5:f3:
b7:0b:bb:fa:bd:20:a6:7b:29:3b:b7:34:d8:43:39:bb:e1:89:
4e:f0:4b:dd:42:8e:ae:7b:c0:a7:6c:b5:28:4f:30:2e:47:2b:
fd:4e:48:63:d5:2c:d9:f3:d1:c5:62:51:96:a5:54:f4:a5:13:
54:7b:37:a6:29:7f:0f:d3:37:d8:fd:6e:26:81:a3:52:9c:4d:
f6:57:3d:c0:54:e6:58:60:a4:65:9a:d1:00:69:7f:ce:19:e6:
d1:6b:36:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:40 2025 by rpki-client