Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
File: F1lDaGkInNnH5tAgKPJKL-SbhtU.mft (raw, json)
Hash identifier: GoIQur8ji9CK++890RgbILDqRNgo23ZGt7QF4cratpY=
Subject key identifier: 2A:01:D7:DE:A9:C2:5D:91:38:D6:E9:BE:D2:CE:EC:05:5C:68:B9:A1
Authority key identifier: 17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
Certificate issuer: /CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Certificate serial: 0199FEB4D4AF46EE8BD257678B10A95FAC15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 23:01:27 +0000
Manifest this update: Sun 19 Oct 2025 23:01:27 +0000
Manifest next update: Mon 20 Oct 2025 23:01:27 +0000
Files and hashes: 1: F1lDaGkInNnH5tAgKPJKL-SbhtU.crl (hash: aFCh22M928hbZ3h1FrKItmXUq8t/4KdsVTWGQMYZI+A=)
2: x_rxqF-JJR6RocSDql__H0qmhrc.roa (hash: 4JF9dz0rvoh3uEdMTV+Of1B1JpkW2SA5c3PR2yvS+Us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d4:af:46:ee:8b:d2:57:67:8b:10:a9:5f:ac:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1759436869089cd9c7e6d02028f24a2fe49b86d5
Validity
Not Before: Oct 19 23:01:27 2025 GMT
Not After : Oct 20 23:01:27 2025 GMT
Subject: CN=2a01d7dea9c25d9138d6e9bed2ceec055c68b9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:10:6a:53:72:f7:b9:42:04:f4:fc:d4:8d:
bf:c9:c6:74:07:ca:f0:57:b3:ce:5d:5c:02:4c:6e:
8a:9c:a5:fb:ca:e8:74:be:1d:a7:32:e5:2c:8a:66:
72:4c:66:ca:a3:0d:e7:00:d4:ed:a2:6b:37:fb:f6:
9b:fe:a5:cd:1e:fc:17:16:c8:1d:4e:3f:dd:a1:8e:
99:f2:a9:e3:bb:67:83:8d:fc:aa:d5:ec:f0:ef:46:
9b:99:0b:a9:97:a3:2d:59:17:3e:de:de:ea:15:f5:
46:1a:76:99:b6:4c:14:5b:8c:17:f8:c8:c8:a2:54:
15:52:c6:3d:dc:b7:3f:88:c7:48:3d:ee:77:83:cc:
10:ce:8d:55:65:a1:a9:43:a2:c6:36:2c:96:16:c0:
62:80:2a:1b:a7:30:7d:b9:03:57:95:b0:f8:eb:d1:
e4:9c:77:0b:87:1b:3c:af:b5:00:a0:ac:05:4b:c8:
31:46:ef:ee:5c:6a:b6:46:73:33:55:b5:32:61:58:
5b:77:56:7a:2d:b1:82:79:1d:28:6f:b8:50:23:b7:
2a:42:74:34:b4:7f:04:d5:9f:92:56:e1:32:30:de:
a0:57:ec:9d:c6:16:7a:48:7f:68:23:5f:22:78:0f:
d5:b6:1e:a6:d2:2c:98:05:e0:47:f6:f5:3e:7b:a0:
20:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:D7:DE:A9:C2:5D:91:38:D6:E9:BE:D2:CE:EC:05:5C:68:B9:A1
X509v3 Authority Key Identifier:
keyid:17:59:43:68:69:08:9C:D9:C7:E6:D0:20:28:F2:4A:2F:E4:9B:86:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1lDaGkInNnH5tAgKPJKL-SbhtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/7247d2-0a28-4e4a-aa0c-fef41dd876c0/1/F1lDaGkInNnH5tAgKPJKL-SbhtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:83:fc:a9:78:9d:c1:1b:14:dd:78:4d:5c:aa:db:c0:38:11:
bf:5b:35:5c:3f:ba:05:4c:28:4d:48:13:a5:2d:88:0b:44:3e:
4e:c6:45:c1:99:12:8f:95:56:bd:97:64:d6:ae:20:21:80:9b:
e4:7d:8a:0d:c8:ea:9b:c3:1c:26:9b:05:ad:92:49:9a:3e:57:
5e:51:b9:6c:f8:66:4b:b0:fa:81:d3:ca:4e:f3:c8:22:41:45:
74:6c:6c:ed:d5:c2:68:41:11:1e:e9:91:a1:e0:4e:7d:b4:78:
f4:aa:19:a8:5d:44:18:c8:0d:3b:42:9f:56:21:20:f2:75:23:
39:dc:b3:d7:ac:c6:12:c8:d8:e0:e7:ef:ce:e7:6f:ba:e8:44:
53:fd:92:5a:01:91:1e:f2:18:7d:53:fa:29:68:f6:8a:92:96:
45:67:4c:a6:ba:7f:31:ce:ef:ee:b7:e2:bb:98:01:a7:be:61:
e8:94:da:67:cf:95:a2:51:cb:e7:c9:60:a4:62:02:77:69:fe:
56:45:8b:db:75:07:9a:86:0e:f6:cf:ef:6c:26:78:1a:7e:e1:
09:41:cb:30:b8:95:cf:5d:e3:72:a6:ed:ce:45:1f:11:0a:f9:
c7:2b:49:be:57:fe:b7:e8:93:db:78:09:3d:12:de:c5:0b:8d:
28:cc:59:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:29:46 2025 by rpki-client