Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
File: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft (raw, json)
Hash identifier: sF+5mbIbJSiLDS79p11Nq1kXkudsikO/T3rM5qAXpn4=
Subject key identifier: FF:06:AD:9D:DB:62:C4:D3:67:C8:42:48:14:48:44:D4:2A:BF:5A:3C
Authority key identifier: D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
Certificate issuer: /CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Certificate serial: 0199FBEBDD82B1F10C7661FDD3C371AD02C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: 1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl (hash: lltx7wYYPd82oYU2vmSiyVJWdGuHJcXqUQNW3YorywM=)
2: LYJYFx2T8LJuRb12iyxKMr93evo.roa (hash: YqeTPnX1EtI+d0+m7mdzwt1Rn2TJyLXd1g7Ztcm9f4Y=)
3: Xj3oVMUCt01u8YFkgqP2XNxNOYc.roa (hash: 6auuGJzllRElAKkh+2dzfD1kSlIMjRra0ICkRJJ17wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dd:82:b1:f1:0c:76:61:fd:d3:c3:71:ad:02:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6f2e142c44d5d51bc7e42ca0710f6b64ef11091
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=ff06ad9ddb62c4d367c84248144844d42abf5a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:dc:93:47:28:ad:da:7c:0c:49:e6:79:96:04:
72:30:4c:09:86:62:6c:72:a5:f7:59:0a:13:49:69:
e4:09:ea:7b:12:ce:de:3f:a5:b3:30:5e:15:e8:25:
03:e3:0c:e9:35:62:57:28:f5:65:9e:c7:c5:da:f9:
07:b6:4f:75:18:18:ba:77:e6:d3:34:63:53:af:02:
17:eb:71:72:66:5d:19:51:05:4a:fe:4c:1d:63:c3:
34:aa:dd:b9:a6:26:50:25:06:93:67:dc:91:76:bd:
bd:42:a1:01:d8:3f:58:20:a6:44:eb:99:15:0b:38:
77:75:d8:a6:93:f4:56:8a:41:b7:07:b7:80:81:f2:
3d:cc:fb:c1:5f:a6:ca:7a:0f:96:6a:6b:68:85:22:
26:dc:3d:ec:24:32:6d:68:77:c1:99:38:2c:99:ac:
c1:0a:b7:d6:df:3f:8a:9d:05:7e:85:76:2e:95:d4:
99:b8:63:69:a1:6b:25:45:cf:10:f9:11:49:22:c7:
3f:29:be:1d:75:85:d6:57:12:5a:83:2b:fd:74:1c:
0a:86:72:4f:34:5c:7a:8e:f0:c7:ea:74:9c:b1:ec:
a1:b3:6e:b0:f9:57:b1:71:cb:35:90:9e:7c:ae:27:
af:75:84:d2:68:97:fb:d9:76:93:ac:6d:13:56:e2:
6b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:06:AD:9D:DB:62:C4:D3:67:C8:42:48:14:48:44:D4:2A:BF:5A:3C
X509v3 Authority Key Identifier:
keyid:D6:F2:E1:42:C4:4D:5D:51:BC:7E:42:CA:07:10:F6:B6:4E:F1:10:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vLhQsRNXVG8fkLKBxD2tk7xEJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2e881a-8141-44a0-8f3c-cb7c9ecc7798/1/1vLhQsRNXVG8fkLKBxD2tk7xEJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:48:bf:18:e4:df:02:51:fd:eb:ba:b9:e9:de:50:53:95:0b:
53:1a:1a:17:e3:64:0a:7f:03:51:b2:f6:55:05:6b:e1:49:5d:
b6:12:be:01:2d:69:cb:96:8c:e3:90:79:a3:56:b0:3e:2e:4c:
60:7f:70:09:ec:26:a9:94:d2:ac:84:d2:68:60:18:61:d9:33:
35:de:04:2b:f4:12:02:0e:10:15:84:25:82:01:ff:54:47:ad:
3f:3c:80:6b:10:30:01:d9:4d:e4:d0:3c:74:b5:90:4e:77:e2:
e0:e7:9a:9e:db:4a:d1:b1:f9:2a:6b:f6:b3:5b:88:0d:fd:90:
3c:a4:ac:68:5b:ec:1b:79:96:9f:1a:67:9a:ac:c0:a7:38:d4:
22:1a:59:c8:d0:e7:60:d3:4f:fb:c4:93:3a:05:e6:d3:ae:d1:
5c:d6:e8:3b:64:60:da:a4:73:3a:a0:a3:f3:59:76:f8:a3:c2:
98:62:8e:6a:1c:a9:1a:ee:c3:a9:39:e2:db:39:59:03:4f:6c:
f5:14:78:0b:91:a5:be:6b:37:68:e5:b6:53:75:e5:0f:d1:d8:
21:85:7e:a4:8f:1d:5a:76:5c:f2:f4:5f:4e:4f:93:47:be:ec:
ef:e8:01:d5:31:2c:8d:59:4c:5b:62:bd:26:08:e6:2b:de:ce:
dc:90:aa:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:53:58 2025 by rpki-client