Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
File: 1-aNSD9nCmaKHTfXke2MCpCUqcms.mft (raw, json)
Hash identifier: Xak4RjLXcIs3su8bhgRx0jPird7qj9PbykLL56mWsa8=
Subject key identifier: EA:DA:9E:33:D3:88:41:37:B3:77:88:ED:A2:26:D2:05:4E:F2:FF:DA
Authority key identifier: F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
Certificate issuer: /CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Certificate serial: 019A00DA09759E32DB3E38A1517B68FAC236
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 09:01:20 +0000
Manifest this update: Mon 20 Oct 2025 09:01:20 +0000
Manifest next update: Tue 21 Oct 2025 09:01:20 +0000
Files and hashes: 1: 1-aNSD9nCmaKHTfXke2MCpCUqcms.crl (hash: vc4pYAo2zVvt9hJHNtONN+JPDx1kDDuh0pEGQqmp6Ec=)
2: xXvr5N3cdjjVXwcVtqed053TqTM.roa (hash: RPXbgfGCQVhnjZtFi6ez4KE4+8jSRCf133mSXRnDHCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:09:75:9e:32:db:3e:38:a1:51:7b:68:fa:c2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9a3520fd9c299a2874df5e47b6302a4252a726b
Validity
Not Before: Oct 20 09:01:20 2025 GMT
Not After : Oct 21 09:01:20 2025 GMT
Subject: CN=eada9e33d3884137b37788eda226d2054ef2ffda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:4c:3b:54:42:f4:42:b3:c7:83:97:f1:31:
df:59:85:aa:62:10:22:4f:3c:82:4c:38:5d:d4:4b:
f4:1e:bb:bc:4b:b1:43:73:66:89:79:bd:02:ce:ce:
36:44:31:97:6e:d9:82:5b:34:34:19:d3:b7:08:9f:
79:f8:9c:ef:c7:8c:1e:2b:8a:a9:34:cf:58:e4:69:
7a:55:5a:88:39:f6:9a:5c:b5:1b:d9:47:e6:ba:6b:
cc:9e:c1:86:4e:4f:f4:c1:fb:cc:b0:ae:5b:c0:06:
1d:1d:5c:21:94:0d:83:fd:3f:cd:52:4e:81:77:a6:
49:61:59:ef:3a:12:3f:b0:f9:68:d0:01:43:51:d6:
e9:9c:06:6a:0a:21:67:3e:66:07:4b:59:9f:2f:9d:
c2:ee:5e:5f:84:55:a6:d9:3b:fe:89:3b:c1:e2:15:
72:23:0c:53:c5:be:e5:7b:89:cd:5e:91:b5:d5:01:
ce:75:dd:8c:9a:a8:89:58:3c:ce:59:6b:12:11:37:
c7:80:56:53:8a:ba:7b:ca:e9:87:ab:55:fc:c0:25:
2f:7e:d4:1b:91:ea:53:00:80:13:7f:2f:d8:d6:f5:
d0:92:5f:ba:04:e0:c0:1d:ac:c1:58:d7:6a:6e:ae:
ad:06:c6:3b:d3:96:4e:ee:22:1d:b7:c5:18:52:03:
7d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DA:9E:33:D3:88:41:37:B3:77:88:ED:A2:26:D2:05:4E:F2:FF:DA
X509v3 Authority Key Identifier:
keyid:F9:A3:52:0F:D9:C2:99:A2:87:4D:F5:E4:7B:63:02:A4:25:2A:72:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-aNSD9nCmaKHTfXke2MCpCUqcms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/840757-8149-40fe-a49b-ae5e74ed5ba0/1/1-aNSD9nCmaKHTfXke2MCpCUqcms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:b8:16:da:4f:58:6c:33:31:e0:04:aa:90:c7:10:a6:55:e3:
28:f5:8d:19:6e:4a:2e:a0:fa:9f:9c:33:a9:34:7a:28:7a:75:
11:a9:47:64:a2:b6:81:ee:82:20:5c:e2:ec:0e:05:e1:59:9b:
5f:7f:06:2c:14:92:bb:ae:27:58:1a:d1:94:cf:e1:1a:c9:30:
04:49:f0:35:b0:18:77:90:1e:9b:1b:fa:ea:cd:18:3f:bc:33:
15:14:6f:f0:4d:17:6c:cf:a8:09:5f:f5:dd:3f:5a:69:bd:69:
c9:25:a0:d4:7a:da:88:c2:2e:74:64:94:8f:e7:c0:bf:be:5e:
22:ff:a3:89:6e:47:f2:18:22:73:89:74:5b:c2:51:2f:91:ca:
20:55:9a:c6:97:7d:fb:af:38:19:08:36:d8:0f:c7:43:48:87:
b8:d2:89:ca:0c:55:f7:b9:fe:ef:bf:ba:c3:3f:c6:40:26:d8:
9d:b7:02:9b:33:dc:23:fe:44:ed:fe:21:37:44:39:b5:ac:84:
d4:03:58:22:5b:b3:1a:be:01:0a:b0:f8:68:f8:b5:eb:16:8e:
85:c2:2e:63:41:c2:3e:86:26:5e:fc:ae:94:f7:3a:93:78:b7:
99:af:d1:57:a4:87:7b:46:9e:b7:78:c4:c0:64:a8:6e:dd:ad:
74:74:b8:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:25 2025 by rpki-client