Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
File: 1-mSZFaR46obf8AAsW-2YKYJfmBM.mft (raw, json)
Hash identifier: 4IyFSE3X35u5ZJXHu2nGH84/A2tyYL7yaYnH0BDWRwE=
Subject key identifier: 1C:0D:EB:93:96:0C:F3:AE:79:34:0B:06:AA:30:EF:8A:3E:41:25:37
Authority key identifier: FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
Certificate issuer: /CN=fa649915a478ea86dff0002c5bed9829825f9813
Certificate serial: 019A0111222AE9B62C0901AE24524C3E079F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
Manifest number: 1663
Signing time: Mon 20 Oct 2025 10:01:31 +0000
Manifest this update: Mon 20 Oct 2025 10:01:31 +0000
Manifest next update: Tue 21 Oct 2025 10:01:31 +0000
Files and hashes: 1: 1-mSZFaR46obf8AAsW-2YKYJfmBM.crl (hash: htG1nNeBYL47ZAyEgVjf6Rv29xACPmkYb4LUChxe2Mo=)
2: 8Ja6nLmqn5rWkD8bJIXyJiseunA.roa (hash: 0Zo4/0JR5pHj4KIYK41VyhNWjJ7czQTS1SR9Du+4qQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:11:22:2a:e9:b6:2c:09:01:ae:24:52:4c:3e:07:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa649915a478ea86dff0002c5bed9829825f9813
Validity
Not Before: Oct 20 10:01:31 2025 GMT
Not After : Oct 21 10:01:31 2025 GMT
Subject: CN=1c0deb93960cf3ae79340b06aa30ef8a3e412537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:7b:f2:0d:41:2a:9a:4f:45:9c:e8:f1:b9:
06:fb:d4:3b:bf:1e:09:93:4e:04:c1:e0:14:c2:23:
c5:2e:7a:50:e8:34:36:2c:5a:2f:37:ee:37:ac:42:
4d:2e:c7:95:bb:96:8c:9a:6f:82:21:77:ca:96:ff:
eb:88:da:86:44:93:06:c1:39:84:80:57:ed:cd:d6:
68:cf:24:da:49:f5:85:6a:cc:b3:e1:ab:7f:35:50:
57:c1:37:a8:ca:3b:40:0b:3b:f3:2c:98:28:ba:6d:
40:bc:89:bb:92:89:a1:c7:f8:2d:e9:97:92:b1:a9:
cc:a5:e1:a1:9d:3b:9f:ed:9e:80:7c:33:81:ce:b6:
05:08:2c:b1:bd:2f:1e:f4:5f:92:b6:c5:07:ce:3f:
87:5b:89:a5:e8:16:19:9e:e7:27:b1:4c:7a:13:2d:
f2:4f:d6:23:8d:23:bd:59:2d:c8:f9:88:0c:c1:79:
e6:18:f6:c7:ee:f4:4e:a4:d1:5b:37:fd:fa:4e:37:
7e:d5:e4:ca:65:89:0e:f6:08:07:19:d8:aa:87:b2:
ff:39:0a:28:cc:da:42:b8:65:14:48:ae:c3:a0:28:
03:92:84:75:0b:9b:1a:ab:f7:44:7b:ba:fa:60:90:
67:92:4f:8b:56:68:4f:1d:00:b4:35:68:aa:f7:b1:
1d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0D:EB:93:96:0C:F3:AE:79:34:0B:06:AA:30:EF:8A:3E:41:25:37
X509v3 Authority Key Identifier:
keyid:FA:64:99:15:A4:78:EA:86:DF:F0:00:2C:5B:ED:98:29:82:5F:98:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mSZFaR46obf8AAsW-2YKYJfmBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bc4f21-a977-47e2-bcb3-7ead6264e655/1/1-mSZFaR46obf8AAsW-2YKYJfmBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c0:92:d1:b5:37:47:0e:77:92:88:ad:11:4c:c6:fe:89:34:
a2:c9:c1:89:51:1c:66:5b:07:79:be:68:30:6e:b5:58:9f:fe:
d0:1e:8f:81:1e:54:69:5d:67:50:28:72:71:37:6b:87:77:bc:
2a:78:d9:d3:e3:d7:98:f2:b1:51:b1:bb:cf:8d:6b:d0:dc:8e:
aa:13:e4:06:b6:e2:44:b2:0c:38:be:a2:59:9a:c4:95:a2:88:
c7:4e:3c:3b:15:25:40:58:fc:ca:3f:bc:55:e1:47:ac:df:77:
bb:2c:54:fd:f5:1c:cd:0c:ea:6b:78:62:8f:e9:1e:5e:e1:c0:
ab:6b:7d:0a:8c:67:d3:43:53:7a:88:44:32:8a:4d:9a:f0:07:
b8:3b:bb:fe:0e:c2:14:be:d5:b4:7b:2d:c8:0f:69:3c:32:5b:
d8:fe:20:2f:17:36:c0:91:dc:21:11:c1:75:31:77:26:24:c7:
ad:09:53:65:14:cd:b8:d1:35:69:5d:0c:d1:9e:d4:e6:a1:97:
3a:2e:30:1f:70:7a:ec:60:19:05:f7:1f:6a:2c:a8:75:b5:7b:
42:dd:87:9b:e1:cc:5d:4e:5b:8e:36:44:38:c4:c0:fe:7e:8b:
9f:11:8d:7c:9a:96:f6:87:3a:39:11:c8:71:4d:81:c5:b8:d6:
f8:f3:f7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:38 2025 by rpki-client