Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
File: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft (raw, json)
Hash identifier: +Lk08ldFWsEeW9dHQosMegg/9TOueB/LFe0CTaC1VdU=
Subject key identifier: 23:C0:56:AD:24:97:67:CD:5B:EB:E5:15:76:CA:4C:A8:DC:AB:7F:1C
Authority key identifier: FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
Certificate issuer: /CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Certificate serial: 0199FCC699EEEB46B89E9D8E68ED14F8D346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:37 +0000
Manifest this update: Sun 19 Oct 2025 14:01:37 +0000
Manifest next update: Mon 20 Oct 2025 14:01:37 +0000
Files and hashes: 1: 1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl (hash: zLq883iYdCNoYmCr5azsQd+QToCj7Y0Ietw0K/RSxi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:99:ee:eb:46:b8:9e:9d:8e:68:ed:14:f8:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa33566c8c5b83b2f3e1698b97112594e8210818
Validity
Not Before: Oct 19 14:01:37 2025 GMT
Not After : Oct 20 14:01:37 2025 GMT
Subject: CN=23c056ad249767cd5bebe51576ca4ca8dcab7f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:90:44:c7:ba:a8:95:d3:cd:f0:5f:14:80:
e5:ed:5e:ba:19:b8:a4:cc:ad:a2:6d:f1:51:8a:5f:
64:2f:09:dc:b0:18:a3:4e:97:9d:ab:cc:e6:6e:3c:
74:b5:4b:3d:47:f2:93:5d:c1:7f:d5:1a:22:06:9a:
67:57:1f:0c:f4:bf:2f:7f:19:50:bb:37:1e:da:4b:
fc:9b:9c:6d:a9:70:d2:a0:8e:28:eb:8c:71:23:f8:
f5:e5:af:20:2f:d2:e6:2f:67:22:b8:55:b4:cc:e2:
a2:6d:2a:a6:78:99:85:13:a6:51:32:d3:3b:09:37:
e7:29:68:85:d0:31:1c:d9:d4:bb:5e:a4:18:ae:56:
52:eb:28:03:47:c0:a0:ee:03:63:df:b6:0d:e8:8f:
34:95:30:93:e9:0c:22:8e:8b:97:c5:93:6b:36:ef:
40:52:44:a9:dd:72:03:87:a1:8e:c2:99:5a:da:47:
c6:0a:8a:7c:6d:ca:6f:9f:6a:c0:94:90:99:11:20:
33:8d:dc:4d:b8:38:4e:ca:33:2d:0a:1b:9e:3e:00:
af:60:84:16:80:3c:b0:56:c9:a3:4e:1a:0d:78:3e:
1f:20:dd:6a:93:dd:67:8d:d5:40:d8:48:8d:d3:83:
3b:e5:42:23:c1:46:87:a5:14:f9:5b:77:a1:50:00:
8d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C0:56:AD:24:97:67:CD:5B:EB:E5:15:76:CA:4C:A8:DC:AB:7F:1C
X509v3 Authority Key Identifier:
keyid:FA:33:56:6C:8C:5B:83:B2:F3:E1:69:8B:97:11:25:94:E8:21:08:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jNWbIxbg7Lz4WmLlxEllOghCBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/e31347-d79b-4144-8749-c333794a7b97/1/1-jNWbIxbg7Lz4WmLlxEllOghCBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:c1:44:7a:ce:ad:8e:80:5e:84:92:7a:08:0e:89:47:a9:a1:
ac:a5:b3:a8:75:c9:98:4b:d4:ac:f5:38:f9:5b:ef:c5:c1:16:
e8:6b:32:dc:22:2c:9d:c9:6d:b2:05:b3:7b:a0:eb:cb:f0:98:
c0:83:50:f0:3e:25:5c:4f:62:61:d4:2b:c7:d3:6b:51:8a:a2:
66:c7:5c:f6:30:de:31:52:5b:95:6f:eb:6f:e0:ae:e7:f0:4d:
0c:ac:69:ac:b9:54:1c:e1:85:93:6e:bf:1f:e9:b7:ca:c1:8d:
8e:2e:02:3a:43:d5:ce:5e:70:44:de:7b:32:34:88:59:88:0b:
9e:cc:38:4c:9d:12:51:af:9c:81:0f:d7:40:2e:a4:a4:67:b9:
10:e1:32:30:62:ed:f3:53:f8:c4:41:70:39:a9:90:b4:cc:c0:
8c:7b:fe:18:b4:9c:c2:0e:2e:ea:17:73:1a:1e:4c:3c:fe:97:
a3:a4:80:0d:b0:e7:19:f8:3a:36:4b:fa:b6:1c:0b:ad:ee:a7:
df:da:92:d0:d1:f3:c3:18:e1:bc:b0:e1:b7:90:55:9e:06:a9:
cc:4d:b5:5c:7a:63:c3:04:12:97:af:54:d1:ae:52:db:47:48:
cd:da:80:6e:0c:9c:d1:1c:70:10:ab:b2:0d:18:14:66:80:51:
86:86:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:44 2025 by rpki-client