Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
File: 1nADQQTxv2WBRLSqRbQaP1d53A8.mft (raw, json)
Hash identifier: J/vm19o5OnDiOx60zI+M4crgOf9KobcNXNEDBxUMwKU=
Subject key identifier: E6:99:4C:BB:4F:05:0D:EB:B9:85:34:AF:D8:6D:E1:BA:52:7C:91:21
Authority key identifier: D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
Certificate issuer: /CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Certificate serial: 019A01EB867D7DB1BB65A55B8B7D093186D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
Manifest number: F0
Signing time: Mon 20 Oct 2025 14:00:03 +0000
Manifest this update: Mon 20 Oct 2025 14:00:03 +0000
Manifest next update: Tue 21 Oct 2025 14:00:03 +0000
Files and hashes: 1: 1nADQQTxv2WBRLSqRbQaP1d53A8.crl (hash: JFSoSq8v5Jn95NZnTeqJ17CC+4rkyXMJzTj+WqNLFGY=)
2: hydDgB-snN9BWY7iUjkavnwziQE.roa (hash: ysVRmS6Ip962i/GMIlN3GEIvctnMgjlKTRzkw2GE/YI=)
3: xDk85mkgQuWalB3gqd14km-ibFY.roa (hash: cwL93Aw5JJyqitIvfD6+Awn4jwkns5tDaXlp4E9iKuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:eb:86:7d:7d:b1:bb:65:a5:5b:8b:7d:09:31:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d670034104f1bf658144b4aa45b41a3f5779dc0f
Validity
Not Before: Oct 20 14:00:03 2025 GMT
Not After : Oct 21 14:00:03 2025 GMT
Subject: CN=e6994cbb4f050debb98534afd86de1ba527c9121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:5b:01:d5:88:f7:3e:9f:5a:b1:18:66:8b:
ed:d4:47:b3:17:07:52:0d:b9:32:c2:1f:80:9a:18:
98:8a:ff:07:c0:c5:b6:80:34:f2:97:40:d2:43:09:
80:d5:69:f9:e1:d0:73:37:a8:10:57:d1:51:13:6c:
00:7d:d3:31:5f:c8:e5:57:a6:fa:d5:00:8a:47:85:
39:4e:98:3d:fc:ef:f2:25:9d:52:ea:0d:6c:fd:63:
4e:ad:5d:37:d7:1d:8c:f8:5b:5a:88:7e:44:23:0e:
4e:59:50:f5:d5:ac:21:92:95:f0:cc:86:13:64:f0:
f9:d9:70:98:1e:33:0d:9b:73:4f:0a:bf:90:85:73:
ab:0a:e1:cb:9b:e6:6b:3a:f2:82:6e:6c:82:51:0a:
3c:71:73:81:de:97:b9:01:8d:83:89:82:6f:74:14:
4b:61:21:19:b9:b9:b2:3c:f0:56:6e:15:55:02:d8:
a7:26:ed:32:f1:aa:6c:92:ea:23:8b:eb:6d:b7:4d:
b1:21:86:b8:66:c3:e8:78:5b:37:7d:7b:51:21:e5:
c9:d7:35:65:2a:75:7a:44:14:0d:6d:27:76:73:1f:
41:b4:9c:20:c6:f9:74:ba:7b:a3:79:a9:2f:23:e3:
ae:1e:7a:5b:8f:cd:67:26:f4:7d:8d:c8:44:99:fe:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:99:4C:BB:4F:05:0D:EB:B9:85:34:AF:D8:6D:E1:BA:52:7C:91:21
X509v3 Authority Key Identifier:
keyid:D6:70:03:41:04:F1:BF:65:81:44:B4:AA:45:B4:1A:3F:57:79:DC:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nADQQTxv2WBRLSqRbQaP1d53A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e1cbc3-28a1-4e53-a0a4-f9172ccbc5af/1/1nADQQTxv2WBRLSqRbQaP1d53A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1f:ea:ee:9a:46:7a:90:4a:cc:5e:90:34:18:75:0f:48:c3:
2b:92:b6:dc:ce:af:ab:fc:68:3d:86:4f:71:4f:46:d9:2d:de:
79:fa:aa:22:5c:f2:32:f5:52:52:4e:31:de:d2:54:5d:ad:26:
a6:93:25:a0:63:d6:37:cb:09:ec:43:5b:d0:02:0d:09:e5:fe:
95:df:55:e5:7d:b0:6d:f1:2e:46:40:3d:ad:cf:d0:fa:63:d3:
59:c1:23:b2:7b:38:d6:4a:aa:47:b0:8d:ce:05:62:4c:75:2b:
b9:fa:d2:63:11:6f:8e:b3:8d:79:a4:24:91:eb:3a:11:27:69:
a6:d4:33:a3:9f:a4:26:24:10:a8:41:54:17:93:18:86:a6:e6:
fb:03:c5:9d:6c:54:5e:a0:2b:42:0b:f3:ae:52:5f:31:99:cf:
2d:d2:ca:79:37:00:8c:0b:83:16:66:d5:c3:3d:2b:a9:c0:0e:
cf:f6:ed:58:34:24:3f:4b:90:4e:e7:66:77:8f:e0:45:06:b3:
f0:d1:8b:30:3e:16:97:e7:54:1d:b8:6a:36:77:98:0c:3e:a3:
fe:4a:e3:73:24:aa:d1:32:76:a3:ff:3b:97:8a:e1:38:ce:03:
40:c2:bd:2b:5e:89:82:1f:e3:c1:f0:9a:f2:2d:5b:83:07:1b:
87:86:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:15:09 2025 by rpki-client