Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
File: 1PkhKd96qnFX4VlzwkdT4RjJBX0.mft (raw, json)
Hash identifier: aW12ml505icD4VMFOVIUpJYNjH9QBiMI+fmRgYVrI04=
Subject key identifier: E0:B3:7A:3C:74:9E:F3:9D:7E:99:D4:F7:9A:C7:41:BB:33:6F:F3:81
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 0199FC58D46A52E6BFAFC3C2722291DC7DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 1PkhKd96qnFX4VlzwkdT4RjJBX0.crl (hash: LxTubcY8oczKxSZ5FjLbi0w0m9jwrE1GhKVcdBu0ZD4=)
2: qe7WgTc0pmEzzldB9WeXLDwRwuY.roa (hash: QJYNnjPlPIICfSb9VCBEBsTZ9KLpm8+zxTVc8XyL9RY=)
3: yPpTiNnoGdGVkfC9weXZ8IcYOvo.roa (hash: GPROq8bCcJ/0NryOKaC/XQSUJzGn/7Y4gmLVXUsuJPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d4:6a:52:e6:bf:af:c3:c2:72:22:91:dc:7d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=e0b37a3c749ef39d7e99d4f79ac741bb336ff381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3e:7c:72:89:cc:17:62:86:af:54:ea:31:f0:
59:5b:04:3f:8f:e4:53:19:21:d8:2e:25:1e:56:40:
ec:59:10:7b:ee:c3:d6:0d:ef:e0:e7:1f:8c:4f:f8:
66:82:ba:a9:5c:d6:7c:21:6e:96:26:3c:31:d0:6f:
a6:7b:f8:67:fd:8a:7d:b2:9c:4a:99:41:ac:77:d9:
26:7e:1a:5c:89:51:b2:66:62:3a:91:1e:8c:c4:9d:
8d:69:08:83:b8:39:37:73:82:60:1a:98:36:1f:f9:
fc:b4:92:fd:69:fc:2c:7f:9c:1f:11:bf:93:24:43:
27:9d:c1:22:ad:f2:dc:7a:78:04:d6:30:36:c5:f0:
95:20:e3:1c:22:3b:c4:10:c2:98:d3:d5:a6:16:24:
04:d3:c6:31:33:1d:5e:64:b8:fb:c8:6f:9c:36:3a:
3a:11:f3:b3:05:8b:5c:1d:81:7d:7a:28:25:f9:56:
ad:6e:b1:2a:34:dd:91:7f:de:43:5f:ff:97:e5:bf:
55:08:1c:40:23:22:27:b3:35:da:63:4d:a8:96:03:
f5:10:25:2d:2c:06:5d:e5:08:80:72:4d:70:5b:18:
cf:f2:3a:80:ce:00:8a:6a:71:39:e2:eb:b7:3d:83:
41:08:1c:44:5b:27:77:fb:91:4c:48:4b:0c:aa:9f:
df:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B3:7A:3C:74:9E:F3:9D:7E:99:D4:F7:9A:C7:41:BB:33:6F:F3:81
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:11:a3:78:d6:d3:d1:27:3b:c0:5c:3e:c5:51:61:6c:f5:95:
de:f1:23:a5:77:7a:f2:36:db:a7:38:62:34:b7:6d:d7:66:92:
35:65:02:c0:5e:63:38:17:36:12:dd:9f:8a:97:1f:3e:25:76:
65:ae:ed:f1:c3:65:6d:84:6b:22:69:34:40:d7:fb:bf:0e:14:
9f:cf:37:f3:3f:ba:d8:61:ec:cd:45:54:7e:c4:31:c6:72:3a:
f4:e7:ff:1d:32:b1:39:fe:d0:86:b6:4d:77:ca:82:9f:94:83:
a3:52:75:a7:73:ff:94:2e:a8:4f:a4:20:89:2d:12:75:55:ed:
3b:14:30:0d:65:00:e9:24:0f:9e:ce:8e:af:c7:11:3e:75:8f:
87:63:27:87:0a:c8:ca:e3:31:28:1c:40:d6:ef:07:48:75:43:
ec:a8:1a:ef:77:b7:d0:5d:8e:f4:41:c0:c9:8a:76:cb:74:13:
f0:91:db:30:a0:f4:ce:ec:7d:b1:75:8c:85:e7:4c:b7:2e:67:
b9:e4:64:d8:5a:c7:5a:62:ba:df:12:6d:6d:4b:92:1d:66:66:
dd:fd:0c:2e:f1:f7:5c:3e:27:02:22:a1:c3:67:1f:fc:47:88:
4d:c0:b4:ed:47:e5:bd:af:f0:aa:ce:d2:54:93:32:4c:10:6e:
09:24:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:25 2025 by rpki-client