
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier: kjcBgbnO1nXcFIbqpOMrv+QK5h5hfFJas95jjwFpgFs=
Subject key identifier: A4:34:AF:24:FB:A9:24:30:D3:25:B9:72:A5:E3:9D:63:0E:23:C4:F2
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer: /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial: 0199FC21B9216070964D84DFFCD27939B404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number: 01CF
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: YztTiBVkJ3RuV8ikgDKuX6WI0A4DAfXNDamGYHHnTsI=)
2: 2w_iKrPjyXvCCJbs0F7ZOxiGDMg.roa (hash: nKdejJ8/KPh01N5ujViM/1f8ednF50B5j98TO8WaB8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b9:21:60:70:96:4d:84:df:fc:d2:79:39:b4:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=a434af24fba92430d325b972a5e39d630e23c4f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:64:40:96:fa:22:b7:27:c5:24:f0:47:18:c7:
4a:5c:4f:a1:e0:3c:29:58:aa:b0:a6:7a:6c:df:91:
62:89:3a:81:f0:78:6c:2b:53:b2:10:5a:18:10:63:
c1:2e:d5:33:2b:12:0c:e8:a2:e5:e0:ce:06:5f:e4:
b9:91:5e:0e:ac:99:fb:d1:59:e2:58:c8:c4:dc:cf:
ce:29:75:9b:57:c9:71:db:14:67:69:4d:a8:c5:57:
c2:c5:ab:d7:7e:c6:6e:de:00:1e:ae:bf:88:b7:6d:
2d:c5:88:10:f4:88:92:c1:8c:64:7c:e1:8e:c7:93:
ec:5d:be:f2:41:9b:1c:ae:75:f3:2f:bb:dd:1b:6d:
03:db:d1:34:8e:42:93:8f:30:0c:da:e2:9b:96:44:
22:c8:3a:a9:02:5a:97:e7:c5:14:e1:d1:55:62:06:
96:66:6e:03:d0:4b:e5:ad:78:84:1b:5a:60:37:a6:
a9:c4:d1:43:ae:da:37:32:0a:7f:4f:20:ab:aa:9e:
9c:1b:8f:47:e9:89:9e:fe:af:f9:63:70:e3:8e:56:
b9:41:6c:5e:7d:67:d0:ef:ce:17:a9:a3:08:26:68:
24:4e:80:51:2a:36:22:68:53:10:b0:8f:8a:75:6f:
9e:55:65:83:d2:85:92:ec:e7:fe:bd:dd:99:2e:b5:
42:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:34:AF:24:FB:A9:24:30:D3:25:B9:72:A5:E3:9D:63:0E:23:C4:F2
X509v3 Authority Key Identifier:
keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:17:84:75:d6:77:2b:9c:99:89:14:d0:33:47:fd:5b:f4:e1:
62:0c:1c:d5:d9:ba:e7:a2:c1:5d:84:1c:00:b7:1b:9f:55:ca:
56:40:5a:d2:df:39:4f:f0:57:81:43:69:1f:45:3b:48:73:17:
5d:ff:ac:58:3e:d9:44:bd:5a:3f:ee:e3:28:86:e7:18:5c:1b:
da:10:98:56:75:dc:e7:55:d0:fc:06:07:54:50:88:cf:6e:8d:
08:b7:0c:83:85:c3:fa:d1:9c:f1:76:57:1b:73:71:2d:64:91:
ac:2b:7c:1b:e2:ac:f5:f9:37:68:9d:64:9a:a4:06:00:f6:96:
e8:98:b9:2a:bf:f5:f6:0c:5e:c6:c3:03:57:4a:0a:ba:82:0e:
d9:49:6f:aa:f1:ff:d6:2b:06:6e:12:55:1c:67:6f:a4:37:64:
96:ea:4e:0c:68:f3:fe:36:7f:8c:97:ee:01:14:1f:33:7b:dc:
33:10:1f:1f:6f:7f:45:57:76:c4:90:71:94:18:34:8f:bc:66:
63:99:84:9e:59:c1:df:f9:24:8f:4f:36:7b:3e:5e:42:90:8a:
2f:fb:b5:8e:55:95:19:88:d4:83:d2:ee:cf:41:33:f5:7a:0a:
c2:4c:5d:d5:fc:2e:25:27:54:16:da:56:f2:97:87:b7:15:17:
77:12:e9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:13:10 2025 by rpki-client