Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
File: 1RWTKWDzwXTUlXq-n1qylSZNVFM.mft (raw, json)
Hash identifier: 2UWWDJ0cThkIo7uVvgZfkH4iyCJc7a/2nrMEE3MC/kE=
Subject key identifier: C6:F6:6A:CF:36:D0:87:8E:0C:A7:78:EF:B5:96:D2:00:9E:DD:77:DC
Authority key identifier: D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
Certificate issuer: /CN=d515932960f3c174d4957abe9f5ab295264d5453
Certificate serial: 0199FD6B40383722C03FE477AD09539A47BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
Manifest number: 014B
Signing time: Sun 19 Oct 2025 17:01:28 +0000
Manifest this update: Sun 19 Oct 2025 17:01:28 +0000
Manifest next update: Mon 20 Oct 2025 17:01:28 +0000
Files and hashes: 1: 1RWTKWDzwXTUlXq-n1qylSZNVFM.crl (hash: RBGUkVMeSpEYnmgqIj8F/hIfsIwJvz4NWH1niZvtwVc=)
2: 5-grPTSSQ46ki6vrVlQC7SeehIc.roa (hash: vQAPGdX1KSbjltYnmf1gVhaVezYrxmfY7AB2aHZ+pA4=)
3: NBYK9HcV9zHH6p3edxqHgVRXk0w.roa (hash: ctgn9UPX1hGKPuPf8G1MPg9i0aaG134wq4vfRAm3Qis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:40:38:37:22:c0:3f:e4:77:ad:09:53:9a:47:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d515932960f3c174d4957abe9f5ab295264d5453
Validity
Not Before: Oct 19 17:01:28 2025 GMT
Not After : Oct 20 17:01:28 2025 GMT
Subject: CN=c6f66acf36d0878e0ca778efb596d2009edd77dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:54:d1:0a:8a:52:1d:70:31:b0:15:d3:26:
6e:c5:c4:09:5c:1a:70:61:9b:47:8f:23:18:92:35:
f2:a1:79:ad:93:ea:56:d1:eb:08:fb:0f:af:d2:81:
2d:dd:40:c8:c7:59:75:18:0d:eb:47:5a:4b:ea:42:
6a:24:8c:e1:d3:a1:21:ff:1a:12:e7:49:3b:e1:3f:
7d:4e:14:08:cc:92:9d:e7:e2:01:ea:64:9a:51:ed:
84:90:38:59:9f:e2:dd:a0:d9:74:b2:92:a2:97:94:
a6:9c:ed:e6:9d:a1:80:90:25:f8:d5:03:fc:b2:39:
54:f8:e1:5e:66:72:af:35:d5:74:a3:fb:51:30:b9:
d3:33:61:f1:b3:1c:a7:4e:02:e8:26:4a:81:04:bf:
06:09:f3:d1:32:3d:92:7a:fe:56:c9:f5:c3:c3:69:
71:12:7c:60:d3:9f:97:ea:5f:5d:a9:7a:6b:2c:bf:
2e:fb:b5:08:1d:45:d8:2c:62:7d:f7:83:88:e4:6a:
54:c5:a6:8c:99:4b:58:9f:e0:cb:82:5f:79:c4:bf:
cc:21:cb:c5:44:3a:ce:48:85:7f:ae:ad:b7:13:b8:
c0:be:5f:b7:f5:91:41:7f:93:35:b3:de:e5:43:21:
ac:a8:21:e8:e0:e1:35:59:62:da:1b:5c:b5:eb:e3:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F6:6A:CF:36:D0:87:8E:0C:A7:78:EF:B5:96:D2:00:9E:DD:77:DC
X509v3 Authority Key Identifier:
keyid:D5:15:93:29:60:F3:C1:74:D4:95:7A:BE:9F:5A:B2:95:26:4D:54:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1RWTKWDzwXTUlXq-n1qylSZNVFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/72855f-afa8-4d6f-8ef9-13f65b543cc4/1/1RWTKWDzwXTUlXq-n1qylSZNVFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:04:0e:7e:96:4b:d6:ac:20:62:ef:a6:3d:38:d9:39:62:31:
08:ed:b8:70:21:61:1f:8b:c1:06:6e:00:72:4e:28:08:b3:96:
01:9a:aa:8b:90:56:0b:22:f4:dd:a8:eb:22:df:c4:6b:a5:ae:
ea:60:05:18:16:7f:33:ec:70:b0:f6:8e:00:4d:7f:db:c5:94:
d5:f0:c8:67:98:d8:6f:76:98:0b:bd:c4:d1:c4:66:c9:86:82:
81:e3:4d:38:46:ad:a2:fd:63:07:23:21:ea:cc:ea:75:a9:c5:
08:18:ce:d9:6a:11:08:b0:cf:be:14:1c:92:0e:bf:6b:aa:99:
8a:cf:8d:69:c4:01:d1:67:88:06:96:79:08:91:ae:3c:55:39:
ab:f7:52:ce:7f:3f:3a:6d:be:17:00:35:e3:b6:57:89:07:e3:
6d:87:0c:85:6b:5e:2b:79:4f:2e:f4:53:4b:9d:cf:d5:b0:09:
80:36:45:a5:3c:83:d3:39:51:f4:b1:f2:54:b1:30:67:ab:fd:
24:97:f4:a5:03:b8:c1:28:7a:c9:a7:74:44:d9:73:43:14:8a:
f6:26:ca:67:74:80:7a:2c:2d:df:d6:a5:b4:01:50:ff:13:f4:
c4:98:62:59:1c:9b:32:8c:fa:8c:47:76:1d:6d:10:be:45:f2:
6e:44:0c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:50 2025 by rpki-client