Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
File: 1-RVYjvgFRokoxj2rCGMAheXQj2U.mft (raw, json)
Hash identifier: BbL4bDHyv3KvOFieOU/xCEPV+CAmWoMa3O2SlNE0Nvk=
Subject key identifier: B2:B6:45:28:21:35:16:B5:DD:1D:95:0C:7C:9A:A2:74:BE:04:0D:13
Authority key identifier: F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
Certificate issuer: /CN=f915588ef805468928c63dab08630085e5d08f65
Certificate serial: 0199FDD8FD315EDC1BC948FD83E896CBC79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 19:01:20 +0000
Manifest this update: Sun 19 Oct 2025 19:01:20 +0000
Manifest next update: Mon 20 Oct 2025 19:01:20 +0000
Files and hashes: 1: 1-RVYjvgFRokoxj2rCGMAheXQj2U.crl (hash: etdC4/D1i6jSckIC5Bw9vKyKYUTyjqAt08gjJTWgQkc=)
2: kSpoSxHKDe6NIGWDkuL60L15TUg.roa (hash: H+OsucCLJz/FqkNDXLyLTzKpNO9y1yCy5pgD6JvPI6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 19:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:fd:31:5e:dc:1b:c9:48:fd:83:e8:96:cb:c7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f915588ef805468928c63dab08630085e5d08f65
Validity
Not Before: Oct 19 19:01:20 2025 GMT
Not After : Oct 20 19:01:20 2025 GMT
Subject: CN=b2b64528213516b5dd1d950c7c9aa274be040d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2c:d5:69:43:af:56:b8:be:a2:80:5c:68:49:
a6:f7:b6:4b:41:9e:c7:95:dd:d2:23:5b:e1:4d:cb:
ac:00:94:98:96:5b:0c:13:41:e1:b9:b5:7c:e8:e4:
fa:b9:50:a0:0e:c6:6f:c1:19:ef:dc:95:01:0e:91:
fc:46:6e:e3:ba:ee:31:90:b6:17:b3:34:6b:c6:ab:
81:68:45:bf:2e:75:80:1b:df:fc:4d:c9:f8:d7:f9:
51:4f:af:54:0d:2c:9c:12:bc:c2:63:a2:14:1c:73:
0f:48:d2:22:e1:84:76:6b:5f:dc:64:ec:85:fc:b9:
2f:64:a6:c2:bb:74:f5:22:86:fb:e8:5c:7b:1c:a1:
bb:93:3c:f6:72:ab:7e:07:77:75:e2:b6:bd:9c:a0:
ff:5a:fc:14:e1:24:d0:04:02:9f:cd:be:e5:e4:ee:
6e:99:8c:de:58:d3:87:95:58:cb:3d:c3:cf:b3:d4:
91:16:fd:80:5a:e3:1b:35:e9:d9:aa:26:8d:f2:32:
9b:54:b6:81:51:ca:4d:2c:07:55:79:0e:3d:fe:b5:
6b:20:0a:58:fd:22:15:9f:2e:85:fb:99:10:9f:24:
53:ea:e2:45:c0:7c:fd:9b:50:13:4d:7a:a3:3b:a1:
56:fb:5d:ee:9d:8d:24:5b:b7:ad:81:ec:ea:03:3e:
93:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B6:45:28:21:35:16:B5:DD:1D:95:0C:7C:9A:A2:74:BE:04:0D:13
X509v3 Authority Key Identifier:
keyid:F9:15:58:8E:F8:05:46:89:28:C6:3D:AB:08:63:00:85:E5:D0:8F:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RVYjvgFRokoxj2rCGMAheXQj2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7b9224-abf1-4ca3-b001-bc8277e75e0c/1/1-RVYjvgFRokoxj2rCGMAheXQj2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:53:c9:8c:ac:7d:f6:b0:48:0a:70:5d:74:9a:6e:00:ef:07:
96:47:23:58:b2:b4:97:02:c4:c6:40:38:ef:73:39:ed:ca:4e:
b1:d8:85:e3:60:cb:44:f4:67:2c:80:cc:fd:b1:b4:77:d7:94:
89:23:a5:00:b9:d8:8e:25:81:2d:4b:05:c7:c9:3a:30:b9:cf:
5a:81:b0:9f:ac:c6:31:71:b1:50:f6:9a:a9:2a:51:71:21:f2:
d0:0e:1d:22:bb:54:06:20:c7:d1:66:69:9e:33:f0:03:6d:79:
f4:e4:1f:19:5e:e3:fa:57:52:51:de:b8:40:0a:7d:dc:db:8a:
20:c7:8e:ae:a6:ed:ea:e6:f8:f6:0f:34:3a:3e:1c:2b:be:22:
c4:27:da:cd:77:91:a6:de:90:ab:47:51:c1:dd:5f:92:18:fb:
0c:1d:61:d2:4d:3b:92:61:81:51:ca:99:e3:e0:a5:73:65:c2:
c8:1f:ea:22:71:4e:99:18:10:0c:1e:a6:25:8c:d9:4b:91:49:
fb:47:d9:11:4f:2f:13:12:c6:62:72:37:f4:06:66:b3:d9:ff:
75:12:fe:af:04:d4:31:22:28:fe:65:b1:76:b8:a0:2d:b6:89:
c9:b5:07:87:39:52:61:14:53:d8:bb:b6:c3:d8:77:20:c3:bc:
df:2f:c3:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:50 2025 by rpki-client