Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
File: 1jND98xsI32j-LgROMBR2Pk8nE0.mft (raw, json)
Hash identifier: vbrfQtBZC+DRRuy1eskSqsIasydjG1izG4ft0V0t6GQ=
Subject key identifier: E4:51:B1:56:F6:0C:26:08:28:9E:75:77:1B:55:63:05:99:25:D3:8E
Authority key identifier: D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
Certificate issuer: /CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Certificate serial: 0199FC21412C54028C6D3A16F72EB2081AC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:01 +0000
Manifest this update: Sun 19 Oct 2025 11:01:01 +0000
Manifest next update: Mon 20 Oct 2025 11:01:01 +0000
Files and hashes: 1: 1jND98xsI32j-LgROMBR2Pk8nE0.crl (hash: ScI9LPjFIgV0gsy5m0d+XJN7Um1utMRJ4n6t/Mr8NSY=)
2: r8Cx9iv2Us-sXIBLH4ymKtjO_pw.roa (hash: zSG7oRCig4axArTg72yLWZy9j2Lnt0Tay8wTKKxpjxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:41:2c:54:02:8c:6d:3a:16:f7:2e:b2:08:1a:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d63343f7cc6c237da3f8b81138c051d8f93c9c4d
Validity
Not Before: Oct 19 11:01:01 2025 GMT
Not After : Oct 20 11:01:01 2025 GMT
Subject: CN=e451b156f60c2608289e75771b5563059925d38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:66:ff:72:d6:49:31:2e:f4:71:30:89:68:f6:
e0:63:9b:c7:ef:e5:ac:39:a1:9c:0f:89:c6:f1:12:
55:41:f0:d6:e5:dd:c9:15:43:0c:8a:c5:82:38:dd:
e5:43:96:6d:4d:df:94:c2:7b:d3:c1:6c:83:12:27:
ea:81:ee:ff:69:cc:14:bc:50:4b:58:63:88:1b:29:
ed:7d:9e:d7:3f:6e:e9:40:79:78:ee:a4:2f:be:6f:
0b:99:df:22:61:14:39:24:60:72:0a:08:4f:89:92:
44:cc:c8:f1:3b:1e:63:36:a6:75:c0:d6:bf:13:6b:
eb:a4:aa:d4:58:9c:3a:af:21:64:ec:0c:a7:e3:a7:
d2:20:36:ca:2f:09:f3:5d:31:29:b6:3e:9e:95:7d:
8f:04:b3:4b:6d:da:fc:64:5e:6f:9a:96:80:10:75:
df:d9:26:ba:77:66:e5:2a:4c:07:f5:d0:f5:ac:13:
d8:ad:b3:f1:d9:c8:be:f7:70:a9:c2:76:07:38:39:
98:26:c1:40:d2:1a:fa:43:6e:82:ff:99:22:d1:12:
bf:62:47:10:bb:d7:b9:33:ac:03:2e:bc:dc:49:d9:
81:a9:57:6b:9a:4f:de:52:2d:cf:6f:84:03:cd:56:
d2:ed:9c:79:33:17:00:d8:7c:5e:f2:d4:df:ec:ef:
57:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:B1:56:F6:0C:26:08:28:9E:75:77:1B:55:63:05:99:25:D3:8E
X509v3 Authority Key Identifier:
keyid:D6:33:43:F7:CC:6C:23:7D:A3:F8:B8:11:38:C0:51:D8:F9:3C:9C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1jND98xsI32j-LgROMBR2Pk8nE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/8eb581-9c74-48e1-821a-53180eec56fb/1/1jND98xsI32j-LgROMBR2Pk8nE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:fd:36:2c:91:f2:44:e3:a4:60:10:7a:48:fc:a3:6b:e6:a5:
e8:d8:5d:cd:7b:93:ba:03:e9:50:1b:b4:a1:cf:b7:9a:cf:f2:
f8:18:59:c7:6a:9d:20:2e:97:37:a9:3f:44:32:a9:40:58:fd:
0e:00:6e:03:95:e7:6e:dc:dd:45:ca:87:3c:93:99:2a:75:09:
3f:c3:42:f4:f8:b8:a5:50:56:95:9f:2e:d3:62:8b:d2:68:b6:
fa:ad:21:9c:5b:d5:89:62:9b:d1:3d:f5:bb:b2:ad:a4:8e:29:
0e:c4:6a:49:31:ae:dd:e1:bd:20:34:61:ae:46:52:41:c0:28:
0f:b6:4f:af:10:24:4c:d0:07:66:6c:88:7a:c5:af:77:33:d2:
00:01:19:4a:2f:ba:c2:70:ed:b9:14:d3:0e:4a:ff:88:18:20:
04:1d:97:e5:ee:08:fd:87:dd:b9:b7:39:ae:ca:9f:2c:ff:11:
4a:12:60:00:79:42:21:26:e3:32:5a:97:4b:94:18:2a:77:b9:
46:38:cd:2f:0d:5f:4a:e7:81:db:8d:c2:ff:a9:d8:e7:a6:0e:
96:61:7d:f4:01:cf:7f:0d:07:62:f7:dc:9a:62:48:c2:f3:c2:
ad:b4:50:a6:c2:06:63:02:b0:a3:83:e5:d5:3b:58:46:c8:d3:
e3:3f:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:49 2025 by rpki-client