Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
File: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft (raw, json)
Hash identifier: Go+ci3joWmr2fy7ns477tYogo13fHbd5Lq4hCsBOHkQ=
Subject key identifier: DC:0D:00:A3:F0:63:F0:A9:07:D1:6F:86:52:1B:93:26:6E:DC:94:C0
Authority key identifier: F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
Certificate issuer: /CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Certificate serial: 0199FB45C19847865A109356ABF88AC4032B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 07:01:16 +0000
Manifest this update: Sun 19 Oct 2025 07:01:16 +0000
Manifest next update: Mon 20 Oct 2025 07:01:16 +0000
Files and hashes: 1: 1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl (hash: wLYb/OLbBkh21SZ4pfOOBuUsUPBNzL/xxBp8eaQzq6Y=)
2: 2vAX5d5bYYVv-n5H2Noy1aBEJag.roa (hash: +YP0LGgyabuxCMJeG6xWppWaDRIAdduSpVpBmKRvtJ0=)
3: WF76jFs55ZNE75IYqc8YUcRwiwc.roa (hash: 90Qy+crLKPgX6ROuDB9U3MA0SNLATAFR3/oqAinGGEI=)
4: jjNcBXsoNVqnucHRwCzSbI1BCMM.roa (hash: 5jfmQjw9mIFuN5pJ8PuZ3/yoYO6IiQ08fG4QpnJZUIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c1:98:47:86:5a:10:93:56:ab:f8:8a:c4:03:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85d004446182d51fd38f7f75fe2a5c8608bc86d
Validity
Not Before: Oct 19 07:01:16 2025 GMT
Not After : Oct 20 07:01:16 2025 GMT
Subject: CN=dc0d00a3f063f0a907d16f86521b93266edc94c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:41:06:0c:eb:ee:4d:bb:10:3f:6e:41:46:
de:1b:1c:88:2c:7d:96:a9:09:d5:16:3d:bd:c0:9f:
c6:a6:c0:c2:76:35:94:5e:16:f4:5f:c8:15:9e:22:
e7:86:0b:52:9d:7c:6a:0a:7a:0d:df:d5:e9:f7:49:
7d:2d:1f:39:b1:b1:f8:58:27:dd:a3:d1:e4:58:ee:
a5:ff:71:94:a9:dc:d4:01:59:56:4a:01:59:7b:73:
f2:9a:bb:7b:1a:bf:d8:a7:f3:04:a8:ef:20:7b:de:
fb:5f:e5:5c:60:f6:c2:7f:69:44:7f:e7:23:21:47:
7d:f5:44:30:99:65:35:38:fd:77:4a:75:bf:0d:d8:
a7:4d:12:20:84:5b:8f:18:66:a9:3d:87:0e:30:e0:
c1:d5:ca:39:de:03:b6:db:f3:c6:25:c7:3c:bd:eb:
e4:03:be:a9:30:f7:55:de:6b:b5:13:dc:2b:f3:ef:
5f:79:0e:c2:08:ee:4d:48:43:b5:30:5e:91:38:1a:
66:0e:13:5e:41:ba:5c:b3:24:72:32:74:9d:1b:d9:
f9:59:bb:15:ff:0d:67:34:30:b4:4d:0d:5f:01:a3:
6d:60:f2:17:02:e6:1f:ca:d8:09:fd:50:b0:fc:80:
b7:66:1e:41:7c:76:a4:46:7b:0e:c1:b4:dd:a0:8c:
8b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0D:00:A3:F0:63:F0:A9:07:D1:6F:86:52:1B:93:26:6E:DC:94:C0
X509v3 Authority Key Identifier:
keyid:F8:5D:00:44:46:18:2D:51:FD:38:F7:F7:5F:E2:A5:C8:60:8B:C8:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0AREYYLVH9OPf3X-KlyGCLyG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c9db52-ac91-406a-9f95-080ee0a97f6a/1/1-F0AREYYLVH9OPf3X-KlyGCLyG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:95:93:8c:b2:39:a9:b5:f9:3a:66:38:82:8d:0f:0c:c0:db:
68:68:bd:5a:f9:08:98:bc:df:b8:63:9a:a9:f3:b7:d1:9b:bc:
8d:36:64:e3:ff:f7:6c:f8:d9:7d:6a:5d:81:6f:2e:84:0a:34:
2b:4e:d9:7c:cb:e0:ec:37:f1:30:44:3b:ba:a4:7f:9b:85:a8:
00:dc:d8:17:7a:20:98:72:ea:60:91:f9:b1:95:79:66:56:9a:
b4:cd:87:7e:eb:ea:8c:7f:5f:c5:83:d0:af:02:07:fa:d0:cd:
22:d9:61:3d:47:67:78:44:89:ff:ca:6c:82:6b:b9:cb:1c:94:
6c:e6:ba:6c:fd:9c:45:4d:9f:1c:c3:c2:2b:6e:4a:e3:55:f0:
0d:ba:80:c9:bd:88:10:bd:42:f7:f8:d6:5f:78:67:bc:29:62:
8a:ed:cd:56:fe:bb:8e:89:08:42:b4:f2:65:c2:d5:a1:62:49:
00:92:03:1c:bc:c1:17:ec:fb:a1:16:39:0b:08:9b:76:e5:12:
3d:ad:99:43:c2:e1:5e:43:52:b7:39:e5:e1:67:ad:dd:f8:55:
54:c3:65:25:9b:6c:69:5e:53:70:50:16:96:73:d7:99:8f:36:
1b:b5:6a:d9:ff:ec:c3:45:68:ef:19:33:6d:1e:33:c6:41:3c:
9c:20:fc:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:30:20 2025 by rpki-client