Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
File: 1sJp-ek7D7i8SxyUerxbIfIfIwU.mft (raw, json)
Hash identifier: 4+EFJ0WkMOXvCYWwCqtWPI5aOhTocQM1PyuRXLBph34=
Subject key identifier: 2F:52:89:81:B5:E9:9B:D5:EA:9A:DD:34:0D:E1:E2:E2:9F:0B:3E:34
Authority key identifier: D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
Certificate issuer: /CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Certificate serial: 0199FD346598683C0AA5D85EC700239C89B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
Manifest number: 0622
Signing time: Sun 19 Oct 2025 16:01:33 +0000
Manifest this update: Sun 19 Oct 2025 16:01:33 +0000
Manifest next update: Mon 20 Oct 2025 16:01:33 +0000
Files and hashes: 1: 1-4EUUJ60y6tCuL7fMYLuUTMussI.roa (hash: ZCZ3I6CzJy+9WHfI/N/oUofNXCUICsdPSdQOOtiTJMs=)
2: 1sJp-ek7D7i8SxyUerxbIfIfIwU.crl (hash: dQ8lm/FWYn9JfC/xqLjMTmh8QgBhzWTQdDxkcMWyHmU=)
3: AJ8BcEY-DdXcTmxMdYHCmI3RxoU.roa (hash: 3dzyfVQpkuELs7hezXS9c0EUIsSeRiw+pnrqw/PWP6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:65:98:68:3c:0a:a5:d8:5e:c7:00:23:9c:89:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6c269f9e93b0fb8bc4b1c947abc5b21f21f2305
Validity
Not Before: Oct 19 16:01:33 2025 GMT
Not After : Oct 20 16:01:33 2025 GMT
Subject: CN=2f528981b5e99bd5ea9add340de1e2e29f0b3e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:fe:86:20:fd:ff:7a:26:c8:21:72:78:9e:
35:55:be:ac:f9:3e:6d:1e:05:7e:ca:67:6a:db:a9:
e3:0f:d0:d0:87:ed:02:24:cd:d6:1f:f0:1a:7e:8a:
af:1c:bd:81:43:f7:6d:0e:7b:58:75:88:80:2d:a8:
9e:a5:03:94:72:22:1f:86:68:14:26:75:11:c7:c9:
b5:7d:c5:7c:a0:0e:18:b4:a7:f0:c7:7f:3a:3d:7c:
95:27:16:01:3a:bb:32:c0:f8:cf:72:11:95:a9:ad:
44:32:59:47:9e:a6:50:60:6d:06:61:4f:a6:e8:b2:
c6:b2:0e:c7:47:fa:df:fd:0c:23:84:c6:5b:a8:55:
8e:a0:7b:f8:b4:61:69:22:e5:88:ac:0b:e2:98:76:
16:34:39:c5:89:44:f1:46:c2:e0:5a:77:0b:fb:db:
3e:58:e7:e9:ce:82:9e:30:e6:3c:df:aa:a4:ea:19:
25:e7:b1:0b:e7:77:f8:79:da:df:d2:7c:b0:37:c5:
6c:ee:18:5b:de:72:d7:16:9b:4b:d7:ca:55:3d:6a:
61:77:52:37:de:5a:c6:8d:67:5f:47:b9:d6:8c:f5:
64:87:1c:3e:a3:b1:5c:01:ad:d6:fb:0c:7a:aa:ee:
a0:7f:a7:e9:8b:6f:c8:dd:0d:0a:f3:ed:d5:9d:56:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:52:89:81:B5:E9:9B:D5:EA:9A:DD:34:0D:E1:E2:E2:9F:0B:3E:34
X509v3 Authority Key Identifier:
keyid:D6:C2:69:F9:E9:3B:0F:B8:BC:4B:1C:94:7A:BC:5B:21:F2:1F:23:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sJp-ek7D7i8SxyUerxbIfIfIwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/c253e3-4133-4a16-9061-b79cfc24d3b7/1/1sJp-ek7D7i8SxyUerxbIfIfIwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:e6:e2:de:2c:cd:82:5d:5b:b0:6e:9a:01:09:c0:fd:c5:bd:
01:8a:19:c6:8d:b6:15:18:a9:64:3b:cd:67:00:f0:91:c9:9e:
78:7e:b3:3b:52:e9:ac:ac:9d:16:96:ec:bb:19:be:0b:81:67:
fe:d1:7d:01:5c:ed:a4:4a:e4:4e:8f:48:71:a2:11:d2:02:31:
e2:dd:f1:a3:3d:60:01:fe:2a:b6:91:0d:38:e6:9b:98:3a:2b:
8d:63:bb:e3:b5:71:70:53:3b:f9:51:d9:71:a2:2f:31:46:c8:
2d:13:ab:c3:81:43:64:fb:12:84:d3:20:c5:3b:e6:ca:20:c7:
84:f7:f8:29:50:30:d1:4f:66:ec:aa:f4:90:bb:0c:9e:e9:68:
8a:56:bf:5c:21:5f:5e:99:6f:17:19:a3:52:2f:6f:6c:44:fa:
c5:34:69:2d:ca:85:c5:1e:88:6b:56:b5:84:0a:d9:f1:2f:6d:
a0:81:de:0f:d0:e0:52:22:89:c6:9a:b5:95:bc:b7:85:f6:2f:
ce:db:de:8c:77:a2:af:af:54:0c:a1:41:fd:61:aa:45:47:a3:
06:8e:c8:34:9e:10:b8:59:7b:c6:fc:00:b7:d0:47:ac:12:00:
6a:ae:1e:e3:31:df:63:ff:c5:9a:6e:7f:74:50:4d:78:ef:38:
df:50:de:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:04 2025 by rpki-client