Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
File: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft (raw, json)
Hash identifier: nu/MwKTVmJwb504unCxvqB46MYEP6h08Tr+C07Yx93U=
Subject key identifier: CE:AA:4E:E0:B5:49:71:12:AD:B3:32:B4:E6:10:BA:14:3B:C0:6A:62
Authority key identifier: F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
Certificate issuer: /CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Certificate serial: 0199FE7D78D5B1DB88D8EB1C3F132265296B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 22:00:59 +0000
Manifest this update: Sun 19 Oct 2025 22:00:59 +0000
Manifest next update: Mon 20 Oct 2025 22:00:59 +0000
Files and hashes: 1: 1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl (hash: YqHoQuTxIJamH9zSBfE9XUqiAk4BgHab9E0M1Nl3CKs=)
2: 8iGd8L0j6FHu_yxVIMTG7nGhl2o.roa (hash: EtgX9wLO5CJtBR8PjzUlWKaAZQPPQAmS6LoUZ8zB8hc=)
3: ZaZt-EklqiwdQvzDUFQiPldPl5k.roa (hash: oR9yB6wHGUKGTVwJ48OCFcMFmxevjZzgWdtvhuAPlXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:78:d5:b1:db:88:d8:eb:1c:3f:13:22:65:29:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f899aea56f50ff8f4342cbee2af2f288a168c930
Validity
Not Before: Oct 19 22:00:59 2025 GMT
Not After : Oct 20 22:00:59 2025 GMT
Subject: CN=ceaa4ee0b5497112adb332b4e610ba143bc06a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3c:e7:34:b5:ba:56:7e:06:2b:e4:0a:37:7c:
7b:73:f9:68:5d:75:e0:7d:f1:c0:54:f5:38:2f:dc:
f8:ec:92:59:46:fd:04:b2:ce:62:41:b2:bb:91:c2:
62:25:ca:2c:01:47:7b:5b:70:63:04:bb:19:47:47:
67:e1:ed:dc:a6:45:8c:b8:4e:71:2c:62:ae:82:ad:
22:85:fc:43:71:0e:0e:f7:26:71:4e:9c:61:ad:20:
41:2a:cc:df:09:36:24:42:01:bc:32:51:c1:4d:4d:
55:f7:f3:c3:1a:7b:8d:b4:1f:41:5b:ec:8c:c1:dc:
93:53:60:b7:cc:48:91:33:29:09:af:be:02:8f:07:
40:c9:c5:11:bc:68:e8:99:16:f8:58:82:21:61:7f:
19:b9:dc:96:45:86:3f:97:d8:fb:27:59:db:25:24:
f0:c9:f5:92:03:8a:75:3a:f5:4d:d6:37:3b:63:12:
6d:2b:98:9a:a0:c2:71:96:fc:f5:8a:06:7c:16:8e:
e7:f5:0a:b1:59:3d:4e:f3:d8:97:ac:78:b5:4e:10:
56:7c:48:32:82:8e:f2:76:66:21:a3:18:36:23:9a:
c3:43:1a:9e:ce:90:db:8d:af:c8:88:6d:25:61:81:
88:49:ed:0b:8d:a9:47:d2:96:f1:3c:48:94:9a:82:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:4E:E0:B5:49:71:12:AD:B3:32:B4:E6:10:BA:14:3B:C0:6A:62
X509v3 Authority Key Identifier:
keyid:F8:99:AE:A5:6F:50:FF:8F:43:42:CB:EE:2A:F2:F2:88:A1:68:C9:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-JmupW9Q_49DQsvuKvLyiKFoyTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/2c2e61-7279-483c-8475-9bf19d84220f/1/1-JmupW9Q_49DQsvuKvLyiKFoyTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:af:13:3a:d0:b9:fe:da:ec:da:81:ba:ae:62:10:12:ee:ec:
92:d2:fc:06:54:73:09:f1:32:1b:20:14:1e:6a:ff:71:75:85:
85:d9:c9:b3:30:59:03:f4:7a:9f:cc:cf:41:2f:58:eb:f6:ea:
e5:c4:97:ab:63:fe:09:2c:6c:80:58:54:2f:35:d4:21:1a:8b:
a7:0f:e4:10:a5:1f:dd:59:81:98:c4:ee:92:f3:2d:e6:3a:87:
ac:ab:7a:f9:cd:32:3e:a2:37:97:03:a3:1e:9c:02:57:4e:63:
85:e9:a4:c3:1e:81:e1:2a:70:af:0f:1f:53:61:66:3a:2e:ab:
b5:7c:a1:0f:5b:8a:8d:c7:24:29:97:ec:d6:3a:30:71:56:7d:
5c:9d:96:9b:07:5a:4f:2e:f7:87:60:18:94:3d:6d:c6:4e:63:
f7:4d:12:01:f5:f6:21:37:da:59:f7:6a:48:e1:fc:3a:10:c3:
9d:5b:31:af:30:60:f8:42:b2:4d:cd:72:e5:85:26:36:94:c0:
49:9a:9c:08:c6:e4:50:c6:0d:29:e9:74:b0:9f:5e:50:99:7a:
40:6f:27:68:9c:ca:97:ba:90:1b:59:8c:c5:11:1c:26:67:7f:
d6:33:8f:75:bb:fd:26:d0:8e:17:e2:3a:bb:76:94:b9:39:b2:
4f:ba:43:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:26:34 2025 by rpki-client