Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
File: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft (raw, json)
Hash identifier: KCT3Cb7s3MBdC6UCjambGTeoUaknr1+F05FxhKUz0WQ=
Subject key identifier: 7C:5C:A5:BF:63:57:77:74:40:53:1C:E0:13:E4:F8:41:6F:E3:FA:21
Authority key identifier: FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
Certificate issuer: /CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Certificate serial: 0199FC58338F2D138B3F4ABB248EEC43C80B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:02 +0000
Manifest this update: Sun 19 Oct 2025 12:01:02 +0000
Manifest next update: Mon 20 Oct 2025 12:01:02 +0000
Files and hashes: 1: 1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl (hash: p+QJKdx4PCz3w5uLJLrFxgRSmap+NNnnzC2BNcqsCDQ=)
2: 1-O3-eEOj4WNMKkx6AjJ5BztCQfA.roa (hash: 3XCfpEftkyfw/udAWZHLu6olWarQDCfoueNYZe4wmqM=)
3: g9Xis0X9LNCOyDX1kA4xgId4bUU.roa (hash: eAC0STaybazrwMkwNWuW4cD5J/cTK9sETsg7k83JaD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:33:8f:2d:13:8b:3f:4a:bb:24:8e:ec:43:c8:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbf4d59cbd978ae1127c67fd22f04c62ff837cf
Validity
Not Before: Oct 19 12:01:02 2025 GMT
Not After : Oct 20 12:01:02 2025 GMT
Subject: CN=7c5ca5bf6357777440531ce013e4f8416fe3fa21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:06:55:9a:7c:23:0b:c0:82:6e:a4:7f:d9:
7d:83:57:50:60:e7:24:48:a3:22:58:01:8a:e1:40:
4a:76:35:7c:04:56:bc:24:f0:0e:c9:d0:d9:6f:80:
90:b7:83:d7:76:68:b0:0c:df:7f:76:eb:56:9e:2f:
91:32:bf:dd:32:7f:a4:d6:35:64:c4:9f:a7:6e:1f:
2e:ca:f5:11:44:f6:89:23:ea:42:1e:29:22:7a:71:
cd:05:42:6f:a1:9c:56:00:2a:12:78:c2:60:d7:c7:
68:eb:c8:31:c0:af:35:b5:69:d3:cb:b8:9c:f8:ef:
d2:5e:c5:ee:ce:1a:90:f7:10:be:a1:34:23:84:24:
0c:de:0a:a9:45:2a:7e:11:39:0b:5f:91:73:da:47:
ba:a2:45:89:43:bd:c5:54:bc:bf:57:c9:be:40:04:
1e:bf:50:11:a4:d9:6e:5a:8f:d0:02:9e:b4:f2:da:
10:ab:65:7a:fd:5b:5d:5e:00:48:26:5f:90:fe:b0:
87:1c:71:07:59:ec:98:26:78:a3:69:64:1c:d7:3d:
32:be:ec:f4:da:91:df:56:7b:a3:b0:ab:1a:e3:44:
de:b1:89:5b:a7:e8:80:07:da:0b:32:d3:01:90:2a:
69:ea:f7:ee:3b:57:ec:86:a4:35:16:e3:2d:31:7a:
48:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5C:A5:BF:63:57:77:74:40:53:1C:E0:13:E4:F8:41:6F:E3:FA:21
X509v3 Authority Key Identifier:
keyid:FB:BF:4D:59:CB:D9:78:AE:11:27:C6:7F:D2:2F:04:C6:2F:F8:37:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/88c995-ede0-4cc4-a66d-25baa8230fcb/1/1-79NWcvZeK4RJ8Z_0i8Exi_4N88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:64:5c:47:ba:8e:f8:a5:8c:58:12:24:79:0d:50:39:22:e1:
e1:0a:cc:cb:46:48:6e:44:4a:47:91:76:74:08:88:2d:c9:fa:
bc:87:07:ab:8b:f1:fb:f2:f9:3a:63:c6:5c:7a:36:b0:b8:15:
59:5a:8c:8c:64:df:30:84:61:2e:8b:80:15:0e:a7:cb:e6:00:
df:a5:ce:fb:ac:7b:86:a1:6a:73:e9:ca:2d:df:25:38:0b:d3:
87:14:a8:ce:5c:18:b9:94:8e:0e:ce:1d:42:ac:07:e5:16:e4:
d0:27:c3:0e:bd:75:a7:9b:a2:89:6f:8a:66:9b:9c:b3:d0:b4:
e1:46:98:e1:e8:c7:b1:dd:7f:f3:42:95:e8:f2:25:85:18:40:
4f:1f:f5:a7:3f:6a:c1:ab:0c:20:4c:76:70:01:81:ea:24:a7:
06:22:5a:f9:bb:f2:a9:56:44:53:31:15:81:f0:d7:eb:13:0d:
88:37:81:9a:a8:6e:cd:cd:05:ee:aa:a2:39:f9:43:9a:06:9f:
09:fc:08:b0:e9:48:56:a5:a3:ec:01:1d:5f:17:04:8e:26:7b:
cc:8c:9c:6e:45:26:78:9f:61:14:4d:9b:92:94:14:10:8f:c4:
76:60:6a:48:f4:b9:e7:07:da:5e:30:a9:1c:f5:b3:93:74:6a:
c0:ac:02:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:53 2025 by rpki-client