Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: rauQyoCvcuFxBH0P6wBEZFYtWD8s7A61+onHzS2X/5A=
Subject key identifier: 16:6E:B7:4A:41:01:87:6F:DB:34:8E:4F:03:64:EA:3B:97:44:49:CA
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 0199FF228B08B3E73ABB08DDF7030DC880FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 1419
Signing time: Mon 20 Oct 2025 01:01:17 +0000
Manifest this update: Mon 20 Oct 2025 01:01:17 +0000
Manifest next update: Tue 21 Oct 2025 01:01:17 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: rX6qjzPVxPORDFXSvVXMTSHGOAdVZKzfI5Eh5jRvnU4=)
2: 2Z4uWBrUsnH37u-4XuHfV5Ci7Ek.roa (hash: AkCUWRms5SxBxIsWLsuMaXD0PJyWJJHr8rOMRKJRlkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8b:08:b3:e7:3a:bb:08:dd:f7:03:0d:c8:80:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Oct 20 01:01:17 2025 GMT
Not After : Oct 21 01:01:17 2025 GMT
Subject: CN=166eb74a4101876fdb348e4f0364ea3b974449ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4b:31:be:e9:dc:9c:de:74:80:3b:97:51:5b:
57:13:18:a5:64:ea:3a:ba:c3:11:f6:38:1c:00:40:
bd:35:85:e0:16:1f:ca:b3:1a:90:b0:5b:53:f1:6c:
d9:8a:75:fb:cc:e8:e1:f2:05:12:a1:5d:67:40:4a:
c2:99:7f:09:70:fe:4d:f2:7a:26:bb:61:dc:8c:06:
9e:16:27:e1:4d:b6:25:ac:a5:79:28:d0:6a:e1:48:
ac:1a:8e:b3:0a:7b:76:58:0e:b2:f2:59:6f:42:4a:
70:fb:0a:e8:87:8a:2f:2f:5b:23:03:94:6d:8f:5e:
88:fb:3f:99:6e:5c:4a:10:a4:f0:13:f1:65:01:2f:
31:20:29:bc:11:75:a0:2d:09:4d:dc:71:4e:07:cd:
d9:c3:62:55:e5:1c:32:ac:4f:f8:ce:71:d1:4a:82:
44:49:70:bf:00:6a:4a:03:0f:94:72:24:35:0f:f6:
c7:a2:54:22:95:ea:5e:75:1c:44:2a:76:a8:93:a3:
64:f3:6e:6a:ec:b8:9d:c6:37:05:8d:c6:48:fe:b0:
10:84:2b:b0:40:ee:87:1b:92:e8:b9:88:08:1d:54:
1c:29:0e:46:94:42:82:ca:32:64:9e:97:39:69:3b:
07:d6:98:a0:88:65:20:4f:18:61:1e:3d:db:00:49:
0c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6E:B7:4A:41:01:87:6F:DB:34:8E:4F:03:64:EA:3B:97:44:49:CA
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2c:8d:ba:64:5d:94:f7:2b:aa:3c:9f:82:6b:fb:5d:d3:fe:
c6:b7:09:7f:1d:5f:00:5f:83:2d:8a:80:b8:75:2e:36:d9:06:
2a:7a:01:38:2f:6e:a8:f2:cd:c3:ce:50:41:a5:97:42:f6:04:
e5:2d:7b:a3:d8:62:f9:0c:91:09:dd:fb:d9:4e:ee:5b:83:0c:
a5:d8:5c:64:b3:0f:3a:07:4a:46:ce:0d:53:53:a3:6e:e8:16:
b3:69:f4:1a:c8:2c:2e:7c:5a:ff:7f:c4:bb:e2:61:45:99:d3:
c9:eb:2a:fa:6b:28:57:da:11:c5:19:40:04:f7:f2:57:38:5d:
60:f0:a3:c6:ae:9c:7a:4f:9b:dc:dd:b1:a4:93:9d:6e:eb:7f:
9f:ce:06:5a:1f:2f:82:76:69:dc:81:65:a5:de:b5:a6:56:88:
a5:cb:ab:21:b8:49:3d:46:cc:b8:05:d3:79:ec:6a:3a:cc:ad:
c8:3d:e6:05:1c:96:db:db:a4:64:25:a5:11:04:d4:0d:c0:a2:
1b:df:6d:18:e4:c0:ef:14:85:71:57:04:d0:2c:f8:47:2d:06:
1d:b3:84:8d:08:f8:12:56:05:ed:98:cc:95:57:df:68:69:b7:
ea:80:b1:80:e5:be:2c:5e:60:3b:75:1d:2e:32:bf:be:4a:91:
99:a6:9c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:55:27 2025 by rpki-client