Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
File: RsyrdHmk4NikF3NQoAppvYg7BI0.mft (raw, json)
Hash identifier: 4sMYgePtISAAKiP0K68G9stnCwJDkJ1IgxdNl7SL5hk=
Subject key identifier: 1B:AA:B3:47:3F:97:82:96:63:57:41:04:B0:40:C7:8C:FF:46:48:1C
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 0199FDD9E21C2E7A3D688615056B7F0F2C1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 19:02:18 +0000
Manifest this update: Sun 19 Oct 2025 19:02:18 +0000
Manifest next update: Mon 20 Oct 2025 19:02:18 +0000
Files and hashes: 1: RsyrdHmk4NikF3NQoAppvYg7BI0.crl (hash: Nb65RPpSJBn+u8XddC4bO7PYUPI3Jox80nFrbDiI7zk=)
2: kbK5FbYWiIzhyfd6X1FvOM4LM_M.roa (hash: DqjgdH8s8QL3DkbtV73wzVgdXOipMU6gUg//vr7va8U=)
3: mDUiFexcT2mv6c5O8qGbFAH9b3Y.roa (hash: pPWVkb6MaBCnVH/KCkJGhD1ngVL39J0MeLmVUJGfUTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:e2:1c:2e:7a:3d:68:86:15:05:6b:7f:0f:2c:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Oct 19 19:02:18 2025 GMT
Not After : Oct 20 19:02:18 2025 GMT
Subject: CN=1baab3473f97829663574104b040c78cff46481c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9e:79:f6:89:06:21:84:db:65:75:d8:62:cc:
7e:d0:d8:ef:3a:30:9b:d7:44:57:fd:f4:b5:22:d5:
89:0e:b7:e6:ff:74:2e:ed:fb:0e:f9:5d:2a:fd:97:
87:c8:20:08:91:93:66:2d:c9:a4:14:23:14:12:ce:
82:99:8e:d3:02:7a:e0:8f:05:de:ad:1a:02:a8:ea:
79:bd:3d:92:71:9d:02:fb:37:41:41:d7:e1:84:96:
6f:21:49:cf:48:96:15:c4:0f:72:67:d5:36:3e:cf:
45:02:0e:83:1a:bb:89:06:a0:16:06:41:86:bf:10:
b6:b9:60:a5:0e:7a:93:c3:ce:66:c1:b4:d3:15:0a:
d3:53:32:35:5e:b8:41:57:01:9d:15:3f:71:d0:0d:
95:67:40:6f:15:57:2b:ff:8b:0d:3a:e8:9f:f9:16:
4b:fa:0a:43:23:a7:e6:d2:62:1d:28:2c:ae:ed:ed:
bf:24:4f:66:66:64:89:1a:bf:2b:c6:ae:b4:74:31:
8e:19:dd:e8:4d:1d:de:f1:c4:0e:53:f0:58:bc:d8:
93:a6:e3:cf:3b:9a:e0:78:f3:36:be:58:95:3f:86:
70:ce:c5:c1:71:8d:ec:d4:2e:d5:88:8f:80:96:66:
02:25:d4:4d:a5:08:a9:e9:c4:62:91:a1:5c:9c:bd:
b0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AA:B3:47:3F:97:82:96:63:57:41:04:B0:40:C7:8C:FF:46:48:1C
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:35:90:10:a5:d2:0a:49:52:0b:06:a2:be:54:5b:cf:23:25:
84:f1:08:32:7b:e4:30:0d:95:31:97:09:23:22:82:2d:50:b7:
e6:1a:17:86:d4:0c:22:1c:10:33:2a:45:51:cd:cc:93:0a:2f:
a8:65:91:8e:5e:cf:ac:9f:96:d3:b2:86:fc:b6:19:83:b1:a2:
f9:e0:82:a9:d9:3c:b5:00:c9:96:18:aa:52:2c:4c:9b:dc:db:
6a:e1:44:a5:ef:74:fd:71:30:9a:38:36:16:eb:5b:4b:35:5c:
46:a7:16:e5:14:0e:1b:34:16:14:57:9e:b5:23:1f:9f:36:e1:
8f:fc:95:1a:3b:8c:9f:6d:b4:9f:0e:4b:db:80:c5:28:bb:74:
0a:91:70:01:52:60:ad:12:f5:29:6a:40:3b:47:59:90:45:c8:
9d:68:27:50:f8:ba:1a:94:59:88:79:c5:cd:52:62:26:e6:7a:
55:5b:f6:7b:76:4c:fe:0b:f0:7c:35:a1:bd:b0:a5:17:5c:1d:
bf:29:c9:97:a4:c5:a5:66:c0:e7:68:42:7c:b8:11:73:4a:64:
37:13:61:2f:58:19:7d:b0:26:d3:6f:81:fb:e5:84:2b:df:40:
9c:fa:69:77:e5:d1:41:8a:cb:f0:d2:f3:ad:a8:23:8c:c1:66:
89:77:91:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:29:58 2025 by rpki-client