Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: wJwA5ZBOCSpDaNJIwRhaoWdDuo+29ctTN7tq01U54lM=
Subject key identifier: A8:FA:34:6D:37:AD:A4:9A:CD:BF:71:68:F8:35:49:3B:F4:1E:EE:80
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 0199FCC6C8570945E7A0FCD90675806B6645
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:49 +0000
Manifest this update: Sun 19 Oct 2025 14:01:49 +0000
Manifest next update: Mon 20 Oct 2025 14:01:49 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: L9YnI9V5ty7bIUiC+5en6i821e47aX4iyH6T8G2GaWk=)
2: Oic624JnJmz9lkyUCkfkxynrzXU.roa (hash: reuQNdNLE9OYq59c7HheLuUPxQ+GdUmZR0j+FA5WU8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c8:57:09:45:e7:a0:fc:d9:06:75:80:6b:66:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Oct 19 14:01:49 2025 GMT
Not After : Oct 20 14:01:49 2025 GMT
Subject: CN=a8fa346d37ada49acdbf7168f835493bf41eee80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:9b:86:c6:a0:b2:6b:4d:66:1c:91:c2:6c:
23:31:4b:a1:22:f9:95:8c:d2:ef:ad:ea:5e:6b:22:
75:0a:df:71:6b:f0:8b:07:55:7c:e5:62:4a:d7:61:
ac:4f:8e:b5:c4:16:cd:18:08:03:b1:29:19:97:15:
8a:55:cb:3b:2a:7f:32:34:ae:15:07:0f:d6:ed:a1:
c8:4c:92:ca:1c:a0:ab:05:6e:e5:b7:c1:b6:81:a6:
dd:54:2f:ab:20:e0:3f:b6:e9:67:0c:b7:a1:74:e0:
b8:c3:48:c6:0e:68:35:bb:e1:38:2a:34:4d:28:df:
42:9d:1a:f2:06:cb:c6:bc:72:d3:ea:93:52:b4:66:
51:c9:43:41:99:85:3e:3b:b5:a4:99:11:51:5d:1f:
21:9d:b8:60:e2:85:b5:51:74:9c:7d:b5:c1:79:ee:
61:87:f4:4a:8d:7f:98:66:35:38:a3:4b:f3:6f:f9:
94:3d:bd:06:34:94:a9:cb:1b:53:88:fe:68:02:84:
bc:3d:b8:21:9d:d4:7a:a6:f6:05:8b:89:fd:72:86:
e3:d7:99:5a:8b:45:de:23:d7:67:0f:4c:67:08:25:
22:b8:44:26:04:32:99:47:56:f6:c3:40:1b:f0:9d:
aa:02:36:6e:d8:54:12:e9:05:24:60:c0:9f:86:40:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FA:34:6D:37:AD:A4:9A:CD:BF:71:68:F8:35:49:3B:F4:1E:EE:80
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:8a:7e:c0:03:76:79:71:a2:23:3a:ff:58:07:fa:c4:de:82:
6e:3c:61:62:5d:28:75:2e:2d:56:cb:f2:ef:86:3e:86:6f:a2:
71:36:a8:99:97:8e:69:04:cf:b6:47:4b:98:79:28:7a:a8:71:
0c:06:85:96:b6:73:ae:37:42:3d:c1:ca:fd:b7:31:97:f7:64:
1f:4c:51:78:8a:bb:06:c7:bf:1a:59:84:19:2e:d9:67:d4:11:
d4:73:44:39:38:99:11:f7:3a:92:5b:26:98:6c:32:89:1e:d1:
dd:c4:70:87:b2:9f:e3:1e:79:c7:ba:a8:74:fa:7f:86:4e:d8:
ce:8a:2c:7c:43:44:31:e7:b4:ed:6c:93:05:1f:b9:95:e4:6b:
7a:a9:86:f9:a4:33:a1:be:5e:cf:1a:73:51:1f:08:e8:1c:3a:
69:a2:05:d6:97:97:86:91:a3:82:c5:09:59:49:cf:99:b0:29:
c9:7d:d1:b4:c1:bb:57:fc:e1:9c:a5:68:92:5f:b3:0c:8a:a1:
3a:ab:3b:fc:4f:20:cf:f9:88:45:07:fc:ae:29:25:1d:3c:91:
ff:8b:ec:99:fe:53:e0:9f:20:5a:81:f7:74:7f:73:1f:20:dd:
73:19:7f:bc:23:c8:48:32:a2:72:2b:fb:76:2a:97:d7:fb:3b:
4c:38:8d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:53 2025 by rpki-client