Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File: f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier: Jd6iUpSnxDtT6+N9HucnakdavuGo8c1X5v/9r7JRHFw=
Subject key identifier: 4C:72:59:7E:59:1B:CF:14:34:9D:06:D9:39:5F:2F:B6:F5:3D:BF:4B
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer: /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial: 0199FD33F4773F2D740403846EDF9E90782D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number: 16E9
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: cnPGqCG5nEkNqGWJOAr_TkoWilA.roa (hash: CYypMEm0JHEvZ4au2O1TzsyqDXsSN8doV/iIx579FcY=)
2: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: dTZfpnEHQ5kB2Hm7i0kGJn4o2cx2HuqKfPRg+qtof4w=)
3: fhcv9zVEJVXyHJ1eaDiH9RUmSQE.roa (hash: NL+aNAoNbkMGbCukVk9uNzqMGkBi6UK6eYdC2KpDM5s=)
4: oPRXnsL5INwqLC1NQuIf4ZAf32c.roa (hash: Q33Xwu3J1rkbAKsrHCB0KfJpoWIRtKaUuoBQYcngjzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f4:77:3f:2d:74:04:03:84:6e:df:9e:90:78:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=4c72597e591bcf14349d06d9395f2fb6f53dbf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c8:07:cf:72:9f:30:67:69:0a:84:2f:14:c0:
5c:ae:97:ae:f3:aa:a5:64:98:21:09:f9:9b:11:77:
13:a6:79:4e:80:86:5a:58:38:47:03:fc:12:9f:8f:
d1:bf:64:09:8f:a1:ff:37:a7:09:d3:a7:e7:c6:b5:
d8:b0:53:b1:5a:aa:16:41:0b:60:53:00:eb:d0:6f:
42:23:42:9e:14:1c:66:4f:bf:df:d3:96:fb:c5:f9:
26:ec:39:fb:13:94:81:f3:93:7a:9c:33:5a:62:85:
3e:2c:10:0a:50:48:2c:ed:38:e6:23:ca:d9:ae:33:
5f:fc:c3:34:6f:ff:cb:60:cc:b1:16:5c:e3:87:a5:
c9:c9:20:aa:c2:9d:66:2d:8f:eb:d8:81:c5:de:45:
9d:f2:55:cb:96:6e:b0:63:79:45:f6:91:60:80:d0:
12:b1:5d:b1:9e:0d:24:3e:08:e7:78:b5:a7:93:d1:
7c:d8:95:81:78:08:27:fe:d5:38:5b:e8:e2:c1:15:
41:bf:24:89:3c:4d:21:6c:c4:16:be:1b:1b:5e:66:
b0:9e:3f:45:9c:df:c1:09:8f:e2:db:25:e8:c4:71:
4b:5b:77:0b:66:b5:89:c3:87:51:3a:95:4c:7f:4a:
c3:3c:b6:22:62:e9:41:49:0a:9d:8a:7d:82:aa:4b:
13:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:72:59:7E:59:1B:CF:14:34:9D:06:D9:39:5F:2F:B6:F5:3D:BF:4B
X509v3 Authority Key Identifier:
keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bc:ec:5f:36:a8:e2:00:40:1f:b9:91:89:60:5e:b9:2a:2e:
bf:f4:cc:0d:d7:93:46:5a:0e:ca:6d:78:61:6d:df:92:47:0d:
1a:a4:5e:65:b7:e5:c9:f2:c6:27:1c:7f:3c:33:aa:01:8b:12:
32:3b:28:e5:06:c0:c4:33:78:13:86:b3:35:d0:29:a7:00:f4:
20:9e:0d:36:cc:dd:b7:2a:89:32:bb:82:99:b5:88:ba:26:b5:
25:b7:cc:28:40:df:2e:38:de:c5:e0:8e:63:bd:90:f1:c7:8b:
f3:d5:d8:95:76:db:d4:47:73:6a:62:e7:d6:8b:77:54:56:8e:
94:b3:cc:8d:a7:ce:28:4f:aa:9a:d8:11:8f:45:02:6c:a7:fe:
08:e5:ae:0a:d8:5b:59:86:67:b3:02:61:fe:1b:2e:db:eb:d9:
52:05:e9:27:37:a9:55:b6:86:54:b6:ef:e1:10:8e:f3:1c:0c:
79:8d:8a:db:d7:79:9b:4d:9d:56:e0:6d:e5:e6:e2:b6:4a:b0:
17:9f:bc:64:a7:35:02:c1:19:ac:c9:a0:98:35:02:1e:66:01:
9b:b2:4a:d1:04:a4:77:f1:fe:cf:b5:11:19:bd:fd:de:21:5c:
15:0d:d3:fe:e2:d2:87:b2:f3:87:50:6c:cd:33:4c:ad:ca:5c:
58:ca:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:47:44 2025 by rpki-client