Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
File: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft (raw, json)
Hash identifier: yqsJuTvqPVYoqomm4yHPdkC+uyLHQARvPQHZX3j9cJc=
Subject key identifier: E1:2B:38:EB:16:E1:E9:3B:67:08:01:36:BA:48:EA:5A:80:B5:A4:D0
Authority key identifier: 6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
Certificate issuer: /CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Certificate serial: 0199FC58FE16FB8FFDB229C68940DEEBECA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
Manifest number: 0F57
Signing time: Sun 19 Oct 2025 12:01:54 +0000
Manifest this update: Sun 19 Oct 2025 12:01:54 +0000
Manifest next update: Mon 20 Oct 2025 12:01:54 +0000
Files and hashes: 1: a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl (hash: Uz0sdrcB/3qgYAcdaE3DoQbOiAfnXrxFrpnxhd1XECw=)
2: ttVoIKzTT0XKllFStzVaYvUJzr8.roa (hash: UbtbO9ulOo1L1dwjq6p3bONW5eyopaXSfqTO9fveMwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:fe:16:fb:8f:fd:b2:29:c6:89:40:de:eb:ec:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5157e419fb5a18ba2beaf2de545f2bb3decfd1
Validity
Not Before: Oct 19 12:01:54 2025 GMT
Not After : Oct 20 12:01:54 2025 GMT
Subject: CN=e12b38eb16e1e93b67080136ba48ea5a80b5a4d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:2d:98:a4:55:04:c2:26:f5:d5:15:c5:2f:4a:
29:ed:4f:d5:2c:de:e2:c5:aa:1a:16:24:1c:83:a9:
9a:39:ed:19:27:1a:b4:33:f2:c4:31:fd:ec:96:35:
92:a0:da:2f:2a:ae:07:b3:af:94:b2:b0:17:fb:6b:
87:66:a5:3a:24:e8:bb:ce:85:5b:d0:a9:98:b7:35:
5a:be:ad:15:84:90:37:91:bd:79:a5:36:4c:5b:be:
a2:67:1c:c3:50:e9:44:41:b5:08:b7:04:8c:65:0d:
72:75:ff:e6:f4:fb:58:d3:a0:4f:ac:bf:b8:bf:04:
fb:46:1c:20:31:db:92:55:3d:99:72:9d:26:75:21:
14:f3:47:e4:db:d4:29:2b:63:52:ae:3f:3d:cf:33:
b4:29:ed:8b:14:0a:1b:d1:79:0f:78:bf:c6:27:71:
a3:cc:ec:d3:33:9f:0b:a6:80:4e:6b:aa:b6:34:9a:
e8:4b:a9:35:0a:b5:6b:1f:ce:b6:32:33:aa:43:ca:
5c:ca:c4:39:76:ef:c4:7d:f1:53:22:b0:21:91:c7:
39:ba:49:5d:d7:a0:a7:0b:c7:4a:03:2e:7c:36:d0:
6e:f5:59:f0:53:8e:f4:ea:e7:1f:6b:bc:74:56:a4:
f4:dd:62:94:01:2a:15:8a:af:a9:ea:d6:67:55:d5:
11:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2B:38:EB:16:E1:E9:3B:67:08:01:36:BA:48:EA:5A:80:B5:A4:D0
X509v3 Authority Key Identifier:
keyid:6B:51:57:E4:19:FB:5A:18:BA:2B:EA:F2:DE:54:5F:2B:B3:DE:CF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/b6ca1b-67dc-404f-8d61-32891a58337f/1/a1FX5Bn7Whi6K-ry3lRfK7Pez9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b9:1e:2f:85:2b:50:8c:4d:71:98:f9:db:c2:d5:8e:1a:96:
60:20:bb:0e:04:66:48:89:0d:f6:65:22:2c:34:8b:13:06:49:
d0:a5:1b:e2:1e:6f:da:2b:d0:89:48:b2:2e:fc:cb:32:4c:de:
32:89:e8:cd:13:3d:fb:2e:e1:ac:55:c7:01:f7:92:a3:0a:22:
8c:ef:71:23:f7:ef:5c:f3:61:70:35:1a:54:81:2a:d9:7f:86:
ab:a6:91:8c:5a:13:6c:fe:00:1d:78:ad:71:bf:95:a2:43:0c:
6f:0c:55:2d:51:ad:5b:6a:e2:ad:38:29:7b:f8:67:15:45:77:
cb:e5:8e:40:72:c0:f4:64:1c:27:e6:9c:38:75:12:cb:03:c9:
90:6a:a0:4c:98:89:d2:c5:66:ac:03:47:6e:3e:bf:56:9d:a6:
5f:90:2a:86:de:54:80:57:d4:f4:f8:c3:38:55:1a:07:69:a5:
0d:04:80:df:0e:3a:2c:94:b3:1e:ad:00:bb:8c:c0:b7:8c:84:
b8:6b:f1:b4:f9:11:a6:eb:ee:46:b7:c2:c6:f2:a9:6d:80:bb:
0c:1c:62:ba:9b:4a:1e:18:35:3a:74:ac:ee:b1:80:92:8c:97:
ce:f2:42:e8:f0:04:47:06:33:87:31:c8:62:5b:8f:02:de:64:
fa:4d:df:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:10 2025 by rpki-client