
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File: 1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier: HwHO7sHDEKEOMwYNp9GvGR1+Zybsr252hGTk8fCsV9Y=
Subject key identifier: 01:45:29:4F:86:F0:FB:78:F2:41:13:9E:28:A9:F3:82:93:BE:9A:43
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer: /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial: 0199FD349B1DD79EB40A46453B060999BCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 16:01:47 +0000
Manifest this update: Sun 19 Oct 2025 16:01:47 +0000
Manifest next update: Mon 20 Oct 2025 16:01:47 +0000
Files and hashes: 1: 0IRPcg0Zsb-gPoOdS1ZxVTcB0GM.roa (hash: ujPSAk32+dpIjTUsucTHydurSTU82h9ZEz2rCwGCvb4=)
2: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: Uw47CtbG0XB2o6cLSzYhUk/1J6597uiRHDmAiPPL7Ek=)
3: 27QIFK3RME4zastoZr-Aqup92E4.roa (hash: AP5Zl89w4EnvvkKDLE1wTCUl3HvQyebnmKUtnCiGMTg=)
4: JbyektcecEj3BAlwzdyd-YQZG-I.roa (hash: qaQjv/GNe5ncVF9/+USSvz1DDnlwL3O9F43o15WDW8o=)
5: Pza9faIJ5cktDsZNFR6fEzPMTws.roa (hash: IZazQ28vh340utjMZWOtEpCw1yIpqU4ff78jK5/vzyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:9b:1d:d7:9e:b4:0a:46:45:3b:06:09:99:bc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
Validity
Not Before: Oct 19 16:01:47 2025 GMT
Not After : Oct 20 16:01:47 2025 GMT
Subject: CN=0145294f86f0fb78f241139e28a9f38293be9a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e7:e8:01:07:f5:d3:11:34:88:eb:33:da:5d:
be:93:60:c2:bd:8d:18:3d:85:9f:25:be:23:67:22:
22:4f:37:98:2d:e0:74:29:3b:6b:ca:b2:77:e2:fd:
73:90:e0:27:a4:2e:34:a4:31:01:78:2d:4b:bd:3e:
38:a1:b0:a5:1b:b2:ff:ba:61:cc:11:58:57:8f:6f:
99:19:36:04:bd:25:fd:a4:83:b6:da:f6:03:c7:59:
48:ef:f7:12:ae:06:17:c7:68:9c:53:f3:6f:fb:4f:
d6:2c:b8:d0:28:6e:5d:7d:25:e5:d1:b5:12:f1:1c:
e1:e9:15:3e:13:4a:98:46:1b:1a:b4:8b:95:4a:a5:
57:da:f8:2b:f2:5a:a6:52:10:75:a1:77:3a:5a:e3:
2d:5d:46:c5:a1:b3:8e:8f:4f:5d:12:82:0c:1f:96:
e6:61:ee:17:af:6f:3e:29:2b:d1:64:b4:da:fc:ba:
7e:7b:ba:88:a1:1e:b5:2b:ee:05:7c:ce:d5:a2:ba:
32:71:5e:a7:57:a9:ed:e1:fd:e6:29:98:8e:85:df:
d9:f8:51:f6:38:3d:86:08:54:2d:b1:fa:4d:7e:c5:
c8:fa:2f:6c:5e:09:08:94:1e:84:2a:ad:55:de:48:
73:c2:99:c6:06:fe:85:bd:af:e6:fa:b4:5e:39:82:
cb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:45:29:4F:86:F0:FB:78:F2:41:13:9E:28:A9:F3:82:93:BE:9A:43
X509v3 Authority Key Identifier:
keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:f7:6b:af:51:91:0e:19:af:69:90:8e:97:43:5f:49:17:10:
a7:8e:8e:aa:ae:dc:ea:95:9e:18:50:67:79:1c:76:6c:3f:d0:
c8:88:5b:f3:dc:07:36:e5:02:3a:81:f0:b5:f2:86:8c:d5:3f:
68:90:27:f7:f9:ee:b5:2f:89:be:af:7c:04:8c:46:51:d6:ea:
74:66:e2:7c:20:21:7a:2b:70:c6:0d:8f:61:45:f5:e8:8e:67:
64:88:dd:b6:b1:57:70:10:44:a1:10:ba:5b:6a:49:a7:a3:be:
64:7d:72:fc:79:79:63:be:0b:61:7e:d2:79:30:a2:46:50:27:
bf:a5:cd:99:b7:5b:6d:00:a2:81:c0:7a:61:35:78:d0:bb:79:
56:c8:c9:20:54:e0:15:2e:d2:03:39:2f:1c:40:3b:74:5a:5b:
1a:32:5d:98:ea:8f:ab:3a:1e:f5:25:bb:84:f7:bc:00:51:df:
42:17:7f:b2:1f:44:2b:6a:38:95:9d:a8:12:58:19:45:78:27:
3a:26:cb:01:89:84:f4:d0:48:42:23:b3:2d:40:0f:80:de:38:
15:12:cb:c5:0f:a4:2a:f8:ce:03:68:89:50:e8:1a:40:1d:cf:
d9:f4:01:5d:42:dd:80:f3:7a:ae:7a:ec:82:ea:64:11:d0:d5:
ee:39:94:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:06:21 2025 by rpki-client