Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
File: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft (raw, json)
Hash identifier: aZ7cn47IGzvUbVLWcr80mPWEA3omDzOaFL+v2XCjZTM=
Subject key identifier: 3F:34:78:31:8D:34:26:0C:3B:96:60:4B:3D:7D:BC:9E:22:71:06:8E
Authority key identifier: D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
Certificate issuer: /CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Certificate serial: 019A05934A25ADE846E23D856058519CD164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
Manifest number: 16E7
Signing time: Tue 21 Oct 2025 07:02:10 +0000
Manifest this update: Tue 21 Oct 2025 07:02:10 +0000
Manifest next update: Wed 22 Oct 2025 07:02:10 +0000
Files and hashes: 1: 1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl (hash: nXMbSceJb3pxP9G3ZICbCqOhBHdb99OBozSwOw+tUWM=)
2: iBTxA6wf53PMi32aogrQ-jvltRQ.roa (hash: snlLGKpsI87AWFuzw8u8bLZKNZ/ZxpzOPQrEf7Rg3/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:93:4a:25:ad:e8:46:e2:3d:85:60:58:51:9c:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b232aa2431ca4de5d8252a3c9cc6bb630d1d49
Validity
Not Before: Oct 21 07:02:10 2025 GMT
Not After : Oct 22 07:02:10 2025 GMT
Subject: CN=3f3478318d34260c3b96604b3d7dbc9e2271068e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:39:5b:9b:1b:02:f3:66:72:5f:1d:b0:fa:09:
c0:38:f1:98:42:c5:8e:79:be:e6:a5:d3:98:91:7f:
a4:4c:12:13:d3:45:02:2f:d5:c4:0a:b6:b9:2f:2d:
24:5d:fb:ea:93:89:c9:1a:34:f8:50:91:dd:ed:4c:
f0:f0:ec:fa:4a:a6:aa:dd:20:37:6d:9f:b2:57:92:
11:23:a9:6a:22:ce:c5:33:e3:83:3d:1b:f1:f3:4b:
c5:50:81:5a:7b:66:8d:a8:7e:ba:f8:98:fb:08:e1:
de:ab:f3:ea:39:e8:21:73:1a:92:d5:45:14:94:44:
2f:d0:9c:32:fb:53:d6:b8:70:ca:76:f9:4a:e9:63:
ae:80:cb:94:16:9c:d6:69:6a:0a:4b:db:3a:9c:56:
c6:a5:0d:fa:be:49:81:21:47:29:ce:f2:75:59:cb:
73:4a:14:9d:15:72:7e:84:e6:45:13:65:98:a8:9a:
78:be:43:2b:b0:d7:84:f5:b2:8a:d3:6e:5d:a9:5e:
c0:da:29:e8:3e:89:8f:63:7f:57:22:b7:78:fe:65:
67:69:08:55:7b:d3:4b:cd:d4:66:5e:dc:ec:34:6c:
5e:ba:35:a7:db:69:30:e1:d0:ca:21:84:31:8a:bf:
55:6f:53:d9:6b:9f:78:f5:92:c0:c3:84:5a:cd:bb:
fa:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:34:78:31:8D:34:26:0C:3B:96:60:4B:3D:7D:BC:9E:22:71:06:8E
X509v3 Authority Key Identifier:
keyid:D5:B2:32:AA:24:31:CA:4D:E5:D8:25:2A:3C:9C:C6:BB:63:0D:1D:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bIyqiQxyk3l2CUqPJzGu2MNHUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2ff8cc-3315-43ee-b898-7ea592f9b29e/1/1bIyqiQxyk3l2CUqPJzGu2MNHUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:27:b9:2e:7c:23:a5:89:ce:cd:41:27:1b:86:2e:05:bc:95:
5d:6c:09:bd:2c:c9:67:fd:f2:d9:ad:e3:b7:e3:6b:71:49:ac:
40:8d:ec:02:83:50:15:5e:2d:3f:e2:b6:10:9d:d1:f2:dd:34:
3d:87:12:21:2d:1a:b8:b9:8f:72:e6:91:94:d8:5d:a5:71:93:
77:db:81:05:ee:75:2e:47:db:31:a1:fe:d9:b2:ba:1a:27:e8:
d0:45:4d:23:05:ed:49:0c:f8:ca:1a:e5:a1:7d:9e:48:3c:6d:
89:ed:8d:f6:ce:4e:a4:04:5f:38:17:67:2a:11:1d:2e:ee:37:
f4:27:5a:6f:71:9c:b8:e4:49:d5:d0:0d:a2:20:87:d3:a2:58:
8b:27:14:5d:26:dc:72:a5:a5:02:68:5a:8e:10:be:2a:03:6f:
ff:96:57:d6:29:5a:58:ec:09:56:56:6d:bb:99:11:47:14:15:
ee:d1:2b:25:c2:da:23:4e:9c:aa:cc:3b:7f:5b:61:ad:23:54:
0a:05:c1:f8:82:ac:cf:2e:22:e8:11:c5:7d:b4:58:cd:8c:b4:
a5:dd:b4:ca:72:c9:e8:05:6e:a4:2f:2b:32:2e:4c:9c:0d:b2:
3f:4c:31:00:51:cc:90:3a:df:ba:cc:02:bd:75:fe:0b:d6:f4:
63:7d:90:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 16:05:21 2025 by rpki-client