Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
File: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft (raw, json)
Hash identifier: D4nSX75OuxaXJm4aIT0VS3A+VMjx5+52N9/SigZqRoM=
Subject key identifier: 0B:4E:EB:BE:3E:2A:6E:50:03:CE:05:A7:9C:AB:8E:6D:16:83:C5:D0
Authority key identifier: D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
Certificate issuer: /CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Certificate serial: 0199FD6B4F5424A5CAF28B4E77178F085DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
Manifest number: 0E1D
Signing time: Sun 19 Oct 2025 17:01:32 +0000
Manifest this update: Sun 19 Oct 2025 17:01:32 +0000
Manifest next update: Mon 20 Oct 2025 17:01:32 +0000
Files and hashes: 1: 1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl (hash: /SCantkVIm41I0i87rldQIgehzo9uJW6Py815qujtk8=)
2: 8Yr02VXLMmYbsDQBlzbUMjU-_4Y.roa (hash: c2krYBPX6FJP/S5DK6Bqlhz1YaUFixNmTfTx7RgZ1eo=)
3: AKY3-lmq_F-hZTNjYE8VF5Dbfhg.roa (hash: SNTyErzebd/AsxAYfH3hc+mIWE58J4HLCDSVxz7/7nE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:4f:54:24:a5:ca:f2:8b:4e:77:17:8f:08:5d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fb452a0ae33dfa52aaaacba794df1af6bc4334
Validity
Not Before: Oct 19 17:01:32 2025 GMT
Not After : Oct 20 17:01:32 2025 GMT
Subject: CN=0b4eebbe3e2a6e5003ce05a79cab8e6d1683c5d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:92:0d:31:d0:b3:77:1f:6a:73:7c:d0:47:
fb:aa:db:d6:c9:0f:c4:30:06:86:61:d6:ac:85:88:
da:49:3b:a8:2f:cc:4f:26:f0:e4:05:3a:68:e3:19:
e1:7e:a7:a4:22:bd:94:80:c7:60:d1:fe:d7:26:4b:
8d:1e:9a:1b:50:63:45:d0:34:c4:c7:d8:56:7b:2d:
96:52:a7:b5:af:25:9c:23:5b:92:0a:55:35:01:b3:
24:08:a5:e4:7d:cb:4c:29:52:07:eb:77:a1:1d:32:
9e:72:b0:a8:bf:86:08:3a:53:c6:e9:d4:25:0c:1a:
85:70:5f:ae:23:18:1b:d9:4e:53:de:cf:71:9b:ac:
4d:45:ea:24:29:65:ab:84:ad:b5:5d:eb:22:d4:7b:
41:b1:98:d6:8d:01:f1:2b:24:6e:a1:51:ed:5b:84:
53:e4:03:55:f2:75:f7:9f:32:6d:ae:7e:c7:33:b8:
20:af:56:32:2f:ec:ae:2b:e0:b8:b0:d2:62:2d:e7:
c9:4d:8a:f3:46:b6:63:b8:9e:8d:50:0f:33:33:8b:
d8:3e:fb:b8:9a:c4:ca:09:44:38:db:8f:03:ae:c3:
cb:a4:d5:dc:50:d0:73:6b:09:83:30:9f:e9:96:5b:
88:42:f5:f4:64:a7:83:7f:1e:18:53:fa:92:b7:d0:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:EB:BE:3E:2A:6E:50:03:CE:05:A7:9C:AB:8E:6D:16:83:C5:D0
X509v3 Authority Key Identifier:
keyid:D6:FB:45:2A:0A:E3:3D:FA:52:AA:AA:CB:A7:94:DF:1A:F6:BC:43:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vtFKgrjPfpSqqrLp5TfGva8QzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/3bdd7e-a729-49ad-85aa-f75962d30e36/1/1vtFKgrjPfpSqqrLp5TfGva8QzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:87:88:f6:93:32:13:4e:ab:a3:25:61:25:89:a8:4b:c8:9a:
8c:b6:09:06:c2:f5:60:72:18:e8:f4:f7:e7:26:0e:68:f5:ff:
96:e8:70:6d:09:21:8a:93:cd:18:3c:6a:12:b2:f2:30:a7:9e:
ea:31:c5:4c:36:b7:2b:f2:0c:86:ad:a9:42:9d:60:98:dc:c4:
38:51:10:6b:ab:09:b0:3d:81:ff:7b:89:28:90:bc:4c:17:f2:
d4:dd:e1:6a:11:21:50:9c:47:3c:df:f6:bb:45:eb:fc:4a:b4:
54:eb:4a:02:67:22:27:f4:ac:fd:c0:ea:93:8f:84:fa:8d:20:
9d:64:43:9f:80:45:33:28:31:be:73:14:a4:50:2a:8d:fb:9b:
42:b5:aa:f2:e1:9a:31:26:12:3d:72:9f:12:16:89:75:63:ba:
ca:33:0f:3c:c1:b4:f9:e3:fb:1a:0f:8f:c4:6e:17:45:ba:fd:
84:a0:ef:db:c2:ee:86:76:73:5d:6f:9f:ba:ef:c4:35:52:76:
92:73:e5:14:1f:88:14:12:05:c7:1d:0f:f5:8a:62:f7:46:ce:
83:99:21:cd:88:e3:95:e9:73:c7:df:a1:4b:ed:bb:04:f7:c6:
7b:1c:ad:b3:92:8b:23:89:9e:a0:a4:f6:05:31:48:59:48:1c:
c8:8a:00:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:17 2025 by rpki-client