Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
File: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft (raw, json)
Hash identifier: qBOnYOSUu3GpuaTNcbc+P7GTlYP7Xaa1i5fZgcKDB2E=
Subject key identifier: 4C:25:C5:0B:3E:DC:38:41:23:84:B0:99:C3:28:99:28:EA:87:7C:0C
Authority key identifier: F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
Certificate issuer: /CN=f973209625e2a03ddeecf91bb480548e5729d479
Certificate serial: 0199FE46FEEAA927F468B188642B2B0B2237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 21:01:29 +0000
Manifest this update: Sun 19 Oct 2025 21:01:29 +0000
Manifest next update: Mon 20 Oct 2025 21:01:29 +0000
Files and hashes: 1: 1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl (hash: 8jlPWat0chRuuKaB9qgS+cxnBYyBdzlfDfcFfIu9igU=)
2: l3JzatKnSb-qTPQjQ9VOzx8MD7g.roa (hash: 40hMQclA6AyvTYjGgbc8RhGg1fGmdxgMO6uT9Avjx2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:fe:ea:a9:27:f4:68:b1:88:64:2b:2b:0b:22:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f973209625e2a03ddeecf91bb480548e5729d479
Validity
Not Before: Oct 19 21:01:29 2025 GMT
Not After : Oct 20 21:01:29 2025 GMT
Subject: CN=4c25c50b3edc38412384b099c3289928ea877c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a0:d5:de:0a:07:ec:ef:5a:7f:2d:db:10:81:
23:92:8e:25:fd:a6:43:1b:e7:78:ba:52:9f:60:b6:
80:4e:05:7a:7f:fe:cc:9d:9d:dc:b3:42:bb:a2:ef:
8f:91:76:66:52:7b:c0:d5:74:b0:bb:00:ca:c3:fd:
33:65:b1:61:14:1f:83:2b:fa:31:ab:44:e2:c0:56:
0a:69:6d:a6:5b:db:be:1f:fa:e5:07:69:d0:03:38:
ff:4f:af:74:d0:ef:9b:fd:aa:22:f0:f1:58:c3:91:
89:1e:35:5a:38:90:e4:5e:7a:b6:fd:66:79:75:48:
e6:9c:c6:7f:db:e4:6a:d2:51:14:36:da:1e:04:8b:
7a:a5:b6:d4:da:bf:58:14:af:19:bf:2b:13:ad:68:
36:ed:a2:4e:6f:45:84:ed:45:ed:7a:77:32:1c:f6:
3d:6f:46:54:0f:7f:b8:61:ff:f8:31:f5:a7:d3:03:
87:57:9c:1b:9e:6d:28:1e:67:44:5e:af:3d:57:ad:
84:3f:ad:d9:59:04:b9:7e:18:2d:f6:cd:f1:b7:22:
10:58:14:b2:fe:7b:e0:9f:f0:c4:4e:8e:d7:a1:92:
21:36:73:6c:31:11:77:87:4d:23:27:fb:51:88:6a:
c0:ef:49:05:91:36:0f:9a:ed:58:d9:fa:1a:02:a5:
45:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:25:C5:0B:3E:DC:38:41:23:84:B0:99:C3:28:99:28:EA:87:7C:0C
X509v3 Authority Key Identifier:
keyid:F9:73:20:96:25:E2:A0:3D:DE:EC:F9:1B:B4:80:54:8E:57:29:D4:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XMgliXioD3e7PkbtIBUjlcp1Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/af54e8-bd63-427d-8cc8-f4ecebbb1ec2/1/1-XMgliXioD3e7PkbtIBUjlcp1Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b6:83:79:75:8b:99:44:e7:b0:ba:66:a8:ee:6b:60:95:d3:
61:ef:c7:67:75:a0:49:63:66:49:98:88:5d:1b:50:6c:10:bc:
01:a9:cf:eb:a6:f4:5e:ab:05:4d:a1:03:60:6f:14:7d:c0:ec:
7b:73:0d:3b:07:db:af:db:ab:43:c4:5d:93:1a:fb:37:18:a8:
bf:05:d4:8d:df:49:26:72:77:7f:93:d5:f8:b5:af:a4:dc:3b:
da:1b:05:aa:5b:99:11:ad:f3:f2:cf:b5:22:a8:34:84:32:64:
19:cc:5e:7c:8e:5f:0f:81:d7:4a:e3:85:0c:07:6b:81:fc:d2:
d0:5a:16:3d:4d:96:12:4c:72:16:c0:ab:46:9a:6a:9c:af:c4:
20:d2:04:ef:b9:f2:86:54:a3:11:0c:ae:e8:98:1e:68:22:96:
90:95:79:40:16:e6:ae:a4:7c:ec:db:4b:e4:c0:47:4c:0c:58:
03:ed:07:24:56:2e:8c:7a:a4:a4:9d:24:3b:7d:51:5f:a3:ef:
9a:20:c0:b5:25:ac:46:8d:7d:d0:ab:84:57:ec:fb:4d:2e:90:
bf:e8:3f:bc:57:22:fd:66:c9:7f:40:30:e4:88:1b:ef:e0:c5:
bb:53:f5:f7:e3:dd:8b:fd:6e:b4:85:62:49:06:4c:ce:99:e4:
03:6b:8e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:04:49 2025 by rpki-client