Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: qc5e13H4rQ/VrHcWI16o8tA9TbJ1qXali6qrGkSk+CI=
Subject key identifier: B5:D0:4D:35:B3:2E:F0:24:86:8D:A5:8F:69:AD:14:CA:A6:6A:F8:E5
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 0199FC2146A033B0F7FF4A52839725330A97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:03 +0000
Manifest this update: Sun 19 Oct 2025 11:01:03 +0000
Manifest next update: Mon 20 Oct 2025 11:01:03 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: 4okODUxHQmSmjN5GKr5pGTNa2UGbJvpW79Ui1uMJqEM=)
2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:46:a0:33:b0:f7:ff:4a:52:83:97:25:33:0a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Oct 19 11:01:03 2025 GMT
Not After : Oct 20 11:01:03 2025 GMT
Subject: CN=b5d04d35b32ef024868da58f69ad14caa66af8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:58:c8:e4:ac:47:82:c0:b2:b9:fc:84:b9:
c0:59:12:58:36:7a:11:d2:f1:e8:d0:53:4f:2b:df:
00:75:e1:f0:68:2d:a9:6f:60:57:0a:b2:0f:2a:7e:
bf:00:c8:28:38:c9:3f:64:70:52:bf:01:b0:e6:c5:
1a:5a:db:93:56:ac:37:df:7f:ed:91:b3:47:99:a1:
f6:ce:0f:b2:74:f0:71:99:70:53:e6:8e:ef:94:ac:
9b:a2:5b:26:19:01:52:48:b4:40:a3:92:5c:fb:3e:
bb:90:28:56:c5:dd:e9:c4:4a:01:02:fc:7f:90:ac:
09:1c:29:1d:88:61:54:80:94:fc:85:c1:7c:9a:d6:
0c:77:a0:12:d9:5f:2d:36:a8:df:07:7e:e8:1f:d0:
60:83:db:5c:36:1d:9d:5e:47:e6:31:4d:8b:a4:4d:
b5:8a:d6:7c:19:f8:aa:d9:70:b2:ae:5a:d4:06:d8:
bf:5a:d8:23:3d:91:30:ba:80:20:be:7b:e6:a9:e7:
26:27:a9:88:6e:85:c2:6e:00:11:56:e3:4b:64:16:
12:3f:1e:76:7c:4d:30:db:d4:bd:8b:0f:c0:07:af:
34:82:91:88:39:4e:d8:4b:d1:1b:68:3a:8e:61:78:
c5:8f:98:45:e7:d8:8e:fa:a4:5d:54:9e:9f:cb:74:
3b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D0:4D:35:B3:2E:F0:24:86:8D:A5:8F:69:AD:14:CA:A6:6A:F8:E5
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:72:14:aa:2d:c1:69:87:af:25:31:06:cc:6c:15:ca:1d:bc:
96:11:d8:26:80:b9:54:f6:0f:04:32:fc:6d:1d:0a:6f:69:e5:
5a:39:23:91:89:a7:66:3c:bc:a5:4b:be:43:d9:66:ac:9f:4d:
74:86:45:a5:6c:8e:be:ee:5e:68:53:93:43:5c:fd:6f:e0:65:
57:e4:62:61:eb:65:98:0b:33:d3:dd:bd:30:c5:71:85:4b:c5:
87:71:f9:b9:fd:e6:4b:e6:ce:2a:54:47:36:86:60:fe:28:74:
d7:ab:a2:41:24:79:32:a6:d1:19:12:d6:15:dc:e7:14:0a:67:
e0:c7:8b:ac:fd:f0:6d:6a:bc:aa:f3:57:db:10:99:e7:7a:75:
f5:fe:32:28:aa:e7:53:38:29:d4:dc:4c:a1:7f:4a:eb:ba:88:
2a:c7:2c:79:a1:a4:09:81:57:5e:20:8a:e9:3d:84:c8:c7:2a:
09:f1:43:60:8c:20:62:90:60:ec:20:2f:d6:43:59:6c:86:ff:
65:f6:32:28:7d:2b:c1:5c:51:56:2c:7e:51:b9:28:0d:e8:11:
25:71:f7:08:ba:ae:aa:9d:15:6c:4a:cf:2c:95:90:f3:7a:05:
bf:1a:e4:29:a7:81:73:68:0f:31:66:e2:58:30:27:89:06:d6:
99:39:4b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:41 2025 by rpki-client