Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
File: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft (raw, json)
Hash identifier: 1eY3EW1YA2ga7qcRF5Jii9ZwuqRYLMWbjEj0H3g3abs=
Subject key identifier: 84:3A:87:8A:F0:C0:92:0E:58:8C:4D:A5:49:96:A5:8A:54:6C:11:EC
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 0199FC8F77038D38A57F53E0129FBE2E4F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 13:01:24 +0000
Manifest this update: Sun 19 Oct 2025 13:01:24 +0000
Manifest next update: Mon 20 Oct 2025 13:01:24 +0000
Files and hashes: 1: 1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl (hash: IXk02ZKDWRfz77No2Npebv6p+0uw8Rrx8F9WM/WqtYw=)
2: LVIJD49T-mpIvZxU62MTl9m9hkE.roa (hash: YaoE67iYSNEdVd0kQd7kfsjxfRQdded3vy+Kv/LAgPk=)
3: PTqvLbs-crQCXH75GKZKj2e3XH4.roa (hash: LPrD3bTGgphahX9ng5Tkg/VWB+najziQTzD7XFs0iFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:77:03:8d:38:a5:7f:53:e0:12:9f:be:2e:4f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Oct 19 13:01:24 2025 GMT
Not After : Oct 20 13:01:24 2025 GMT
Subject: CN=843a878af0c0920e588c4da54996a58a546c11ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:ce:ee:d5:c5:bd:be:4a:32:cf:00:24:7c:
02:ad:d7:f4:74:9d:1e:64:b0:26:da:02:dd:e1:45:
84:db:f3:e3:26:7a:04:4a:6c:1b:4f:b1:9a:cd:af:
d4:cc:2c:73:0a:f2:80:0b:dd:8c:92:e0:80:c3:67:
e8:7f:e3:65:df:7b:48:25:47:f6:93:ae:91:40:ba:
30:78:cc:ef:46:14:de:ec:d2:93:82:d8:29:78:a7:
04:ca:fd:0c:e4:4b:74:43:c4:44:6f:c1:17:15:b4:
27:e8:7f:77:ac:53:28:6a:42:f8:79:c8:5c:08:1b:
48:86:20:e8:f3:51:9e:66:c2:da:bc:05:c1:6a:dd:
e7:f1:a6:ba:60:7d:44:3a:43:17:e8:5b:4c:e1:57:
33:87:a5:24:b5:e4:34:26:4e:55:03:97:d8:8d:52:
7e:66:e2:27:9e:2a:e4:19:f0:19:d8:42:88:3a:0e:
f0:7d:a3:dc:d9:c0:7a:88:a9:1f:22:3f:1e:0c:2b:
eb:6f:a0:be:67:8a:a0:f9:39:b2:24:da:c2:82:5c:
6a:4e:eb:71:4d:a7:7e:81:e4:a5:cc:d8:4f:45:be:
01:5e:1a:39:f3:66:2e:29:95:52:cd:bb:2b:48:ef:
ec:60:65:3e:44:66:18:53:2c:48:83:d7:b9:2a:19:
0c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:3A:87:8A:F0:C0:92:0E:58:8C:4D:A5:49:96:A5:8A:54:6C:11:EC
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a1:26:ac:e0:76:a0:17:c0:be:60:11:1d:3c:13:a2:38:a8:
89:ac:c1:97:b9:ca:06:2c:02:a8:56:51:35:c4:b0:ce:de:97:
8d:69:ca:de:69:b3:b7:07:83:0b:12:e4:ea:f6:ad:95:04:67:
dc:30:20:31:04:05:96:ec:19:c0:5e:dc:ca:d3:6c:5d:9e:43:
87:49:0e:dd:f6:36:fd:e2:bd:c5:6d:c6:5c:65:07:a0:4c:dc:
70:e0:31:38:df:b9:65:4b:f0:ba:4e:ef:11:74:74:91:62:8c:
2c:36:95:28:8b:18:75:55:0c:14:d3:68:a0:7e:88:92:f1:af:
03:ac:7e:db:c3:53:da:88:3f:64:bb:1e:4c:59:ee:a1:b0:07:
a0:a2:53:28:4a:49:7b:fd:65:fe:cb:93:78:bb:68:b6:bd:92:
fd:9b:32:49:c9:9f:de:2f:ca:31:57:5f:55:0e:90:ca:91:12:
66:a7:54:8c:af:8d:7e:1b:78:47:cb:9e:95:5f:f8:df:b6:6b:
ac:09:d8:e5:ad:43:50:8e:4a:e6:31:1c:c5:43:d9:74:d1:62:
40:f8:fb:b1:c4:7a:bc:79:2b:aa:5f:e9:02:64:f7:6b:57:eb:
4f:82:96:8d:1e:9e:e7:d8:10:e7:12:32:ee:bf:ed:8d:5d:c2:
95:bf:52:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:26:01 2025 by rpki-client