Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
File: 1i6pLsybDTVLX9cC4JkfFQown-Q.mft (raw, json)
Hash identifier: /B8CQieJNWSIRGX3mLuc5QOZgXR4zzTo8CSEXKy77iM=
Subject key identifier: 35:A3:D8:1E:1C:D8:B3:DA:F9:F7:6D:9F:06:8F:D7:91:AB:FA:79:1E
Authority key identifier: D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
Certificate issuer: /CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Certificate serial: 0199FCC6117C320FD49CDE90058B3E1F6E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: 1i6pLsybDTVLX9cC4JkfFQown-Q.crl (hash: umsFHw8nioZFiBKFB5GJAJ0DopZKE9n2+JZX1mkO+Wc=)
2: LNGDPhvWhaUufvaPWy4zm2txK38.roa (hash: E9Pi4pJgm1TVZXCieOIM/HMpQ/NRLxBbn/SRBFS6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:11:7c:32:0f:d4:9c:de:90:05:8b:3e:1f:6e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62ea92ecc9b0d354b5fd702e0991f150a309fe4
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=35a3d81e1cd8b3daf9f76d9f068fd791abfa791e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:34:18:c1:df:60:c1:5d:6e:c6:e3:7f:9b:0a:
b7:46:51:7a:58:69:d9:2e:5a:77:9b:43:93:47:06:
b5:9c:78:7c:a6:96:f3:ed:a0:c0:37:60:e4:e7:71:
5e:92:51:90:36:29:08:6a:90:d7:96:a8:11:80:a2:
01:13:72:a7:1d:fe:0b:7b:c6:eb:0a:3f:d0:b7:84:
58:1d:a7:c3:26:ba:b7:c3:6b:a1:5f:5e:92:b6:98:
4d:02:9c:c6:ba:0f:44:64:ee:13:bb:fa:67:48:56:
60:ee:d8:83:ab:1a:e1:4d:17:3c:a2:e1:15:5b:e5:
d5:5b:9e:53:a5:88:7b:5c:34:81:2e:d4:9f:00:ad:
f4:00:39:0b:97:c2:ce:43:17:14:47:c7:c6:de:7e:
52:9e:22:13:d0:df:99:b1:12:71:0c:e0:00:77:64:
bb:45:07:8b:7b:56:f2:a4:88:fc:8d:a1:37:aa:6d:
0a:50:29:50:4a:e7:29:ad:12:62:b3:f7:f0:5f:67:
56:be:44:7d:8f:d4:73:90:b8:0a:90:85:2e:5c:d8:
b8:f1:f2:fe:e3:00:43:d9:d6:4c:c2:85:57:45:1f:
95:f8:50:31:0e:40:07:7c:87:c0:22:1a:9f:ba:9f:
d9:39:e7:66:55:97:3b:1a:a8:cf:e3:34:ab:93:03:
67:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:D8:1E:1C:D8:B3:DA:F9:F7:6D:9F:06:8F:D7:91:AB:FA:79:1E
X509v3 Authority Key Identifier:
keyid:D6:2E:A9:2E:CC:9B:0D:35:4B:5F:D7:02:E0:99:1F:15:0A:30:9F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i6pLsybDTVLX9cC4JkfFQown-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7b5814-7c76-495c-a6e7-54594795eea2/1/1i6pLsybDTVLX9cC4JkfFQown-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:be:02:8f:dd:9d:a7:ed:1c:e2:9a:d5:36:08:fc:79:1a:60:
92:cc:ae:bd:a0:de:1f:7e:55:a4:97:c3:a8:92:c7:e7:43:5f:
56:d6:1c:14:10:8c:fe:71:10:d5:ac:81:cd:a4:d6:86:d5:45:
bb:96:81:13:55:4e:ff:8b:88:d9:57:5f:08:ed:f6:df:a8:ed:
fa:9c:f0:a9:de:45:f3:8a:bb:ae:b3:cd:f4:04:2f:4c:e4:7a:
38:9a:f2:6d:71:42:d8:ac:0f:bd:54:6a:c3:c1:bf:a7:62:4b:
66:7c:0e:d8:bc:29:59:d0:b3:6a:68:cc:cd:2e:50:7e:d9:15:
91:99:1e:5b:39:8d:03:15:3e:25:3a:64:a6:b2:0e:a4:fc:9a:
78:46:8e:9e:c5:51:39:cd:85:ba:07:7f:a9:84:c5:12:e3:14:
89:69:1a:e7:df:86:5c:13:e3:83:9a:34:bb:50:c4:f3:56:6a:
43:61:44:46:1d:ad:40:51:bc:14:5a:43:49:4e:55:8f:c9:1c:
0e:73:a3:20:2f:86:24:f3:12:22:2d:c9:2d:74:df:d3:50:6e:
65:5b:65:7d:13:2e:fd:86:33:06:18:ac:3e:2b:01:f4:d8:09:
db:c1:1f:ff:87:b2:dc:fe:96:70:1b:8f:ac:c7:46:11:73:0c:
32:79:fd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:24 2025 by rpki-client