Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
File: 1EdMHAbL_elGFNZcfQX2FKbiOZg.mft (raw, json)
Hash identifier: kmrxMWLaAkMaCB2eIllFK+f3C3auFJb8K3ReRYFEb40=
Subject key identifier: 72:DA:7B:4D:73:8C:48:6B:56:3A:0E:DC:B8:32:C3:2F:CB:B7:45:4F
Authority key identifier: D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
Certificate issuer: /CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Certificate serial: 0199FC21C09C1F38B1B42F9D380609BDF712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: 1EdMHAbL_elGFNZcfQX2FKbiOZg.crl (hash: gCkXuLUuBarlcX0U3jh/jRKJyBwgyH+LOjmIPVUKmCA=)
2: vHVqwO_nqH9ZrYztprb6WC9Q2ng.roa (hash: hIMtMavbO55tW6Byt6lllDo5443jCsG0h73OMyjZ93A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:c0:9c:1f:38:b1:b4:2f:9d:38:06:09:bd:f7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4474c1c06cbfde94614d65c7d05f614a6e23998
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=72da7b4d738c486b563a0edcb832c32fcbb7454f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:68:94:39:3d:9e:61:8c:c8:a2:a4:22:e1:c1:
fc:fe:93:d4:63:e3:62:43:b0:42:05:f1:8e:5e:44:
15:2f:eb:7c:53:60:e2:0d:af:c2:ef:6d:35:92:d5:
21:8f:0c:57:50:92:be:1a:9b:bb:5a:8e:1e:d1:b5:
53:09:2e:92:db:4d:42:58:71:c4:f6:13:57:7c:6c:
c9:69:a0:b0:16:6a:6c:a6:34:b6:0d:5c:bc:89:83:
fd:dd:ab:8e:f3:34:14:35:42:93:04:48:89:49:47:
b8:45:94:2f:bf:8d:b7:65:a4:c3:06:b3:2d:b2:53:
72:31:57:ec:00:46:17:7a:a4:1e:05:1c:ae:16:46:
80:e7:4c:b7:d6:b4:8a:0d:77:e6:b8:d4:b1:de:a2:
0a:29:d0:80:a0:eb:dd:1d:e0:9c:d0:3d:5f:8b:1f:
b8:e8:ed:85:8b:ab:6d:3e:f2:5a:a8:db:ab:ca:29:
93:11:a3:24:f8:bb:e4:32:7d:25:40:b9:b9:5d:5f:
e2:9f:0f:4d:33:b4:00:25:e0:5e:b4:27:f1:66:21:
50:b3:ce:37:af:ab:67:72:f6:78:ea:cc:97:11:c7:
76:7a:ca:11:b7:ac:eb:25:bb:5e:39:3d:11:b9:db:
0f:80:60:9e:10:84:14:3b:9b:1b:e7:47:9b:64:d9:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DA:7B:4D:73:8C:48:6B:56:3A:0E:DC:B8:32:C3:2F:CB:B7:45:4F
X509v3 Authority Key Identifier:
keyid:D4:47:4C:1C:06:CB:FD:E9:46:14:D6:5C:7D:05:F6:14:A6:E2:39:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EdMHAbL_elGFNZcfQX2FKbiOZg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/d75759-8dcb-4532-8bfe-5b688acdb676/1/1EdMHAbL_elGFNZcfQX2FKbiOZg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:34:21:d7:e5:01:13:1f:a6:b2:ee:0c:d6:43:ad:88:76:a9:
44:ca:73:bc:b1:8f:39:33:9e:2a:49:3b:1d:a6:0e:66:70:d6:
28:0b:dc:e9:e3:b4:46:52:52:30:48:78:7f:9f:48:a5:f4:03:
61:e4:7c:e9:62:2c:29:60:15:82:2b:c1:14:23:5e:5e:76:cb:
a9:bf:b3:0e:db:cf:a0:c8:e9:18:ee:b9:e7:a1:39:6a:c6:a0:
92:54:1d:c8:78:67:76:19:63:59:34:de:ca:a0:95:20:3a:de:
90:7a:54:e5:33:5a:02:3f:3d:aa:6e:58:6e:7a:f2:89:e4:e5:
46:46:1b:53:3b:57:49:05:af:7c:35:1d:48:2b:cd:33:dd:95:
2b:da:e7:47:bf:04:8e:a9:72:1b:43:f3:4a:f0:ad:16:6c:4a:
7b:91:ab:ee:e7:e3:31:e0:de:6f:03:25:99:e7:ba:34:52:a2:
4d:0e:e1:1e:ea:97:f6:e8:85:5b:18:19:7c:87:75:b3:f4:20:
97:89:71:3d:bf:26:69:1a:2b:39:8b:40:53:38:29:29:8b:3f:
20:54:86:7c:03:ba:ab:e6:09:38:f4:a5:41:ed:c2:05:32:96:
18:51:a9:31:c1:66:a7:bb:4a:67:f2:17:84:dc:7e:6d:bb:1f:
e0:d3:68:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:41:56 2025 by rpki-client