Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File: 1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier: ZJPYIR8LAO1eCQ97zVevMAGpUEqr6p5uLns8so9ElXk=
Subject key identifier: FB:51:41:21:08:1F:91:3C:BE:7F:CE:24:55:19:36:36:1A:E4:F3:E6
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer: /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial: 0199FB7CC92AA1BC762D885DCB2633E91CD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: iEzQ+nDh4BHtuUkUjWltVMMqLHBah+1j/lyi/zSb0F4=)
2: 5VEZ7JcFmXiaWyk5RVHAojQYYGI.roa (hash: 3yUSESCkJd78E2LmJL5uepnC54miAABRgJPm19V647o=)
3: CllSsfXgtjjisiube1lsdtc0kX4.roa (hash: IgLYkmfyQAPOJzsCtlO5MW7jkHWE2+u5SDGaPrBxNOc=)
4: qmDrGumGDOW5sLdGxjK5ZVPdScI.roa (hash: pxjIJn6ld0n69osy4iN6fgrz9dhYKfwqt4Ocwx8tfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c9:2a:a1:bc:76:2d:88:5d:cb:26:33:e9:1c:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=fb514121081f913cbe7fce24551936361ae4f3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:49:45:13:7c:97:bd:53:24:56:73:9b:a6:
82:82:7a:dc:77:17:a0:28:4a:ef:12:60:a3:74:8a:
a9:f5:24:f7:e8:b0:49:6e:f6:e2:84:cd:4c:0c:26:
08:07:c9:a5:fc:aa:70:e7:cf:eb:35:b4:82:48:ab:
d7:76:aa:71:fa:5e:c4:51:cc:c0:2a:3f:65:0b:f5:
64:61:51:df:a8:7f:04:22:de:b3:f3:e4:ec:50:ed:
35:c0:29:88:e9:36:04:00:0e:70:ad:7a:bd:5a:6e:
eb:66:bd:f0:05:3c:1d:b6:b3:54:29:3c:dc:f9:50:
83:66:06:51:31:b1:b0:24:ba:62:e9:22:41:4d:8d:
54:f7:e7:36:26:c4:75:e3:a6:da:0b:ad:66:24:0e:
fe:44:7e:a9:b9:1a:c5:6a:a3:41:78:98:f2:72:0b:
5d:4d:c3:4e:f5:53:d3:3a:c1:ff:68:32:5f:d0:ea:
ee:68:e7:db:24:f6:df:d0:76:bd:04:e9:58:62:24:
84:43:18:c5:96:46:60:66:1b:16:af:7f:b1:9e:ed:
ab:eb:91:a0:5a:77:08:a1:d6:e9:18:9f:3d:bb:b1:
8d:c9:53:d4:35:7d:92:f5:7e:1e:a0:1f:d8:e0:ed:
be:48:7c:fc:53:6b:90:47:c3:51:c4:b7:a2:81:cb:
07:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:51:41:21:08:1F:91:3C:BE:7F:CE:24:55:19:36:36:1A:E4:F3:E6
X509v3 Authority Key Identifier:
keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:50:f6:a8:e3:8c:e7:c3:bc:47:0f:50:a4:28:df:eb:2f:87:
2d:1f:80:e8:7e:a5:ef:3b:42:7f:24:4d:31:08:e3:52:79:7e:
89:27:fa:6d:fa:1c:ce:a1:49:87:ba:87:fa:3d:64:e8:00:02:
61:e9:46:2c:dd:dc:18:f9:2a:20:ec:42:0d:0a:0d:31:96:e1:
62:4e:66:3e:c1:e2:89:b3:5d:43:bd:d2:93:02:11:e1:0b:eb:
a0:a0:0d:f2:89:40:d6:33:3b:90:48:af:3b:50:0a:90:d2:c1:
f5:ca:f2:a7:2b:0a:95:18:86:9d:7c:49:8b:27:4c:0f:96:b8:
e5:b5:09:89:1b:61:82:93:7d:f7:69:61:8b:ab:8b:f5:3a:5f:
04:73:6d:99:ff:21:21:b3:38:1e:af:f2:14:19:d1:92:bd:fc:
5a:c2:30:f4:d5:5a:3b:36:f5:73:ad:c7:88:6b:68:aa:ab:56:
f3:fd:41:1e:0b:a5:ef:42:b7:f8:27:e6:52:c0:f7:78:3e:3a:
76:6f:01:ad:45:ec:a8:42:f6:93:b2:a2:62:c8:18:75:9f:54:
f2:a2:71:8c:e9:41:fa:70:16:f1:52:59:10:9c:37:3d:ec:87:
09:34:28:95:0d:ec:4c:cd:81:67:67:c1:38:c8:57:5d:ce:5b:
95:a9:24:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:50 2025 by rpki-client