Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File: 1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier: hwZP6tClbhR5OCOn/dX9XfZjQ5gFn3IjS5KqCF7ofEE=
Subject key identifier: B9:B3:2E:9B:D8:05:59:26:A6:9A:D4:44:68:D3:03:01:44:63:6E:53
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer: /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial: 0199FAD7C5591124806BA71243622374DC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 05:01:08 +0000
Manifest this update: Sun 19 Oct 2025 05:01:08 +0000
Manifest next update: Mon 20 Oct 2025 05:01:08 +0000
Files and hashes: 1: 1-a8zXqKmuNRgVPV4192OV1bknwE.roa (hash: gqHxvIckMu2Lte9MvNCn2JfrjMNz47mdlspHr2lNqy0=)
2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: kpSrmSErFdf3ahncxB2oy3E+txBH1eIklVscKPbc0M4=)
3: GnY_25RaB7VB-Uit3iO_cOg1Kw4.roa (hash: ZVEoTNxwNym6ttfGviMGg7HgfXQQGhqaSdVzNN7qtAU=)
4: UCV_wWObO7yn0rdsq3WdkI9c0ao.roa (hash: /hdTNc7Vsm2zFa0tev+TWkzp0ilL4Wfo3WC4MWXESGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c5:59:11:24:80:6b:a7:12:43:62:23:74:dc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Validity
Not Before: Oct 19 05:01:08 2025 GMT
Not After : Oct 20 05:01:08 2025 GMT
Subject: CN=b9b32e9bd8055926a69ad44468d3030144636e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:0d:5e:bf:72:fb:12:92:c2:47:e8:ea:7c:e2:
cc:55:a6:00:a1:72:15:a9:23:4d:45:47:10:5f:e0:
60:9d:8b:08:c9:4b:a9:69:a5:5a:66:eb:db:8e:67:
09:f3:46:99:51:56:61:68:29:6f:a4:d2:d2:41:51:
19:5f:29:da:42:b4:3f:c2:fd:3d:df:5f:f3:73:b2:
80:af:9d:38:dc:32:05:4a:06:4c:e7:77:4c:f1:99:
d9:79:29:1f:2d:49:c7:eb:b1:a0:80:69:79:7f:fb:
13:d8:a8:3e:81:bc:bc:2f:b4:79:ad:33:fb:ef:ef:
99:39:1a:30:67:d5:e8:45:4b:94:35:8a:dd:b2:12:
d9:df:0a:6c:33:5e:99:3c:e7:6f:12:d2:10:33:20:
9d:79:7b:da:1d:64:ae:2e:48:c4:7e:82:da:a7:72:
89:4d:8a:3e:bb:f2:68:68:72:be:c5:41:77:cb:e0:
db:90:57:67:e9:44:59:a1:84:4e:12:50:f3:46:33:
3e:86:7b:4d:03:ae:cb:81:af:32:8d:8d:10:a7:2d:
7c:7e:7b:89:bd:76:5a:7d:86:b8:d8:3b:c8:7c:f7:
8e:fb:64:1a:2f:01:f9:c0:d4:d9:22:f5:64:6b:16:
e4:9f:57:73:2c:e8:3d:bf:4d:67:3e:57:85:e4:b4:
53:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:B3:2E:9B:D8:05:59:26:A6:9A:D4:44:68:D3:03:01:44:63:6E:53
X509v3 Authority Key Identifier:
keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:dd:e9:73:61:e9:38:0a:7a:81:02:40:90:b7:aa:56:b8:aa:
ad:bc:cc:02:24:a0:10:64:4b:10:6f:03:bc:af:85:ed:57:5b:
51:5a:2d:2f:db:d9:5d:e5:63:39:5e:c0:25:7d:b5:78:1a:d0:
f1:bc:a7:e3:50:e3:63:ea:f1:6a:ec:9f:08:f9:6e:37:03:84:
63:62:d8:e6:25:e7:6b:7b:c7:7f:8b:f7:f9:d9:ab:28:7f:d4:
4a:4e:3d:e4:77:4c:f4:a0:5c:f7:fd:af:71:0d:e9:25:7e:0b:
9d:f2:dc:aa:c0:a9:9f:ff:99:5e:0f:43:0f:31:1f:e8:d5:24:
dc:93:c3:52:f6:4a:dd:06:e4:f7:de:6e:78:3d:c7:7c:a0:3f:
a5:11:b5:b4:73:bc:ec:b5:d7:69:da:c9:26:ac:af:8a:08:d9:
e4:2b:6a:2a:99:30:12:4f:8f:bb:b4:c2:1e:d8:28:03:a8:eb:
85:6e:48:91:27:8e:ab:26:e5:96:28:3a:f5:ba:33:ab:85:f4:
41:99:23:83:52:7f:af:22:af:c6:87:3a:08:f7:68:30:63:67:
40:94:80:1d:3f:f3:16:c6:41:25:8c:bc:60:f2:18:67:53:65:
8a:db:e1:06:15:b0:7c:01:f7:a6:da:bf:23:ac:c6:7c:02:6f:
c4:33:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:44 2025 by rpki-client