Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.mft (raw, json)
Hash identifier: xtobAe6k5rcIVPd3KZHbV2z7g3N9xVNGd4iI0lwdolE=
Subject key identifier: AF:3F:5C:F4:FB:6F:3A:57:83:63:56:3E:1D:51:B0:32:47:C6:1A:7C
Authority key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Certificate issuer: /CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Certificate serial: 0199FB4602718E894CE514FDDDF7D566DB8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:33 +0000
Manifest this update: Sun 19 Oct 2025 07:01:33 +0000
Manifest next update: Mon 20 Oct 2025 07:01:33 +0000
Files and hashes: 1: 1dWXuXOtoQUvZbPqHeHkguI_PSo.crl (hash: GZa7hLqKd+kKoPkFEwJsss/DYKe6fT/kMNpfRQGndQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:02:71:8e:89:4c:e5:14:fd:dd:f7:d5:66:db:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Validity
Not Before: Oct 19 07:01:33 2025 GMT
Not After : Oct 20 07:01:33 2025 GMT
Subject: CN=af3f5cf4fb6f3a578363563e1d51b03247c61a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:10:52:23:4c:ed:f0:2a:6b:6a:b2:bc:1a:
5a:0b:ab:0e:a5:03:19:b5:d2:4c:4c:25:39:77:7a:
a2:08:1c:bb:cf:d9:bc:93:f3:c6:7e:89:fe:15:f4:
4d:c7:5c:c2:2e:f0:bb:e6:2d:c5:b4:1f:26:0a:43:
31:a0:9c:ff:14:24:d7:26:dd:93:87:bc:e3:fc:39:
c6:64:18:01:af:51:8c:ac:f8:1f:94:65:05:37:f9:
fb:24:67:66:82:fd:f5:1d:95:25:8c:c2:a5:14:9c:
24:04:bb:90:5a:a0:09:e7:e8:c5:df:d1:8a:c1:71:
52:56:c0:fd:67:10:10:4b:c4:21:66:2d:11:c9:da:
23:f7:90:45:15:9d:59:26:4e:cb:2b:0f:f5:32:ca:
72:28:c4:34:f0:d8:dd:04:78:75:27:7f:e8:97:ba:
28:20:a1:a4:22:f7:8f:0c:96:de:1d:38:9b:c2:2e:
b1:3f:32:0f:ad:6a:56:09:69:4d:29:9f:2a:ee:72:
03:76:8a:dd:2e:f0:38:67:21:12:6b:ed:9c:3d:50:
86:71:a1:05:c0:b5:fa:e6:be:a0:1d:93:13:27:ea:
12:b4:f0:d8:a4:19:53:e4:99:1c:ed:16:37:7e:61:
f8:ef:f7:5c:c2:71:40:02:71:c0:4c:d2:16:16:98:
da:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:5C:F4:FB:6F:3A:57:83:63:56:3E:1D:51:B0:32:47:C6:1A:7C
X509v3 Authority Key Identifier:
keyid:D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e2:6a:41:33:07:2e:26:6e:83:2d:3e:1f:4f:18:8b:68:22:
61:9e:8e:1f:7c:be:43:2b:37:da:d4:ee:17:06:36:8e:32:31:
4f:ce:a5:94:4d:37:a8:55:a7:b1:a4:dd:8c:2b:ac:31:03:4d:
33:19:1f:02:ee:b1:22:3d:16:b6:83:6a:7e:7b:07:80:c0:44:
64:53:91:7f:70:e2:79:78:f3:de:56:89:68:d1:43:fc:2b:77:
2a:b4:9c:0b:48:59:9b:cb:6e:10:a5:40:92:ca:ca:a5:a1:42:
01:6b:4c:fc:ff:f1:20:2c:44:10:f7:9a:4f:63:a9:d0:6c:50:
99:7b:4f:ab:a6:57:2d:42:7d:f3:f2:78:3e:ad:58:f3:84:51:
b1:b6:de:d1:d0:d3:ce:e1:27:ad:fd:18:a5:b0:58:9e:8a:ba:
1e:5a:61:3b:a0:70:01:da:42:17:d9:7e:02:b8:10:87:bd:fb:
1d:86:ee:45:72:e8:0d:1e:d0:a2:b9:72:6c:55:9d:0a:3e:e3:
3f:4d:d9:2d:f5:31:8f:01:6d:2c:20:8f:24:ac:9d:f2:a9:7b:
cb:9b:cd:48:f1:9d:7a:4a:39:b7:e9:2d:1a:56:7e:c2:59:04:
d2:ab:2d:d5:fe:0d:48:1a:aa:32:d7:0e:b6:fc:8d:8c:4d:a9:
75:a7:4e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:19 2025 by rpki-client