Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
File: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft (raw, json)
Hash identifier: BprOqZPS84mFz9dgqM70+9msTD+Ujrr1sFhC6BWAY/U=
Subject key identifier: D3:3F:50:4C:A6:64:3E:63:0D:B3:C8:3B:08:AA:CD:EB:63:02:67:6D
Authority key identifier: F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
Certificate issuer: /CN=f94df3b8463da119fdd56d85da547a042a1798c4
Certificate serial: 0199FBEC67840C521A96636DC0541CE31AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:03:18 +0000
Manifest this update: Sun 19 Oct 2025 10:03:18 +0000
Manifest next update: Mon 20 Oct 2025 10:03:18 +0000
Files and hashes: 1: 1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl (hash: BiARx3lvXQMoSTx86D5EenQEcaFUsHzRd/UvFcxlR3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:67:84:0c:52:1a:96:63:6d:c0:54:1c:e3:1a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f94df3b8463da119fdd56d85da547a042a1798c4
Validity
Not Before: Oct 19 10:03:18 2025 GMT
Not After : Oct 20 10:03:18 2025 GMT
Subject: CN=d33f504ca6643e630db3c83b08aacdeb6302676d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ff:2c:c0:1f:eb:2b:5f:fd:ac:b5:c6:e9:59:
f5:26:fb:82:7d:ef:be:ad:6e:7a:11:2f:6e:b3:e3:
37:87:b5:19:86:91:e2:6e:9d:7e:72:1a:e1:72:5a:
41:cb:a1:29:29:f9:d3:7b:2c:15:e2:7a:e3:d6:10:
38:2d:a0:e2:95:79:f6:cb:ae:fb:1c:c5:d4:90:5f:
7a:44:21:5e:55:82:94:a0:e9:47:fd:86:45:63:e1:
ff:9c:92:34:46:28:b1:0b:ba:fb:48:fd:ee:c6:37:
58:89:9e:98:24:87:22:1e:f3:41:36:9d:ce:7e:5a:
ad:13:c2:7c:fb:2b:a0:41:15:a1:4d:d9:51:ab:23:
f2:8d:ca:c9:5d:2d:9e:70:c7:99:2a:df:79:66:d2:
1f:c0:0b:a7:6d:42:99:9a:44:bd:8f:79:dd:9f:00:
8e:ae:e4:01:70:f4:d1:1a:35:5e:93:17:05:83:fe:
25:68:a8:32:89:ae:82:82:ec:bd:76:51:cf:f4:fb:
fb:55:ac:b7:79:89:8c:b7:57:f0:6e:f8:e2:a1:0d:
c0:f0:32:72:00:83:48:ae:23:20:c8:3b:96:1b:9f:
b0:37:57:d6:a2:d2:32:56:2b:21:38:ee:b0:ec:e6:
72:62:27:e3:e8:cb:f5:43:9d:bc:83:0f:b2:ad:65:
0a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3F:50:4C:A6:64:3E:63:0D:B3:C8:3B:08:AA:CD:EB:63:02:67:6D
X509v3 Authority Key Identifier:
keyid:F9:4D:F3:B8:46:3D:A1:19:FD:D5:6D:85:DA:54:7A:04:2A:17:98:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9c9323-4800-41ac-98e2-25e861cd6b34/1/1-U3zuEY9oRn91W2F2lR6BCoXmMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:4a:22:37:cd:9d:2c:25:a5:98:b8:8c:2b:85:22:36:19:1a:
a9:e6:a1:ed:13:b0:de:c2:d0:30:fc:9b:34:40:66:42:1f:4e:
12:5f:c9:0a:1c:7d:bd:89:87:de:99:66:a2:6d:b2:b1:61:70:
36:16:12:5a:f3:03:99:43:5b:de:47:ca:d0:3f:0f:4d:b4:69:
2b:a7:de:29:87:53:9b:fc:dd:3c:0b:d0:bd:00:4e:45:10:1f:
18:ac:10:01:fc:6f:9d:55:ae:b7:62:11:48:18:39:00:e5:75:
f2:77:26:d8:67:cc:64:54:4a:06:b9:88:7f:84:e9:f8:f9:34:
d0:ce:1e:b7:97:ca:b6:c8:87:5a:0a:13:75:62:24:8b:7f:4c:
5b:05:ba:aa:6d:be:b1:e1:6a:06:2a:21:a8:23:ab:d7:70:b8:
d1:78:dd:1a:ac:8a:a3:13:ca:27:3a:9a:58:a0:e3:22:88:bb:
20:18:fe:5c:ec:b1:00:e5:32:f0:fc:06:00:39:a0:db:19:93:
7a:8c:24:df:07:1b:88:d8:ed:b6:81:85:58:cc:3d:a3:8a:4b:
49:40:17:ca:6b:17:dd:e7:dc:07:c9:07:41:07:a8:e8:be:20:
45:94:9e:d6:29:e4:99:7f:60:e0:d6:f8:f4:8f:dc:62:0b:85:
df:ef:d2:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:27 2025 by rpki-client