Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
File: 1-xoI20YpW03oryufkNb_x2zKMZo.mft (raw, json)
Hash identifier: sx6vuWYHnzbn41+Hu79u5PuqZSj+W8REsN2S9S6fjgk=
Subject key identifier: 28:01:08:2C:DB:97:2E:B3:EA:5E:13:85:94:32:D4:C6:C7:6A:A8:BC
Authority key identifier: FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
Certificate issuer: /CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Certificate serial: 0199FD346B3EECCEDDFB8ADE61549C25A389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: 1-xoI20YpW03oryufkNb_x2zKMZo.crl (hash: MruQkf3Oca9yRQF4G/ScFB/bPIGJ1vtN8HiyogCbgGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6b:3e:ec:ce:dd:fb:8a:de:61:54:9c:25:a3:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1a08db46295b4de8af2b9f90d6ffc76cca319a
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=2801082cdb972eb3ea5e13859432d4c6c76aa8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:2c:4b:10:53:2b:69:19:5c:61:b4:de:a4:34:
be:a3:13:59:92:af:f7:f5:b0:6c:2f:df:c0:cd:82:
ca:fa:e6:5a:50:e3:9b:8c:b3:14:07:a2:d8:00:3f:
70:5e:73:07:08:c5:cf:fa:a9:18:8c:3c:9b:b7:a4:
e7:dc:9a:2a:96:36:b6:5e:a5:4f:51:6a:ad:0b:a6:
6d:78:d6:ca:6c:ff:4f:5d:28:8d:ab:0d:72:4a:3b:
e9:40:69:ea:46:35:00:3f:85:e1:e0:7e:9d:67:9b:
2a:ad:aa:c1:da:71:16:98:e7:26:47:71:c2:7f:dd:
9e:6c:b5:0f:4e:c7:77:80:59:c0:88:1f:02:fb:12:
d9:bb:c1:8a:1c:00:62:c6:c3:77:2f:ef:e1:69:72:
da:47:d9:e6:92:31:af:c7:93:e1:e9:de:70:ce:79:
54:86:35:b7:f3:47:de:05:34:a1:df:db:17:e6:4a:
b2:e0:68:01:ce:2d:78:9e:34:d7:19:3b:22:69:89:
b9:76:de:4a:01:09:85:ac:18:77:0e:e1:bd:61:31:
d0:35:bb:35:d6:13:09:02:b6:53:04:69:d2:e2:e3:
d1:e2:e1:88:a8:92:5c:dd:7b:81:55:0c:52:10:28:
1a:79:93:bc:ef:9a:75:3e:43:46:b1:2b:6c:e3:f4:
4e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:01:08:2C:DB:97:2E:B3:EA:5E:13:85:94:32:D4:C6:C7:6A:A8:BC
X509v3 Authority Key Identifier:
keyid:FB:1A:08:DB:46:29:5B:4D:E8:AF:2B:9F:90:D6:FF:C7:6C:CA:31:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xoI20YpW03oryufkNb_x2zKMZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b8dcf1-bc93-456d-ad16-b8898e66b3e3/1/1-xoI20YpW03oryufkNb_x2zKMZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:83:3f:12:0a:bf:f8:45:00:92:af:24:d5:56:d9:22:e1:e8:
35:b0:5a:81:1f:63:ed:61:02:22:e9:e2:cf:a9:43:79:77:1b:
02:e3:bb:f6:62:59:46:6c:bb:0d:f4:cd:cc:5f:b3:14:59:5f:
5a:d2:1b:42:f6:8e:a3:94:ee:22:76:08:2c:e4:11:58:80:27:
85:9d:08:e5:53:2f:29:80:6a:31:97:28:83:6e:cd:cf:59:19:
4c:95:4f:98:55:b2:22:2f:7c:8d:24:ea:b2:43:18:7f:57:92:
24:91:05:2c:40:a4:8f:f6:21:59:f6:5b:b5:eb:f5:4c:73:60:
e4:3a:17:e6:9f:4d:10:66:df:d8:cf:22:59:24:5e:5f:fb:55:
5c:d9:03:cc:1e:fd:20:94:d5:c8:13:65:32:a0:4f:6f:c5:c2:
95:c2:7b:ed:b1:26:a2:1a:b9:e1:82:25:c9:1c:4a:cb:e3:6c:
ee:fb:9f:6e:66:6a:56:30:b7:7c:75:d2:7d:34:32:00:76:d7:
95:4a:a0:39:1d:a9:dc:0e:55:7f:fd:8a:03:67:42:1b:0b:6c:
11:af:f4:ea:59:73:02:2e:ff:df:b4:35:df:ec:4b:3e:1e:75:
c6:c7:66:f0:28:e8:70:f9:fc:0a:be:d1:9e:3f:b2:01:ba:3e:
01:20:ad:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:43 2025 by rpki-client