Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
File: _1VJGZMcZ70mUPxODHPC-z4ijZU.mft (raw, json)
Hash identifier: U2QgFMW4NpL0Bq89XTVMQqCtu9K31/D4wegCebYzRPw=
Subject key identifier: 51:C7:97:76:42:9D:A9:C4:A6:B6:71:71:B9:C1:AA:49:31:60:D5:C9
Authority key identifier: FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
Certificate issuer: /CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Certificate serial: 0199FC8F58B10E1822DD500E18246DAAF8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 13:01:16 +0000
Manifest this update: Sun 19 Oct 2025 13:01:16 +0000
Manifest next update: Mon 20 Oct 2025 13:01:16 +0000
Files and hashes: 1: _1VJGZMcZ70mUPxODHPC-z4ijZU.crl (hash: 3JWzn8mIaCiLZpI4TjMNwZBf9Y3TAEOqMXFNXFCVnCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:58:b1:0e:18:22:dd:50:0e:18:24:6d:aa:f8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff554919931c67bd2650fc4e0c73c2fb3e228d95
Validity
Not Before: Oct 19 13:01:16 2025 GMT
Not After : Oct 20 13:01:16 2025 GMT
Subject: CN=51c79776429da9c4a6b67171b9c1aa493160d5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:50:fd:9e:39:c0:09:da:2b:e2:9b:51:7b:33:
de:6b:12:21:70:fc:c7:48:c9:73:64:28:27:86:b3:
be:c3:e4:3d:91:97:92:da:ab:7b:fb:fc:32:1d:1b:
aa:06:71:c5:5d:ab:5d:7a:de:f2:a0:56:f5:59:e7:
a6:e8:7c:1d:0d:5e:a3:e0:a3:6c:d7:af:55:ff:99:
79:83:0f:63:c4:3f:66:0e:b8:2e:9c:9f:d5:89:36:
ed:63:02:7d:01:1f:d0:d6:32:c6:58:24:63:a9:c9:
3e:94:76:0a:d7:4e:fe:78:3b:4b:8a:20:40:8b:47:
4e:8d:c3:7d:44:85:dc:31:27:ad:5d:37:94:57:dd:
64:e7:31:d7:0a:49:4a:8d:0b:38:9f:34:c3:79:84:
85:97:12:2f:f1:0e:72:fe:76:cc:63:6d:87:26:e8:
3b:15:a5:7d:3b:36:71:91:34:93:53:56:ab:8c:ec:
dd:07:98:2e:a3:a0:71:48:cf:99:01:62:6b:57:ea:
f6:05:0b:c3:4b:ef:4c:83:f5:86:05:eb:af:5b:71:
79:08:a1:98:48:83:66:bd:f4:00:3c:38:cb:8f:ef:
4a:f0:05:d4:bf:3e:95:df:e3:fe:ec:eb:82:f5:38:
6c:41:0b:33:18:d6:80:96:b4:85:08:16:db:bb:21:
c8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C7:97:76:42:9D:A9:C4:A6:B6:71:71:B9:C1:AA:49:31:60:D5:C9
X509v3 Authority Key Identifier:
keyid:FF:55:49:19:93:1C:67:BD:26:50:FC:4E:0C:73:C2:FB:3E:22:8D:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_1VJGZMcZ70mUPxODHPC-z4ijZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/23244d-4886-470b-b1fc-290aa4318caa/1/_1VJGZMcZ70mUPxODHPC-z4ijZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:c2:ac:b6:93:d7:72:85:a2:f5:39:ca:eb:94:8c:e3:24:aa:
7c:16:15:82:8e:48:51:21:c8:2d:4a:39:75:d2:ce:de:10:4f:
33:81:2a:85:c2:75:5a:41:f6:da:25:67:fc:48:cf:f2:c6:5b:
75:3c:76:ec:d1:b5:ab:d8:d9:97:4c:a0:44:a7:08:d9:48:87:
45:8e:f7:8f:29:05:93:f5:e9:79:08:d1:79:47:aa:f3:dc:9d:
3e:cc:49:c7:f3:29:ee:9c:7d:9c:31:66:a7:7f:3c:7d:6e:9b:
af:f1:64:a2:ce:2e:5a:2a:23:b9:3a:e6:38:04:60:38:fb:f7:
31:33:cd:5b:23:f1:45:b8:39:92:d2:c2:8f:53:85:8a:dd:e4:
0f:95:65:af:4c:1e:b7:6c:3f:aa:ec:9f:b6:18:b9:9b:c5:c5:
af:06:ac:bf:98:77:df:03:42:ff:b5:ce:72:da:d4:d2:f1:fe:
6d:b0:f5:63:c0:3b:a2:a5:73:0e:e8:5c:4a:c9:4d:ff:ea:6c:
10:eb:1e:a9:c0:02:f2:6a:ce:7b:e8:18:0f:8b:4d:0e:35:43:
9a:12:b8:f4:61:d2:5a:cc:8f:d6:36:fd:ff:b9:1e:bf:5a:83:
32:22:6c:ee:9b:c3:5d:53:8d:02:d2:fd:ce:1b:4f:1b:05:e3:
da:e5:90:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:30 2025 by rpki-client