
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
File: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft (raw, json)
Hash identifier: G4G6/YtYX6DMYdavSfNQk+4h9y3/7nJRT4Q/0MUInNo=
Subject key identifier: 53:34:2A:1F:E0:8F:30:64:95:90:00:01:80:14:D3:93:E4:AD:0C:4C
Authority key identifier: D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
Certificate issuer: /CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Certificate serial: 0199FFC7507E0F7637650EDC0D79DCBB4847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
Manifest number: 0A8E
Signing time: Mon 20 Oct 2025 04:01:16 +0000
Manifest this update: Mon 20 Oct 2025 04:01:16 +0000
Manifest next update: Tue 21 Oct 2025 04:01:16 +0000
Files and hashes: 1: 1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl (hash: SHp2wpp0nzz6BRhfiTV7ZIS3bX+yYSmKV752J1f0KpE=)
2: nyuERDVJh6-PTXV2ajcksYw_55g.roa (hash: K7CKnx/jM/EuzQ/IpR2qcCsRtlnJ0y6qFH+bAbkXnGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:50:7e:0f:76:37:65:0e:dc:0d:79:dc:bb:48:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d674c4e1b00ce5bfb0d96d4c21efd058d3b5ca79
Validity
Not Before: Oct 20 04:01:16 2025 GMT
Not After : Oct 21 04:01:16 2025 GMT
Subject: CN=53342a1fe08f3064959000018014d393e4ad0c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:14:fc:cf:a5:84:7a:bb:78:ec:0a:45:52:12:
2c:3f:02:15:39:af:22:aa:68:3a:46:f1:f2:ef:42:
fe:71:c6:04:be:0e:fe:98:ba:ed:a6:71:c0:4f:b6:
32:83:be:0d:b3:6e:cb:a6:43:b8:5c:80:61:74:79:
b2:27:9e:db:23:d5:eb:46:11:7d:65:f3:d7:4b:eb:
b5:3a:d2:37:5f:04:e9:f1:e3:70:1c:8b:09:b7:dd:
11:b6:54:87:f3:03:05:b8:29:49:e4:bd:c0:53:53:
7a:ec:12:4f:76:26:38:6e:50:66:08:e3:8c:90:6c:
90:f0:79:95:85:ab:7c:a1:80:51:f6:e2:84:df:32:
db:23:fe:ab:a0:4c:2b:1a:99:4f:f1:b4:00:c0:13:
72:66:ed:e0:fb:6d:aa:6b:b3:27:be:20:af:71:53:
19:91:e7:15:3b:33:cb:78:28:29:54:f2:a5:ab:ac:
b3:3a:a9:09:be:3f:9e:55:75:01:e3:5d:ab:a4:f1:
c8:e1:5e:c3:0a:6c:3a:59:1c:70:31:21:bd:99:87:
70:2c:44:63:c3:7b:b8:60:08:2c:49:0e:69:8e:84:
28:51:25:0c:20:84:4f:c6:42:86:8c:ed:60:d6:63:
81:17:ff:2f:ef:35:ae:34:3b:42:9f:60:90:0c:24:
6c:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:34:2A:1F:E0:8F:30:64:95:90:00:01:80:14:D3:93:E4:AD:0C:4C
X509v3 Authority Key Identifier:
keyid:D6:74:C4:E1:B0:0C:E5:BF:B0:D9:6D:4C:21:EF:D0:58:D3:B5:CA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nTE4bAM5b-w2W1MIe_QWNO1ynk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/bb21fc-b252-4ab2-9878-ba5572e774ed/1/1nTE4bAM5b-w2W1MIe_QWNO1ynk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:bc:96:b9:60:6a:a0:00:42:a0:d0:65:e0:18:8e:50:cb:
9d:d3:29:b9:94:0a:22:6f:19:00:b6:d7:2a:b4:ed:84:b6:4c:
0f:19:bb:13:83:af:60:6f:99:c6:13:25:56:9c:07:46:20:3e:
2b:cb:7e:69:b5:4b:b5:7c:bc:3f:48:b6:8f:df:dd:70:ad:8a:
22:1d:ef:6d:16:a3:d0:b5:84:9f:e8:0c:da:66:80:4d:60:8c:
7c:4c:4b:b5:aa:45:7f:f5:45:31:c4:5e:23:13:de:91:0d:a1:
4b:a9:dc:65:10:40:af:b8:c2:ec:5b:e7:44:00:c4:27:32:9f:
7a:ca:4d:2c:d0:e4:7c:86:72:0f:8a:67:c2:55:6e:ab:c8:0e:
53:29:d9:8a:19:56:ce:3b:05:f8:e7:93:2a:69:93:80:55:34:
1b:e2:9c:9d:3c:a3:45:02:6a:24:4e:f6:74:2a:4d:84:c0:dc:
a6:6a:b9:e0:2b:5a:66:4e:04:1e:a7:d2:99:a6:44:b8:50:98:
34:4d:03:21:58:9b:33:9a:05:f0:33:48:a6:59:1e:ba:98:11:
9b:09:49:8c:d2:27:b9:48:63:b8:e1:f7:a5:1e:e0:5b:8a:1b:
1c:6a:99:82:a2:9b:b7:f8:dc:c6:e6:e5:66:d0:fd:4e:9a:50:
02:eb:01:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:31:48 2025 by rpki-client