Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
File: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft (raw, json)
Hash identifier: cCQfSWg+D2HUUxBpKl+JCAZhFVFvytkbV2sccOu6HGs=
Subject key identifier: 2B:82:0E:CC:34:4A:3E:8C:F0:0F:24:E4:11:24:4A:D6:48:0B:B0:3D
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Certificate issuer: /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial: 0199FB7CA0069397193E9649142489B2349D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl (hash: 8oQ9AXIxN35mR6Gg8/iyMTMD+DhaGsradG5u92Lrz/I=)
2: 3vK4gZC4TPB0-MQ6z0IE1oo3VSw.roa (hash: j0jyYdSsynnhoRf7eCK9ZvXX/Rp4LU5VAHZHpRm0UEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a0:06:93:97:19:3e:96:49:14:24:89:b2:34:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02f648de95b88479364346ed01e78769577922
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=2b820ecc344a3e8cf00f24e411244ad6480bb03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:19:a9:37:a7:6a:3c:29:41:be:cc:78:f0:8a:
3c:04:be:65:27:d5:94:12:98:c4:78:d1:bb:9c:2b:
37:dc:e1:31:d6:4f:30:ae:02:cf:6f:71:d6:f3:b6:
98:5f:3c:49:5c:23:a4:01:9f:6b:9c:27:4d:e7:9f:
77:37:0a:d2:63:29:a2:2d:7d:05:dc:5b:b8:03:5c:
f0:a0:ca:04:f8:f4:21:50:b1:d4:b6:d3:8c:d9:4b:
9d:2b:11:65:4d:8d:63:62:58:9f:dd:09:c9:0d:22:
c3:2a:b6:0d:6c:ab:d2:94:37:22:4e:d9:93:44:a6:
ce:cf:4c:d1:47:54:3b:56:57:1d:27:f3:7e:48:67:
13:86:cb:69:68:6d:d4:e0:41:1e:bf:88:ce:7f:95:
0a:7e:94:4e:db:6a:4e:95:42:26:36:ef:a4:86:d0:
ae:e1:f5:65:fa:12:c8:30:46:63:84:91:6f:1e:25:
83:05:9b:26:e3:f4:33:24:e8:56:8b:a7:72:88:36:
8b:2d:15:da:0d:3e:a2:cb:13:66:5c:07:ab:c5:cc:
53:71:24:b8:3f:bf:a1:02:66:76:68:bf:23:5d:84:
70:c0:80:74:c9:00:19:c1:4f:7c:2d:33:50:eb:10:
ee:ec:d4:f4:13:b4:3e:1d:0b:4a:1d:2e:40:f5:0f:
4d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:82:0E:CC:34:4A:3E:8C:F0:0F:24:E4:11:24:4A:D6:48:0B:B0:3D
X509v3 Authority Key Identifier:
keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:3a:5f:d9:70:f9:06:fb:42:06:3a:5e:d7:df:45:f5:a5:27:
bc:07:42:13:4c:50:1f:09:c0:6e:dd:4b:a3:a8:8c:02:26:e6:
8a:cf:a1:91:8f:90:37:81:d2:fa:60:27:be:04:e9:7d:62:3d:
b8:2c:c9:e1:b5:15:be:52:0e:67:35:2b:df:ab:10:36:bc:ba:
4e:dc:f7:cf:31:4d:0a:77:19:4b:1f:3c:b1:aa:71:84:77:12:
73:9e:84:e5:45:59:62:87:69:01:9e:86:8f:c4:45:71:ff:23:
a4:57:83:6d:6e:01:c6:f2:c9:47:8b:fc:fe:5a:27:ef:de:ae:
63:b5:9c:d2:4c:11:89:dc:a7:7c:24:83:fe:8f:60:46:6a:46:
a4:20:d3:bf:34:8d:84:4c:00:bd:8f:17:90:ba:e0:72:b0:d3:
2c:fd:39:5d:7a:90:d2:b9:f1:9f:91:d1:a0:88:18:f0:fb:64:
ff:d0:5a:50:29:e8:6a:44:74:31:91:33:c8:7a:ae:39:b6:a0:
6b:57:f1:a3:c9:00:39:fc:ee:d2:6f:0b:9a:09:0c:26:33:d1:
61:fc:5d:0e:2d:6a:9a:47:d9:dd:c9:4f:f7:6f:0e:8b:db:f6:
00:19:8c:43:e3:96:a2:96:4e:a9:fc:88:b0:75:00:d6:20:68:
dd:ec:87:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:13 2025 by rpki-client