Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: fOd9JjgP478LoxLpyTT1uQfLqhliQVJ5K8HwyPedox4=
Subject key identifier: 22:AF:9B:45:A6:95:1E:7C:F6:13:14:1D:9A:53:6B:91:86:BF:0D:6F
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0199FEB4E898E7BD891EEF549629A375719A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 11C5
Signing time: Sun 19 Oct 2025 23:01:32 +0000
Manifest this update: Sun 19 Oct 2025 23:01:32 +0000
Manifest next update: Mon 20 Oct 2025 23:01:32 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: 4uBomcuy0DED8jYfpkeCIp2QDvERpStJPpyDen2Td5s=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:e8:98:e7:bd:89:1e:ef:54:96:29:a3:75:71:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Oct 19 23:01:32 2025 GMT
Not After : Oct 20 23:01:32 2025 GMT
Subject: CN=22af9b45a6951e7cf613141d9a536b9186bf0d6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:7d:fb:3c:1d:16:45:32:89:12:ea:fa:2e:
1d:24:46:e9:3c:ae:36:d6:44:93:6c:86:15:c0:28:
16:96:34:d7:df:a8:74:76:3a:14:d7:ae:71:e9:34:
7c:61:89:cc:3c:39:83:fd:1d:3b:0e:af:e3:2e:05:
63:51:83:b9:34:93:5f:39:66:f2:1e:dc:a8:91:eb:
e4:b1:7b:0c:39:6e:fa:a0:8b:2c:86:c9:f2:7a:75:
b8:aa:53:0c:4d:df:3e:48:2c:70:fa:79:2e:b3:2a:
a9:76:21:94:72:33:0e:6a:f6:c0:1c:b2:da:1b:f0:
85:e1:28:d1:61:33:6e:0b:64:03:bf:26:73:f8:15:
a9:fa:b6:b5:2a:80:5c:cc:9e:15:dd:d5:55:fb:cd:
83:d6:c4:90:3e:b4:04:b6:2c:21:3e:b8:9b:22:f6:
d8:af:df:d3:53:c5:6b:6e:55:2f:c8:cb:30:9c:09:
d5:f3:17:59:7a:28:e5:61:a3:16:c7:86:b1:27:26:
0e:50:18:a1:ea:1b:a4:fb:43:b0:f6:8f:bd:d8:93:
f5:62:c4:08:ea:4e:35:5a:3b:28:01:da:4a:da:11:
e2:4c:fa:6a:de:f8:73:f2:18:a2:5c:6c:32:27:73:
4a:34:c4:04:e0:bb:d1:b9:e1:18:c1:7d:89:8f:51:
b8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:9B:45:A6:95:1E:7C:F6:13:14:1D:9A:53:6B:91:86:BF:0D:6F
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:ad:64:13:05:fd:c9:1c:b8:96:e7:93:e0:f6:0d:ff:47:f1:
ba:d9:fd:03:a6:14:af:48:7c:83:95:8d:04:04:01:67:4c:83:
c6:35:94:9a:0c:4b:86:3c:9a:f7:36:e8:0b:ec:c6:a1:b9:c7:
6e:c5:40:8f:ad:21:c2:01:37:00:19:69:19:3d:fb:c5:36:27:
b4:39:f1:cd:a2:db:4e:f0:50:52:69:b1:ed:4a:d6:36:d1:1d:
ab:20:4b:b5:36:b4:27:f6:8b:58:05:eb:b7:ec:19:6a:ab:93:
23:e5:ed:7e:91:9f:22:40:bc:79:cb:50:8b:b9:f8:b1:5a:e7:
6a:34:12:b8:af:13:1b:cd:1c:6e:c8:74:8e:f4:e6:ac:96:a9:
5d:a9:97:b9:59:cd:46:6b:62:a1:7b:dd:d9:59:53:9a:7c:66:
35:6e:ea:a8:97:17:bd:a4:8d:c4:55:31:f7:c0:da:6a:90:b2:
2b:0b:e2:1f:e8:32:2c:7f:15:ca:28:57:ee:1b:f2:c9:7c:8a:
2e:2f:48:79:0d:e7:c3:37:e3:69:38:65:de:87:b6:1e:81:91:
c2:fe:ac:9e:e3:2a:64:9c:dc:e9:a4:4f:05:50:84:55:56:94:
97:41:c3:ab:ec:71:47:42:f1:59:9e:83:73:d6:2b:2a:ee:5e:
19:12:9a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:21 2025 by rpki-client