Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
File: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft (raw, json)
Hash identifier: 8V0Fmrcm8TCmBFUPHRw2BDa3lZGeDdu/VhzcHgd+LmU=
Subject key identifier: 45:DC:49:D2:D6:F8:14:6D:E7:B4:1A:02:EF:7F:40:5D:A5:30:9C:40
Authority key identifier: D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
Certificate issuer: /CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Certificate serial: 0199FFC7885CF6D2816036091C74E49CD5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
Manifest number: 1675
Signing time: Mon 20 Oct 2025 04:01:30 +0000
Manifest this update: Mon 20 Oct 2025 04:01:30 +0000
Manifest next update: Tue 21 Oct 2025 04:01:30 +0000
Files and hashes: 1: 1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl (hash: qqVh8UbbkE6aw7MhDBoukYyel12ywufAPmhWtEPAcKo=)
2: C2lOXCmp50JxgRXiUYxe6B0_iZ4.roa (hash: 8UNsnDOqjjcGGg587BCaothe5brbvtl6qwWOiSpwE6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:88:5c:f6:d2:81:60:36:09:1c:74:e4:9c:d5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45a8d91fe44f1a9639aed561c1bcafcbf10b25d
Validity
Not Before: Oct 20 04:01:30 2025 GMT
Not After : Oct 21 04:01:30 2025 GMT
Subject: CN=45dc49d2d6f8146de7b41a02ef7f405da5309c40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0e:98:16:cc:7c:e6:84:9e:59:b5:a2:b3:9e:
ac:5e:43:c5:54:d3:54:ef:e0:ab:fc:7e:ca:9d:1e:
84:79:1e:85:a7:50:8c:7b:f7:2f:80:90:ba:0d:e9:
7c:e6:fa:26:09:12:0a:34:e5:5a:51:ad:92:aa:eb:
c9:e3:e5:2b:64:25:e0:64:99:71:41:67:d1:03:9b:
37:19:18:b3:d3:c9:29:16:78:1b:ee:16:89:4d:79:
ba:56:7b:fd:5d:b4:12:6e:5c:c6:ee:06:76:39:46:
b8:a7:f1:3d:99:bf:3c:30:c0:1c:61:95:29:45:a4:
2c:78:7e:7b:43:a0:64:9c:50:77:50:71:e8:47:15:
b3:c4:15:23:eb:1b:68:2c:94:e5:e7:30:c3:12:8e:
a4:78:a0:73:06:4a:1f:c9:a6:da:c8:fb:24:14:2c:
73:a7:00:0a:2a:a5:82:a5:6e:1c:1e:3c:a3:7b:b3:
2a:28:4e:ab:58:41:4c:37:04:8b:60:bc:75:1b:0b:
52:87:99:3a:8b:e0:81:8c:ab:10:ac:39:3a:1b:94:
45:d1:b9:91:4f:91:92:8a:b8:72:10:db:03:86:01:
e3:7a:bb:1c:b5:ef:80:3f:73:1a:74:29:17:d7:5e:
6c:82:d5:c8:2e:e6:f2:62:86:c1:ea:ac:5b:97:8a:
cf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:DC:49:D2:D6:F8:14:6D:E7:B4:1A:02:EF:7F:40:5D:A5:30:9C:40
X509v3 Authority Key Identifier:
keyid:D4:5A:8D:91:FE:44:F1:A9:63:9A:ED:56:1C:1B:CA:FC:BF:10:B2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FqNkf5E8aljmu1WHBvK_L8Qsl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fac406-1d9b-461d-855b-58865d1e14e0/1/1FqNkf5E8aljmu1WHBvK_L8Qsl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:59:4f:8b:33:45:ab:4b:9e:e1:28:e8:58:eb:7c:df:4d:33:
ed:98:b4:20:e2:5f:01:90:62:ad:0e:9d:c8:71:5c:c7:ad:97:
9b:88:f5:65:87:02:fa:75:6d:34:06:df:b6:64:5a:11:df:a7:
51:f1:30:63:4a:b1:f8:54:16:a7:7a:af:14:32:62:0c:a8:58:
bb:72:0e:ee:d9:28:34:f2:90:d3:ef:7d:20:c7:68:7f:a8:cc:
6b:f8:02:b4:63:c9:c1:66:5a:33:17:35:1b:ae:f2:75:25:68:
bc:8b:e0:9a:81:9e:39:9c:49:7f:92:90:11:7b:76:22:06:1f:
5c:10:e2:1e:ea:14:1a:3d:27:7c:99:4b:93:2c:1b:ba:06:26:
2c:d8:2b:1e:47:29:ec:bc:a2:49:1d:7d:44:4a:35:45:d5:6b:
6d:20:da:c3:56:92:ab:4b:17:94:cf:6f:cf:82:f2:ff:e6:06:
2c:a0:77:9f:65:a8:7e:ff:e3:09:2b:44:85:41:ee:d1:d1:26:
a7:4a:56:3a:ea:77:ac:47:02:07:3f:dc:14:12:a7:df:6f:b7:
05:98:40:59:76:a0:65:c7:39:b1:20:db:ad:46:50:61:87:d5:
32:ca:20:23:3a:3d:55:b9:6f:d9:6e:d5:bd:99:6d:90:b7:86:
e9:ff:f7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:44 2025 by rpki-client