Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
File: 1-A4BfPFxFRmw_59lhYxJGy-l1As.mft (raw, json)
Hash identifier: NskF192NN3MQYoAOzjRUppwT3f2ft+fz7gsYfUIRfpQ=
Subject key identifier: E8:BB:87:97:CF:BA:30:F3:8E:CD:51:2E:CB:3F:C2:26:47:6C:8C:17
Authority key identifier: F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
Certificate issuer: /CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Certificate serial: 0199FC590CF7CA501CF0F11212F0CD83EC8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
Manifest number: 12B5
Signing time: Sun 19 Oct 2025 12:01:58 +0000
Manifest this update: Sun 19 Oct 2025 12:01:58 +0000
Manifest next update: Mon 20 Oct 2025 12:01:58 +0000
Files and hashes: 1: 0cg-ABQ5F07wo1zUc9k0K5Ly8to.roa (hash: Rkj4lRwYBqE7QsZIcMHOzWOT71EQLWq7kKtekOL+dc8=)
2: 1-A4BfPFxFRmw_59lhYxJGy-l1As.crl (hash: pUoCve/dNWNoA9a7Ie7aYGSsRv/PG9A1ZAIMeJuA53w=)
3: BQSRgsrnX8JnjaCE0pOBIpQ5ebc.roa (hash: h3wwdJrizfCgG4S/e0JuPLlbVsXDFB1J+2NlIEyZmsM=)
4: TntDV8H0cxrOGkDYWiJ5vwYXM6U.roa (hash: U/d+Fv7E47cWBLg/rWP1IbXjQkA8lalBfzHWx2kVZS4=)
5: Wem4R1HhiLTH9JF3d-SZOmy37u0.roa (hash: 7MdQgNFI/gw33JrzBz7PAxkDLsGz7qoxKurvzPVxBTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:59:0c:f7:ca:50:1c:f0:f1:12:12:f0:cd:83:ec:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f80e017cf1711519b0ff9f65858c491b2fa5d40b
Validity
Not Before: Oct 19 12:01:58 2025 GMT
Not After : Oct 20 12:01:58 2025 GMT
Subject: CN=e8bb8797cfba30f38ecd512ecb3fc226476c8c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:64:d6:56:26:c1:08:81:f5:d7:23:9b:d8:bd:
e8:7e:88:10:9c:aa:47:28:fd:1b:27:6d:86:c1:ec:
33:c9:2a:38:92:64:f9:4b:8c:c7:21:1e:4a:a0:75:
ab:b3:28:96:7a:a0:3d:f0:8e:0a:d3:59:9e:12:43:
97:8c:1f:d2:32:ef:6b:fc:c1:5a:fb:d6:6f:f2:d8:
05:5c:bd:d6:2d:64:b0:49:7f:93:87:e1:88:21:07:
9f:f5:4c:a0:07:3c:7c:cf:11:4c:20:e6:ca:61:12:
e7:fd:8e:d6:46:00:28:7b:e8:4f:8b:9d:6b:b7:96:
7e:42:dd:28:4a:2d:a8:80:fc:91:4b:21:a9:0a:06:
8b:ea:6c:f2:bb:d9:da:c8:3d:c8:a3:0a:8e:44:7d:
a1:24:a8:4a:55:bc:67:7e:5d:15:1c:0c:ca:55:52:
c1:0c:4b:a6:34:65:ba:5d:a8:f3:27:be:d2:bc:9d:
84:9f:99:8f:4d:0b:9a:56:1f:bb:1c:8a:07:b8:46:
79:c5:b6:67:9c:f0:09:d0:8f:25:f8:88:1c:6d:b4:
66:24:b4:e4:0c:c9:bb:41:3e:2e:a3:18:19:fe:87:
e5:6c:b9:4e:7e:13:da:2f:7f:53:3d:53:a8:e0:cc:
2c:31:7d:99:78:92:fb:45:4d:3b:7f:e5:98:f2:9a:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:BB:87:97:CF:BA:30:F3:8E:CD:51:2E:CB:3F:C2:26:47:6C:8C:17
X509v3 Authority Key Identifier:
keyid:F8:0E:01:7C:F1:71:15:19:B0:FF:9F:65:85:8C:49:1B:2F:A5:D4:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-A4BfPFxFRmw_59lhYxJGy-l1As.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/2dc136-400d-40e7-ad86-8ce60a5c8b1f/1/1-A4BfPFxFRmw_59lhYxJGy-l1As.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ad:53:40:2d:ff:86:bb:34:b6:92:d4:ac:06:6f:c9:47:45:
02:1f:b7:4a:e8:77:73:34:6f:e5:d7:9c:14:69:d5:2c:57:73:
f6:50:65:1a:5f:7f:bf:03:d5:fc:f7:fa:19:c8:57:61:b1:fe:
9f:ce:28:f7:9a:1d:0b:38:55:86:cf:c5:09:23:90:2f:47:11:
91:94:9a:29:b5:cc:75:15:13:ee:38:ba:f3:fe:f5:9b:15:72:
1d:43:04:95:66:56:bb:f3:74:f9:fe:0f:65:bc:2c:f5:eb:46:
76:ae:49:17:62:a9:85:e3:3b:c5:88:4e:1d:54:f1:81:2f:b1:
09:52:d0:df:77:bf:22:93:a5:dc:fe:b9:a6:2e:2b:e6:00:84:
33:88:1e:80:fe:39:93:e8:59:11:7d:b2:84:7d:04:54:86:0d:
17:fe:59:a2:f7:dc:bb:02:da:23:97:b0:e2:8c:8b:1e:0f:e2:
fc:81:e1:45:90:89:3e:6a:a0:0a:ec:f3:7b:1f:0c:e5:c4:fe:
f8:c2:d7:b4:59:22:5a:6e:4b:4d:9d:79:d1:ac:7a:3f:83:84:
6e:7d:b8:f5:da:c7:22:5d:c0:1e:14:40:65:9d:f2:a3:1f:30:
fb:83:8f:b8:0f:85:e9:a3:e9:e4:42:7a:ec:e5:e8:b8:d0:6d:
7c:14:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:04 2025 by rpki-client