Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier: TWVqFXu154IIOf+ZlukCXAf7Qg/kcJ8z79jKriZWt2U=
Subject key identifier: 23:DE:C5:6A:FB:55:83:65:AD:A1:29:7E:84:89:C5:2C:E2:57:9F:50
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer: /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial: 0199FCC6A94D7290864223705DE025DB479B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:41 +0000
Manifest this update: Sun 19 Oct 2025 14:01:41 +0000
Manifest next update: Mon 20 Oct 2025 14:01:41 +0000
Files and hashes: 1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: gX4otnf/M6W6PwDuhKqN4Q2+EIwQQv1JG4c7G2IVhRI=)
2: FkDDEmYYETOpVMpWkL7RuuEpqTY.roa (hash: kK3s8Vv/PXYJJP7bWNTiE/RHQRNUSZAURtLuU/aMQ6g=)
3: _X7C7V6gpKHfD2GzsHWwwqpaOyU.roa (hash: YNwkjNTaSE+wVt7Z8QQHUfLIQalMph9DlkM4NPeZKPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:a9:4d:72:90:86:42:23:70:5d:e0:25:db:47:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
Validity
Not Before: Oct 19 14:01:41 2025 GMT
Not After : Oct 20 14:01:41 2025 GMT
Subject: CN=23dec56afb558365ada1297e8489c52ce2579f50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2c:73:02:1a:7b:d9:49:92:e3:4b:bd:db:d4:
86:45:16:65:6b:33:a2:a4:8a:44:9d:96:f8:a4:40:
02:03:5b:ed:68:2c:ad:a4:1d:1d:0f:38:fd:33:f3:
1c:6b:8d:95:ae:bf:f2:0b:f3:99:09:86:e6:05:43:
96:7c:20:11:d5:83:71:6f:7a:3d:94:10:6e:c8:37:
55:e9:ad:c3:ad:ef:72:4f:ba:c8:01:aa:5b:4b:8f:
9e:f3:ab:aa:a2:a5:52:77:eb:35:81:54:a4:de:3f:
30:40:7b:29:ca:5c:34:8c:69:f5:d1:dd:7b:f9:bf:
4b:ca:42:83:37:c1:c2:dc:fe:a5:0b:78:d8:91:98:
49:41:92:4b:4f:8e:f3:e6:50:d3:f2:6e:a3:f6:fe:
15:d9:45:93:70:a5:0c:c7:8e:fa:39:87:a9:72:8f:
e1:21:84:4c:25:97:db:b3:e6:4b:84:b6:d1:bd:83:
01:9c:56:26:36:c6:e2:e7:1d:72:4e:ae:fe:18:b9:
74:b4:e2:d8:c7:cf:98:13:da:ba:eb:a0:81:f0:a9:
84:01:9a:4f:7f:aa:62:0d:50:fe:7b:02:fb:f5:43:
03:85:bb:51:e0:5e:40:e2:0a:d6:74:c7:50:85:46:
3c:fb:66:3e:3b:ad:51:44:95:53:70:15:46:89:8f:
b6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DE:C5:6A:FB:55:83:65:AD:A1:29:7E:84:89:C5:2C:E2:57:9F:50
X509v3 Authority Key Identifier:
keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d6:f7:f2:bb:7f:f8:e5:ad:ec:da:b5:39:dc:77:0e:ce:85:
c0:84:1e:69:4f:33:b6:eb:2d:46:3e:04:bf:81:46:a7:54:14:
d7:27:e0:f4:91:3c:04:7d:4c:85:8f:47:d2:36:85:dc:ea:1c:
26:a4:6e:af:4a:51:e7:a4:d1:d2:09:94:25:ba:f3:ed:9c:d9:
13:d7:9d:58:93:57:e5:a1:75:d8:46:63:e4:36:3e:bc:81:c4:
34:89:ab:ef:19:64:77:8a:07:fd:6d:be:65:97:4e:dd:df:98:
00:b2:3b:83:e0:e3:ce:ac:a4:67:fb:62:5c:e3:ac:ae:23:ac:
a6:bf:a6:4b:85:bb:b5:5b:14:d7:b8:cf:95:71:21:15:36:31:
3e:63:26:c4:44:26:0f:be:71:e9:45:a0:2a:47:ea:18:d5:3e:
1c:95:32:99:48:50:37:c4:c3:26:07:ff:52:b8:97:89:41:d6:
1c:00:99:c2:52:dd:08:18:6d:71:06:3b:c7:5c:84:76:c6:77:
14:e5:59:e8:9a:ac:cf:a1:a5:c5:dc:d7:4c:f9:24:22:b6:60:
56:a9:40:b7:b6:3f:15:7a:5d:d0:9c:dd:18:7a:71:5c:d2:34:
ee:a8:86:56:03:27:f6:26:da:52:23:77:99:9f:2a:bf:74:5b:
94:cd:4d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:53 2025 by rpki-client