Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: UUN2k8GQhlMut901Kxkwg277G7jHuJp1moZW+zc/WKA=
Subject key identifier: 57:16:1E:A6:EA:93:DD:BE:77:83:18:18:DF:BA:5B:26:05:26:91:61
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 0199FBEB3696091D652EDC15EA8C47487112
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 10:02:00 +0000
Manifest this update: Sun 19 Oct 2025 10:02:00 +0000
Manifest next update: Mon 20 Oct 2025 10:02:00 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: 9SrMOyKU9Vt8zi6m4T0XdVjOfaTsaXB0sPXIHYUVj7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:36:96:09:1d:65:2e:dc:15:ea:8c:47:48:71:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Oct 19 10:02:00 2025 GMT
Not After : Oct 20 10:02:00 2025 GMT
Subject: CN=57161ea6ea93ddbe77831818dfba5b2605269161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b5:14:27:96:e1:b5:22:28:1f:a3:52:fe:3f:
5d:a2:9d:af:05:29:64:af:fc:ad:19:b7:69:dd:34:
ac:8a:2b:bc:4c:a5:98:96:0e:8b:ed:b6:c1:62:d4:
d0:da:49:9a:1d:4e:c6:15:cc:a3:9c:d0:13:37:57:
6f:93:57:ec:c9:84:d3:47:56:1e:d4:65:19:f0:6b:
c4:b5:12:89:4c:8e:01:a4:ce:a4:6e:46:af:7e:17:
f8:fb:3c:df:90:0e:9e:92:4d:97:84:af:54:09:0e:
63:ae:ef:b4:b4:ba:9b:ee:1c:c9:dd:e9:8b:22:90:
e1:54:41:9b:db:b9:08:02:8c:b4:8a:5a:71:7b:71:
b6:00:ab:da:16:1b:f1:0a:80:99:1a:e7:c7:49:e7:
66:76:92:64:7c:95:a5:f1:d6:08:58:d6:b6:28:3d:
25:a3:7c:15:cf:85:c3:81:f8:50:6c:cf:cb:3f:6b:
1e:da:7a:70:f7:87:b0:48:18:b5:b3:a9:13:6c:fa:
3c:b5:e2:00:03:ea:1f:ac:bb:93:4e:ee:c8:c0:79:
68:2f:bc:27:8b:f1:31:b8:51:8f:08:a0:c9:0d:5a:
ef:52:07:d6:74:05:af:34:ca:d1:b6:59:59:63:dc:
ca:18:1d:34:9f:e7:a3:eb:4a:0e:e6:f9:35:b1:0c:
d9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:16:1E:A6:EA:93:DD:BE:77:83:18:18:DF:BA:5B:26:05:26:91:61
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:61:ee:67:65:32:84:68:72:96:50:4c:7b:52:92:27:49:28:
b9:ad:9c:07:96:1e:c1:e6:c6:6a:bd:fa:71:54:cc:c2:04:fb:
a6:2e:9b:51:26:32:76:b2:77:1d:4e:e9:d0:a5:3d:19:29:9a:
b6:23:45:46:45:e0:24:ba:80:3c:3b:63:f0:6c:fe:d7:97:dd:
68:b5:5d:09:be:b8:b7:25:a9:f7:b0:7f:1b:d2:39:b7:5d:9e:
19:ff:9a:f5:ad:18:a5:12:97:03:62:fc:68:ea:98:00:28:03:
31:d5:ee:60:b3:84:81:73:83:b2:37:be:90:17:a5:0a:9c:b7:
cb:24:06:bc:00:c4:14:75:1d:69:c3:19:3f:93:01:77:22:c0:
5d:fc:64:9b:fe:59:ce:a6:97:71:cb:17:ac:f3:29:06:44:19:
45:a3:85:60:89:aa:a6:3d:15:01:47:ce:b9:cb:de:53:88:51:
ea:0e:0e:07:10:16:c0:a8:73:e8:30:8a:8e:c8:8a:81:42:cd:
5c:57:0a:b0:d1:ea:6e:5a:dd:c1:19:59:fc:a2:70:97:99:3b:
36:7b:15:44:78:a5:5c:c2:0d:3d:a7:fe:e2:d0:3f:b5:00:b3:
5f:de:28:be:29:8a:34:63:29:e5:c3:2c:8a:a7:b6:79:ba:5c:
9e:9f:ab:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:10:29 2025 by rpki-client