Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
File: 1-U8vLiG8mNDGGywUwO4BnTMerlg.mft (raw, json)
Hash identifier: Q/OMbD9gJC3ZjVegm+osBw191tc51y+Bx6e25pCsYKA=
Subject key identifier: 5B:7F:65:3F:98:DD:FB:B0:CD:BF:AF:78:D1:60:7E:5A:7F:C4:E7:AE
Authority key identifier: F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
Certificate issuer: /CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Certificate serial: 0199FCC6AB68555D32BF01D2FE269A0A2F66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: 1-U8vLiG8mNDGGywUwO4BnTMerlg.crl (hash: 2tQZsQfoM7bMCT071ItGLP3W3CMg+FaZpL00HN+QIq0=)
2: 5MOhgExuZKrwcKUMPmkmqSgYYV8.roa (hash: BeNjV3R3WIa+A/yjnQFp45yGVELTOEe4wkt7MNfzXzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ab:68:55:5d:32:bf:01:d2:fe:26:9a:0a:2f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94f2f2e21bc98d0c61b2c14c0ee019d331eae58
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=5b7f653f98ddfbb0cdbfaf78d1607e5a7fc4e7ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:ce:6b:0c:4c:4c:23:99:25:f1:f1:ba:a8:
2a:58:cd:29:23:6d:9a:89:52:62:30:ec:d5:c8:10:
2e:2d:d3:f7:3f:ad:d7:b6:b3:79:92:2c:1f:3f:e8:
85:39:48:cd:39:94:2e:29:84:74:10:79:e7:af:d2:
91:d3:df:ca:1c:e7:08:bb:0a:ba:96:0a:d6:66:17:
fb:fd:2f:89:84:84:43:fa:93:4e:aa:1f:5b:87:e2:
23:41:ce:45:ea:9c:d9:07:76:71:68:2d:d6:0d:5e:
e1:42:93:02:9e:a3:83:79:22:93:e7:59:89:09:d1:
d7:05:66:49:79:e5:26:dd:43:6e:27:4e:07:d7:e8:
33:71:a4:eb:72:2a:98:bf:1b:4b:27:77:48:f1:07:
54:1c:1f:52:da:7d:f9:17:50:f1:3c:e9:54:95:9f:
ea:ac:58:14:2b:eb:5b:10:0e:88:fa:81:18:e5:12:
6c:fa:1a:40:ae:15:dc:0b:55:0d:ae:25:d9:eb:0b:
5d:20:1b:61:c5:5f:75:3d:2f:e8:a6:70:26:29:07:
8c:61:1f:1e:1f:77:c3:21:6a:9f:6e:0c:57:02:9c:
71:78:a0:b1:63:4a:da:7a:f0:3c:70:06:e2:fd:16:
09:4b:a1:dd:ba:2b:64:db:ee:2d:bd:d5:03:a4:36:
32:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7F:65:3F:98:DD:FB:B0:CD:BF:AF:78:D1:60:7E:5A:7F:C4:E7:AE
X509v3 Authority Key Identifier:
keyid:F9:4F:2F:2E:21:BC:98:D0:C6:1B:2C:14:C0:EE:01:9D:33:1E:AE:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U8vLiG8mNDGGywUwO4BnTMerlg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/de0d16-2f24-4c53-84b8-5d97b19fa595/1/1-U8vLiG8mNDGGywUwO4BnTMerlg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:1c:37:2a:42:ff:4d:64:2d:eb:73:65:ab:91:1d:6a:4e:b9:
b3:0f:1c:4b:98:9d:d0:be:49:a1:8c:b6:fe:b4:1e:a3:62:f9:
cb:6c:c7:5a:13:c4:3d:7e:ff:70:ef:5f:9f:0a:7f:46:db:7e:
17:3a:0c:13:72:13:b2:d1:9d:5d:43:8c:8e:7c:be:3c:5d:4d:
99:68:85:25:a1:59:c7:dd:94:b6:6a:84:0e:f1:52:fc:af:c5:
08:4b:ee:01:c4:17:78:8c:44:8d:64:0b:8e:8d:32:49:5e:86:
01:c6:c9:7d:12:76:86:b1:65:b7:98:f9:37:aa:42:b5:07:e1:
b1:35:1b:c8:95:95:1f:7a:99:1a:46:af:1c:3d:bd:db:d9:64:
57:87:e8:43:41:5e:cc:27:9c:19:d4:49:a6:fe:88:a8:d6:b4:
59:a8:5f:e1:b2:14:66:f3:a7:02:8c:d4:e3:98:c1:d9:99:e7:
23:d6:c4:c4:2a:a4:04:a5:63:c6:33:44:af:1a:e9:35:71:8a:
fa:89:6e:91:25:eb:dc:ab:43:2a:34:57:6d:d2:1a:b9:85:44:
58:15:be:89:ad:58:7b:c3:c8:d7:db:17:55:e4:89:3b:42:84:
c3:c5:30:e7:07:83:3c:5d:94:58:4d:6e:4d:7b:b5:1e:2c:78:
a2:75:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:14 2025 by rpki-client