Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
File: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft (raw, json)
Hash identifier: DGj9dx5QiZzpsEoykAHdiVBTEf81d8a+7WrWtQKIIGw=
Subject key identifier: 59:C7:B0:A4:0B:29:17:C4:C0:04:5A:0B:68:16:E8:03:78:29:01:9C
Authority key identifier: F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
Certificate issuer: /CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Certificate serial: 0199FD6AEBC21A6DBA864431A16E89026FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:06 +0000
Manifest this update: Sun 19 Oct 2025 17:01:06 +0000
Manifest next update: Mon 20 Oct 2025 17:01:06 +0000
Files and hashes: 1: 1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl (hash: VU/XtC6vfM1xD16Ru/h3TbG8+Io8xQYySUVlHNQj9lY=)
2: zJ66DcCgja2POU7oenk15QdK9KA.roa (hash: WREdVtqoRu65L03xircB6rXHKp6FvOhj5zJWJqyt7mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:eb:c2:1a:6d:ba:86:44:31:a1:6e:89:02:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f875df13bf8c1ba8b10e2da480ae61a5348ab8e9
Validity
Not Before: Oct 19 17:01:06 2025 GMT
Not After : Oct 20 17:01:06 2025 GMT
Subject: CN=59c7b0a40b2917c4c0045a0b6816e8037829019c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ac:24:fc:1c:15:c5:3a:84:84:1b:ae:c3:5a:
84:5f:15:38:53:bc:a4:67:cb:5f:aa:59:66:02:b8:
75:68:7f:34:1f:87:b3:7e:da:3f:a8:b6:18:a1:56:
6d:10:a6:6f:5b:ad:70:f5:a9:21:9c:56:bd:7a:35:
61:ab:6e:65:68:56:9a:44:44:58:e3:8e:bb:69:89:
6a:18:6b:7b:86:59:13:bf:34:8b:44:f9:9a:4f:ae:
32:d5:69:bd:93:a9:38:24:96:14:9f:c1:44:9b:b1:
e1:9c:2a:42:bc:c0:21:3a:e2:70:9b:51:81:06:0f:
6b:e6:81:56:f7:26:27:35:95:bd:7c:97:9a:bf:7f:
87:29:9d:ba:81:e8:72:00:fd:79:f8:f3:6d:f3:f5:
8a:33:cc:2b:c3:aa:96:67:26:ed:39:be:00:f7:4b:
5a:5c:54:07:15:84:fc:03:80:38:97:00:08:22:6e:
f5:bb:cb:29:53:e9:d2:2e:76:fa:19:de:dd:1d:bd:
29:79:62:df:e4:cc:31:04:7d:b9:72:16:1a:5a:b2:
1f:fd:08:f7:17:0c:86:cb:0c:11:db:52:5b:93:3e:
4a:03:0b:18:17:36:38:6c:f1:0b:16:50:b7:19:29:
61:bf:57:d5:2f:87:a4:d3:34:96:03:28:51:9e:5a:
db:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C7:B0:A4:0B:29:17:C4:C0:04:5A:0B:68:16:E8:03:78:29:01:9C
X509v3 Authority Key Identifier:
keyid:F8:75:DF:13:BF:8C:1B:A8:B1:0E:2D:A4:80:AE:61:A5:34:8A:B8:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/abacf1-f4c6-4710-93e9-fc83db13f3a1/1/1-HXfE7-MG6ixDi2kgK5hpTSKuOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:e1:a6:4f:f2:6d:d2:1c:77:c6:e8:7a:b6:9f:71:e5:5f:12:
8a:c3:40:bc:c6:38:b0:cb:22:4b:ae:6d:86:c2:d3:b1:bc:09:
64:11:13:7d:9b:61:02:7f:5d:c3:58:f1:54:6d:c4:cb:49:18:
70:05:dd:74:30:be:94:f5:ee:cc:df:99:55:87:5f:1d:26:62:
44:e8:65:e1:71:da:25:7c:fb:be:14:d6:95:9c:b4:13:05:d8:
5b:a3:89:4e:3a:9c:65:9e:f8:4a:27:4b:b9:83:94:65:f5:c8:
e6:b2:cd:12:2d:73:23:0e:19:18:40:b9:58:39:9c:6f:84:3f:
4e:5c:4c:13:5c:6d:a1:d7:83:7d:bb:82:f7:7e:e8:1e:8b:d3:
9c:68:88:89:9c:77:ef:0c:3d:7e:3b:db:14:42:7b:a6:34:da:
d2:39:df:b2:e8:57:1e:d2:18:fb:cc:8b:98:13:cb:1b:72:80:
9e:5f:88:3a:49:d3:d3:57:a7:6d:ec:17:42:12:c0:8c:68:47:
78:a1:03:29:54:4f:58:14:8d:9e:e4:d9:62:97:84:79:a5:65:
37:c4:36:76:a8:40:88:a2:5b:eb:a6:30:36:f7:d7:16:cd:1d:
35:94:57:1f:bc:0d:8a:24:7c:60:77:55:f7:4b:80:33:1f:4c:
83:29:99:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:23:54 2025 by rpki-client