Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: RqSpC1mz5cfleDwyE5ZCAdk7NKq2R219HjB5ww8rT+M=
Subject key identifier: 10:5A:6F:DF:2E:31:4B:7A:EA:B7:24:37:AF:B7:C3:FE:96:DB:2A:EB
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0199FD6AFE069E9A2645869BE38879F94DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:01:11 +0000
Manifest this update: Sun 19 Oct 2025 17:01:11 +0000
Manifest next update: Mon 20 Oct 2025 17:01:11 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: ojFRU+UgIfJjaYZwX1sits62ziocsRxSFPlJkhKz2uY=)
2: crDjLxmHdcT6e7WUgga10c_NWik.roa (hash: 1lxS7SYauMom80FADoSQnixC1wX1TWhmXujQ5ZWWnRE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:fe:06:9e:9a:26:45:86:9b:e3:88:79:f9:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Oct 19 17:01:11 2025 GMT
Not After : Oct 20 17:01:11 2025 GMT
Subject: CN=105a6fdf2e314b7aeab72437afb7c3fe96db2aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c2:43:e8:b6:43:27:41:b3:e6:a3:75:3a:93:
06:88:5e:d1:2b:a1:0d:47:64:95:c7:e9:ea:de:c7:
76:24:49:5e:8f:88:1d:53:5f:78:7d:64:2f:36:aa:
82:85:0a:87:3a:f5:84:5f:b0:16:e3:a3:63:1b:26:
f4:6c:b6:2f:be:1f:a3:0c:2c:bf:f2:3c:8f:6d:b8:
6c:1c:25:14:56:2b:46:4d:c3:6c:bd:73:3c:f2:4c:
53:fe:fb:47:c6:1e:5f:02:2d:5f:c1:af:eb:96:d4:
e8:f1:28:c6:23:54:95:29:14:41:39:e8:ec:7d:1d:
23:5c:11:b5:41:d4:7b:a7:67:37:8c:94:ad:19:3b:
bb:42:88:02:af:9e:9d:dd:0b:b8:a9:0a:c0:43:5d:
a6:2e:ec:54:96:6e:fa:0a:54:61:75:f8:e7:8a:72:
90:0d:72:cd:b8:a6:30:a2:4e:bd:0b:d4:6c:b0:24:
9d:f3:38:c6:64:1f:27:4d:a2:d3:36:e7:0b:ec:bb:
17:64:16:a6:06:3f:20:f1:97:da:84:61:11:2b:71:
c0:c8:4d:2e:b2:b2:b5:98:b6:88:73:7a:10:c4:d6:
84:09:03:de:4f:46:8e:ec:71:01:a6:47:23:c2:e5:
ac:e1:e9:f1:bf:4d:14:6a:e3:81:1f:5a:87:be:2f:
cf:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5A:6F:DF:2E:31:4B:7A:EA:B7:24:37:AF:B7:C3:FE:96:DB:2A:EB
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:95:66:e1:a2:c4:b6:cb:aa:d8:32:1a:f5:7b:6b:2e:ca:be:
ec:83:72:6e:f4:cf:3b:d7:e5:5a:a1:62:ff:40:70:dd:29:b8:
81:5c:39:aa:a7:a1:49:30:5e:1a:0c:9b:11:7d:5c:18:45:8b:
18:ff:20:b6:c2:74:5b:60:fd:13:6b:70:ae:ea:32:dc:05:ef:
4a:bd:e0:63:4c:ab:20:2d:21:b0:57:62:ac:a9:51:f3:eb:31:
f6:6d:f8:ef:e9:83:30:55:f8:85:17:18:45:ae:fb:88:62:27:
03:63:5f:0d:94:ac:87:39:7f:9d:91:02:74:b9:29:80:88:10:
3a:40:68:d7:2a:f9:8e:b3:21:53:96:74:43:7e:a0:35:6f:7e:
bc:e0:b9:4b:4d:b0:ec:7e:65:44:e7:8d:79:f4:be:09:a2:e4:
60:45:7f:a0:52:99:a7:04:8f:52:f3:5f:e2:05:25:be:e8:00:
0e:b1:5e:0a:cb:11:0b:7a:16:b0:d1:d4:22:ba:58:00:6d:72:
6a:f4:45:cc:52:d7:08:8e:89:95:d8:82:36:b3:a1:5e:51:b2:
5b:7a:8c:9d:3d:67:59:21:f3:f0:ef:f3:21:2f:a3:b8:21:72:
58:ee:06:36:e9:0a:13:3e:c4:59:43:35:ee:d8:40:5b:e5:d7:
cb:25:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:01:31 2025 by rpki-client